Microsoft Teams vulnerability allows attackers to deliver malware to employees

Security researchers have uncovered a bug that could allow attackers to deliver malware directly into employees’ Microsoft Teams inbox. “Organisations that use Microsoft Teams inherit Microsoft’s default configuration which allows users from outside of their organisation to reach out to their staff members,” Jumpsec researcher Max Corbridge explained. With a social engineering pretext to prime the target, a malware delivery attack exploiting this vulnerability has a considerable chance of success. Bypassing security controls Many organizations … More →

The post …

attackers bug collaboration configuration default don't miss employees enterprise explained hot stuff jumpsec malware microsoft microsoft 365 microsoft teams organisation red team researcher researchers security security researchers smbs staff teams vulnerability