Microsoft Teams Plans External Deepfake Detection and Impersonation Warnings
Microsoft plans Teams integration with third-party deepfake detection and impersonation warnings for meetings, both features currently in development.
Cloud Security
More news
Page 1 / 4 · 28 articles
Stolen Azure App Identities Let JadePuffer Turn Cloud Access Into Destruction
Microsoft links JadePuffer to destructive Azure attacks using stolen service principals to delete storage, Key Vaults and apps in minutes.
Cloudflare Erases Reused Container Disks After Cross-Tenant Data Leak Flaw
Cloudflare fixed a Containers flaw leaking residual disk data across tenants, erasing reused blocks by Sept 19, 2026. No action needed.
Microsoft Dismantles AI-Powered EvilTokens Network Behind 12,000 Email Account Takeovers
Microsoft seized 50 sites to dismantle EvilTokens, an AI phishing service that abused device-code flow to hijack 12,000 inboxes for BEC fraud.
Stolen Cloudflare Key Turned Brevo Widgets Into a ClickFix Delivery Channel
Stolen Cloudflare API key let attackers hijack Brevo widgets via edge Worker, exposing up to 100,000 sites to ClickFix lures on Sept 14, 2026.
Vishing Crews Use Personal Phones to Break Into Microsoft 365 Without Touching Corporate Devices
Attackers target personal phones with vishing to steal Microsoft 365 credentials, bypass MFA, enumerate environments via Graph and exfiltrate data.
Phishing Campaign Hides Behind Multi-Hop Google Redirects to Steal Credentials
Phishing campaign abuses Google Meet, DoubleClick and Search redirects to evade gateways, personalize fake logins and steal credentials via Telegram.
PREY-0058 Uses Help-Desk Calls and Residential Proxies to Defeat Microsoft 365 MFA
PREY-0058 impersonates IT help desks to steal Microsoft 365 session tokens via AiTM phishing and residential proxies, targeting executives for data theft.
BigBear 2.0 Phishing Service Hijacked Microsoft 365 Sessions at 258 Organizations
BigBear 2.0 phishing service compromised Microsoft 365 at 258 organizations using AiTM proxies to steal sessions after MFA and hijack accounts.