Microsoft Lures Populate Half of Credential-Swiping Phishing Emails

Almost half of phishing attacks in 2020 aimed to swipe credentials using Microsoft-related lures – from the Office 365 enterprise service lineup to its Teams collaboration platform. According to a Tuesday report by Cofense, which analyzed millions of emails related to various attacks, 57 percent...

The vulnerability of Microsoft Teams for iOS, related to the lack of protection for sensitive data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Teams corporate platform for iOS is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Experiencing performance and disconnects while using Optimized Microsoft Teams with Citrix Workspace App for Windows 2102

Performance and stability issues being experienced when joining Microsoft Teams meetings while using Citrix Optimized Microsoft Teams with Citrix Workspace App for Windows 2102. The shared display content may be slow and user could potentially disconnect from the meeting. And Citrix Workspace App...

Microsoft Teams iOS Information Disclosure Vulnerability

...

PT-2021-2074 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for iOS affected versions not specified Description: The issue is related to a lack of protection for sensitive data in Microsoft Teams for iOS, which could allow a remote attacker to gain unauthorized access to protected...

KLA12069 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability ...

Microsoft Teams iOS Information Disclosure Vulnerability

Microsoft Teams is a software for online meetings, chat, and cloud storage capabilities from Microsoft USA. An information disclosure vulnerability exists in Microsoft Teams iOS. The following products and versions are affected: Microsoft Teams for iOS...

The state of apps by Microsoft identity: Azure AD app gallery apps that made the most impact in 2020

2020 was an unprecedented year, to say the least. The COVID-19 global pandemic drastically changed how we work, learn, and collaborate. Organizations had to find new ways to connect and maintain productivity while providing secure access to critical apps and resources. Our own Microsoft services,...

Microsoft Teams < 1.3.0.13000 Remote Code Execution

The version of Microsoft Teams installed on the remote Windows host is a version prior to 1.3.0.13000. It is, therefore, affected by remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number....

Microsoft Teams Installed (Windows)

Binary data microsoftteamswininstalled.nbin...

CVE-2020-10146

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for al...

CVE-2020-10146

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for al...

CVE-2020-10146 Microsoft Teams displayName stored cross-site scripting vulnerability

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for al...

CVE-2020-10146

CVE-2020-10146 concerns a stored cross-site scripting vulnerability in the Microsoft Teams online service, affecting the displayName parameter. The issue could be exploited on Teams clients to obtain sensitive information such as authentication tokens and potentially execute arbitrary commands. M...

Microsoft Teams Remote Code Execution

A remote code execution vulnerability exists in Microsoft Teams. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Patch Tuesday, Good Riddance 2020 Edition

Microsoft today issued its final batch of security updates for Windows PCs in 2020, ending the year with a relatively light patch load. Nine of the 58 security vulnerabilities addressed this month earned Microsofts most-dire "critical" label, meaning they can be abused by malware or miscreants to...

Zero-Click Wormable RCE Vulnerability Reported in Microsoft Teams

A zero-click remote code execution RCE bug in Microsoft Teams desktop apps could have allowed an adversary to execute arbitrary code by merely sending a specially-crafted chat message and compromise a target's system. The issues were reported to the Windows maker by Oskars Vegeris, a security...

Zero-Click Wormable RCE Vulnerability Reported in Microsoft Teams

A zero-click remote code execution RCE bug in Microsoft Teams desktop apps could have allowed an adversary to execute arbitrary code by merely sending a specially-crafted chat message and compromise a target's system. The issues were reported to the Windows maker by Oskars Vegeris, a security...

The vulnerability of the corporate platform Microsoft Teams, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the corporate platform Microsoft Teams is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns

A spike in recent phishing and business email compromise BEC attacks can be traced back to criminals learning how to exploit Google Services, according to research from Armorblox. Social distancing has driven entire businesses into the arms of the Google ecosystem looking for a reliable, simple w...