待翻譯:Nice2Meet: We Turned Teams Mobile Meetings into a Silent Account Takeover
AI 服務暫時不可用,以下為來源摘要,待恢復後補全翻譯:Ever hopped on a Microsoft Teams meeting? What you didn’t know is that everyone on that call could have direct access to everything in your account: email, files, calendar, and more. The vulnerability? Just requires sha…
AI 服務暫時不可用,以下為來源正文,待恢復後補全翻譯。
Ever hopped on a Microsoft Teams meeting? What you didn’t know is that everyone on that call could have direct access to everything in your account: email, files, calendar, and more. The vulnerability? Just requires sharing a whiteboard screen on the meeting - and you can steal everyone’s account tokens. The tokens allow full access to the Microsoft 365 account: mail, files, calendar, SharePoint, cloud. Full account takeover, for every mobile user in the meeting, simultaneously.