🧰 Microsoft Teams

The items that name it 10

• From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
  writeup2026-10-30
• Passkey-themed social engineering leads to identity and cloud compromise
  writeup2026-09-09

  Used by actors to send passkey-themed phishing messages from already compromised trusted employee accounts.

• Inside Knight Office, a New M365 AiTM Phishing Kit
  writeup2026-09-02

  Spoofed as the source of a phishing lure page implying a voicemail to download

• Next-Gen Phishing Tactics Users Aren’t Ready For | Huntress
  article2026-08-28

  Impersonated in fake video conference overlay attacks

• [tl;dr sec] #342 - Figma's Agentic Detection, Agent Identity, Uber's Agent-(E)DR
  article2026-08-20
• CosmosEscape: Taking Over Every Database in Azure Cosmos DB
  writeup2026-07-30

  Stores data in Cosmos DB, potentially accessible via the vulnerability

• Anatomy of a Deno-Based Proxy & RAT
  writeup2026-06-15

  Used by attacker to impersonate internal IT support via external tenant account

• Inside Kali365, a Device Code Phishing Ecosystem | Huntress
  writeup2026-06-11

  Used as a lure template impersonation target

• PathSentinel Radar
  tool2026-05-16
• Sift — Open-Source Secrets/Credential Scanner
  repo

  channel files scanned by Sift (m365 command)