Microsoft Teams – Experimental News Clipping Site

The Register: The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams

Aug 27, 2025

—

by

Source URL: https://www.theregister.com/2025/08/27/storm0501_ransomware_azure_teams/ Source: The Register Title: The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams Feedly Summary: Don’t let it happen to you Storm-0501, a financially motivated cybercrime crew, recently broke into a large enterprise’s on-premises and cloud environments, ultimately exfiltrating and destroying data within the org’s Azure…

Slashdot: AI Note Takers Are Increasingly Outnumbering Humans in Workplace Video Calls

Jul 2, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://slashdot.org/story/25/07/02/194224/ai-note-takers-are-increasingly-outnumbering-humans-in-workplace-video-calls Source: Slashdot Title: AI Note Takers Are Increasingly Outnumbering Humans in Workplace Video Calls Feedly Summary: AI Summary and Description: Yes Summary: The emergence of AI-powered note-taking apps as substitutes in workplace meetings introduces unique challenges in terms of legality and privacy. As these applications become prevalent, especially with popular platforms embedding…

Slashdot: New South Wales Education Department Caught Unaware After Microsoft Teams Began Collecting Students’ Biometric Data

May 19, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://yro.slashdot.org/story/25/05/19/1331229/new-south-wales-education-department-caught-unaware-after-microsoft-teams-began-collecting-students-biometric-data?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: New South Wales Education Department Caught Unaware After Microsoft Teams Began Collecting Students’ Biometric Data Feedly Summary: AI Summary and Description: Yes Summary: The text highlights a significant privacy breach involving the automatic collection of biometric data from students by Microsoft Teams, which was enabled by default. This incident…

Cloud Blog: Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines

May 6, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/unc3944-proactive-hardening-recommendations/ Source: Cloud Blog Title: Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines Feedly Summary: Background UNC3944, which overlaps with public reporting on Scattered Spider, is a financially-motivated threat actor characterized by its persistent use of social engineering and brazen communications with victims. In early operations, UNC3944 largely targeted telecommunications-related organizations to…

Hacker News: Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

Feb 15, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.volexity.com/blog/2025/02/13/multiple-russian-threat-actors-targeting-microsoft-device-code-authentication/ Source: Hacker News Title: Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses a series of spear-phishing campaigns carried out by Russian threat actors targeting Microsoft 365 accounts using Device Code Authentication. The attacks leverage social engineering tactics, exploiting political…

The Register: If you dread a Microsoft Teams invite, just wait until it turns out to be a Russian phish

Feb 15, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/02/15/russia_spies_spoofing_teams/ Source: The Register Title: If you dread a Microsoft Teams invite, just wait until it turns out to be a Russian phish Feedly Summary: Roses aren’t cheap, violets are dear, now all your access token are belong to Vladimir Digital thieves – quite possibly Kremlin-linked baddies – have been emailing out bogus…

Microsoft Security Blog: Storm-2372 conducts device code phishing campaign

Feb 14, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2025/02/13/storm-2372-conducts-device-code-phishing-campaign/ Source: Microsoft Security Blog Title: Storm-2372 conducts device code phishing campaign Feedly Summary: Microsoft Threat Intelligence Center discovered an active and successful device code phishing campaign by a threat actor we track as Storm-2372. Our ongoing investigation indicates that this campaign has been active since August 2024 with the actor creating lures…

Bulletins: Vulnerability Summary for the Week of December 16, 2024

Jan 27, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.cisa.gov/news-events/bulletins/sb24-358 Source: Bulletins Title: Vulnerability Summary for the Week of December 16, 2024 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 1000 Projects–Attendance Tracking Management System A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is…

The Register: Ransomware scum make it personal for <i>Reg</i> readers by impersonating tech support

Jan 22, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/01/22/ransomware_crews_abuse_microsoft_teams/ Source: The Register Title: Ransomware scum make it personal for <i>Reg</i> readers by impersonating tech support Feedly Summary: That invitation to a Teams call on which IT promises to mop up a spamstorm may not be what it seems Two ransomware campaigns are abusing Microsoft Teams to infect organizations and steal data,…

Alerts: CISA Releases Microsoft Expanded Cloud Logs Implementation Playbook

Jan 15, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.cisa.gov/news-events/alerts/2025/01/15/cisa-releases-microsoft-expanded-cloud-logs-implementation-playbook Source: Alerts Title: CISA Releases Microsoft Expanded Cloud Logs Implementation Playbook Feedly Summary: Today, CISA released the Microsoft Expanded Cloud Logs Implementation Playbook to help organizations get the most out of Microsoft’s newly introduced logs in Microsoft Purview Audit (Standard). This step-by-step guide enables technical personnel to better detect and defend against…

Tag: Microsoft Teams