AI News HubLIVE
站內改寫1 分鐘閱讀

待翻譯:Nice2Meet: We Turned Teams Mobile Meetings into a Silent Account Takeover

AI 服務暫時不可用,以下為來源摘要,待恢復後補全翻譯:Ever hopped on a Microsoft Teams meeting? What you didn’t know is that everyone on that call could have direct access to everything in your account: email, files, calendar, and more. The vulnerability? Just requires sha…

來源Hacker News AI作者: talhof8

AI 服務暫時不可用,以下為來源正文,待恢復後補全翻譯。

Ever hopped on a Microsoft Teams meeting? What you didn’t know is that everyone on that call could have direct access to everything in your account: email, files, calendar, and more. The vulnerability? Just requires sharing a whiteboard screen on the meeting - and you can steal everyone’s account tokens. The tokens allow full access to the Microsoft 365 account: mail, files, calendar, SharePoint, cloud. Full account takeover, for every mobile user in the meeting, simultaneously.