Do Son A new DragonForce backdoor hides in Microsoft Teams TURN relays and falls back to MQTT. See how it works and how defenders can spot it.
Microsoft Teams
The OpenAI Dots AI assistant works around the clock on its own cloud computer, links 4,000 apps, and plugs into Slack and Teams.
Discover how OpenAI enterprise collaboration tools like ChatGPT Space and Dots are transforming workplace productivity and challenging Microsoft Copilot.
ddos-admin CVE Alerts turns CVE, KEV, and EPSS data into real-time alerts via email, Slack, Teams, and GitHub Issues. Start your 14-day free trial.
Microsoft Teams IT support impersonation lets attackers plant a Node.js implant and pivot to domain controllers over WinRM. See how to defend.
Discover how the Spring Ring vishing campaign uses Microsoft Teams phishing tactics to trick employees into installing malware and giving up remote access.
DragonForce ransomware deployed Backdoor.Turn, a Microsoft Teams backdoor that hides C2 in Teams TURN relays. Symantec details the novel technique.
Discover how the controversial new Microsoft Teams Workplace Check-in feature tracks employee office attendance through corporate Wi-Fi connections.
Learn how a Microsoft Teams vishing attack leverages email flooding and Quick Assist to execute a dangerous Nimbus RAT deployment chain.
BlueVoyant unmasks "Lorem Ipsum": a well-funded campaign using SEO poisoning and signed MS Teams installers to deploy stealthy backdoors via image files.
Rapid7 unmasks Iranian APT MuddyWater using a Chaos ransomware "false flag" to hide state-sponsored espionage. See how they bypassed MFA via MS Teams.
Microsoft Teams for Android is adding native SIP support. Connect Zoom, WebEx, and Teams directly without installing extra apps. Full rollout starts June 2026.
UNC6692 uses MS Teams impersonation to deploy the SNOW suite. Learn how "living off the cloud" bypasses reputation filters to hijack Active Directory.
Microsoft warns of a Teams campaign using fake IT support to hijack workstations via Quick Assist, move laterally with WinRM, and steal data using Rclone.
Palo Alto Networks patches critical flaws in Cortex XDR and ADEM, including a SYSTEM-level privilege escalation. Secure your security tools—patch today!
Microsoft releases emergency update KB5085516 to fix a critical bug falsely claiming users are "offline." Restore access to OneDrive, Teams, and Copilot now.
BlueNoroff hackers use fake "audio issues" on Teams calls to trick macOS users. The "fix" runs terminal commands that steal Keychains. Watch out.
Chinese APT Silver Fox is using a Cyrillic false flag in an SEO poisoning campaign impersonating Microsoft Teams. The attack installs ValleyRAT for espionage and financial fraud.
Windows 11's missing Agenda View returns, but its WebView 2 implementation causes high CPU usage. Microsoft accepts the trade-off for easier Copilot/Teams integration.
Check Point exposed four critical flaws in Microsoft Teams. Attackers could forge executive caller IDs, silently edit messages without trace, and spoof notifications for BEC and espionage.
Microsoft Teams is rolling out a new opt-in feature in December to automatically detect if employees are in the office by monitoring their Wi-Fi connection.
Microsoft Threat Intelligence details how APTs abuse Teams and Entra ID integration for recon, vishing, and C2. Attackers use RMM tools and spoofed accounts to breach enterprise environments.