negativeSYS.SOURCE: The Hacker News• 2026-11-02T16:38:45+05:30
Malicious Actors Exploit Microsoft Teams and AD CS Vulnerabilities to Compromise Corporate Networks
Attackers used social engineering via Microsoft Teams to gain remote access, then exploited misconfigured Active Directory Certificate Services (AD CS) to steal privileged account credentials, leading to data breaches. The incident highlights vulnerabilities in remote support protocols and certificate management.
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain controller.
Microsoft said in a report that it investigated two such intrusions, one of which resulted in company
*** END OF TRANSMISSION ***