Skip to content
Threat Feed
Subscribe

Tag

Microsoft Teams

3 briefs RSS
high advisory

Phishing Campaign Leveraging Blob URLs and Microsoft Teams Redirects

Threat actors are using legitimate Microsoft Teams redirects to chain external resources and generate dynamic, browser-resident phishing pages via blob URLs to bypass static URL scanning.

Microsoft Teams phishing browser-security credential-theft microsoft-teams
2t 1i
medium advisory

CVE-2026-33823 Microsoft Teams Information Disclosure Vulnerability

CVE-2026-33823 is an information disclosure vulnerability in Microsoft Teams that allows an authorized attacker to disclose sensitive information over a network due to improper authorization.

Teams information-disclosure cloud microsoft-teams
1r 1t
medium advisory

OpenClaw Microsoft Teams Plugin Sender Allowlist Bypass (CVE-2026-34506)

OpenClaw before 2026.3.8 contains a sender allowlist bypass vulnerability in its Microsoft Teams plugin, allowing unauthorized senders to bypass intended authorization checks due to improper handling of empty groupAllowFrom parameters, potentially leading to information disclosure.

cve-2026-34506 openclaw microsoft teams allowlist bypass
2r 2t 1c