Comparing 27 April 2026 with the previous day 26 April 2026.
Describes an active campaign using help desk impersonation via Teams to deploy SNOW malware, with detailed TTPs including LSASS extraction, Pass-The-Hash, and lateral movement to domain controllers.
Microsoft is rolling out passkey support for Entra ID on Windows, enhancing phishing resistance for the company's authentication infrastructure.
Describes a new privilege escalation technique in Windows RPC that could allow attackers to gain SYSTEM privileges on fully patched systems, increasing risk of lateral movement and domain compromise.
This alert describes a novel social engineering technique using Microsoft Teams to bypass MFA and gain initial access, which is directly applicable to the company's tech stack.
No changes in this category.
No changes in this category.
No changes in this category.