Microsoft Teams vulnerable to GIF assault
What if a seemingly harmless animated GIF image suddenly snatches your Microsoft Teams account and other sensitive information stored within? What if using the same image that you inadvertently open, the attacker can take over your business and even attack other accounts to which your account is connected?
(firmenpresse) -
Vulnerability will allow cyber attacker to send a malicious GIF to unsuspecting Teams consumers.
Cyber researchers have unearthed a flaw in Microsoft Teams that will have permitted attackers to consider above users’ accounts by means of a malicious GIF file.
A workforce from security vendor CyberArk observed a subdomain takeover vulnerability in the collaboration tool, which now has much more than 44 million every day active consumers.
The flaw, which continues to be patched by Microsoft, would have permitted attackers to scrape users' data and get over an organisation’s Teams accounts using a GIF.
According to CyberArk, because users wouldn’t need to share the GIF - just see it - to become impacted, vulnerabilities like this have the capability to spread instantly.
“The fact the victim only has to see the crafted message to get impacted is actually a nightmare from a security viewpoint,” CyberArk wrote in a blog submit.
“Every account that could have been impacted by this vulnerability could also be a spreading stage to all other company accounts. The GIF could also be sent to groups (a.k.a Teams), which helps make it even less difficult for an attacker to get control more than users speedier and with fewer methods.”
The vulnerability would have affected the two Teams desktops or web browser versions if compromised. The flaw’s discovery comes throughout a significant surge in demand for collaboration tools such as Teams, Zoom, Slack and Skype for Business driven by the spread of COVID-19 plus the will need for staff to work from home.
Themen in dieser Pressemitteilung:
Unternehmensinformation / Kurzprofil:
Bereitgestellt von Benutzer: thomasshaw9688
Datum: 31.05.2020 - 07:35 Uhr
Sprache: Deutsch
News-ID 613435
Anzahl Zeichen: 2128
contact information:
Town:
Los Angels
Kategorie:
Motorcycles
Typ of Press Release: please
type of sending: don't
Diese Pressemitteilung wurde bisher 290 mal aufgerufen.
Die Pressemitteilung mit dem Titel:
"Microsoft Teams vulnerable to GIF assault"
steht unter der journalistisch-redaktionellen Verantwortung von
Malicious GIF (Nachricht senden)
Beachten Sie bitte die weiteren Informationen zum Haftungsauschluß (gemäß TMG - TeleMedianGesetz) und dem Datenschutz (gemäß der DSGVO).