Ever hopped on a Microsoft Teams meeting? What you didn’t know is that everyone on that call could have direct access to everything in your account: email, files, calendar, and more. The vulnerability? Just requires sharing a whiteboard screen on the meeting - and you can steal everyone’s account tokens. The tokens allow full access to the Microsoft 365 account: mail, files, calendar, SharePoint, cloud. Full account takeover, for every mobile user in the meeting, simultaneously.
Nice2Meet: We Turned Teams Mobile Meetings into a Silent Account Takeover
Summary
Ever hopped on a Microsoft Teams meeting? What you didn’t know is that everyone on that call could have direct access to everything in your account: email, files, calendar, and more. The vulnerability? Just requires sha…
Nice2Meet: We Turned Teams Mobile Meetings into a Silent Account Takeover
Report an error
The correction channel is not available yet. You can copy the article reference below for later.
Correction instructions