Cybersecurity firm CyberArk discovered a vulnerability that could have allowed hackers to steal Microsoft Teams users’ access tokens by sending GIFs. It reported the issue on March 23, and Microsoft issued a patch on April 20. — SCMP
Microsoft has patched a vulnerability in its popular chat and conferencing app Teams, which could have allowed hackers to scrape user data and ultimately take over entire organisations’ accounts just by sending victims modified GIFs that look no different from regular moving images.
In an article on Monday, cybersecurity firm CyberArk said it discovered that two subdomains under the Microsoft Teams site were vulnerable to takeovers.
