Xakerlar Microsoft Teams'da IT yordam xizmati xodimlarini taqlid qilib, masofaviy kirish huquqini qo'lga kiritish va Active Directory Certificate Services (AD CS) tizimini suiiste'mol qilish maqsadida harakat qildilar, tasdiqlangan qo'llab-quvvatlash sessiyalarini imtiyozli autentifikatsiya yo'llariga aylantirdilar. Microsoft 2026-yil 30-oktabrda sertifikat shablonlarini suiiste'mol qilish va NTLM relay bilan bog'liq ikkita hujumni oshkor qildi. Hujumlar Teams'dagi zaiflikdan foydalanmadi. Buning o'rniga operatorlar […]
Hackers impersonated IT help desk personnel on Microsoft Teams to gain remote access and abuse Active Directory Certificate Services (AD CS), turning approved support sessions into privileged authentication paths. Microsoft disclosed two intrusions on October 30, 2026, involving certificate template abuse and NTLM relay. The attacks did not exploit a Teams vulnerability. Instead, operators combined […] The post Hackers Impersonate IT Help Desk on Microsoft Teams to Gain Domain Admin Access via AD CS Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
