Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data

The Hacker News · Monday, 2 November 2026 at 11:08 (2d ago) · Original article ↗

Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain controller.

Microsoft said in a report that it investigated two such intrusions, one of which resulted in company

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]

BleepingComputer 4h ago

Security

North Korean fake job interview led to $6.3B Binance heist

'It was not a single isolated breach or a simple phishing incident,' exchange says

The Register 4h ago

Security

Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist

The largest crypto theft to date was pulled off by combining some well-known hacking techniques over the course of a few months, according to Binance. A postmortem from the company says the process started in June with one developer downloading a tampered installer apparently…

The Verge 4h ago

Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data

More Security & Privacy

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

North Korean fake job interview led to $6.3B Binance heist

Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist