Cybersecurity · 2 views
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Attackers posed as IT support on Teams in two intrusions, abusing AD CS to gain privileged access and copying company data in one case.
Summary
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain controller.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedMore from Cybersecurity
Continue reading recent Cybersecurity coverage
- Malicious Claude Code Extension Served in Cursor Supply Chain AttackContinue reading
- Synology warns of C3RB3R ransomware attacks targeting NAS devicesContinue reading
- Why do we keep testing employees for yesterday’s phishing attacksContinue reading
- Alpine Linux rebuilds GitLab after attempted RCE attackContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow