From The Hacker News
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain controller. Microsoft said in a report that it investigated two such intrusions, one of which resulted in company
Publisher-provided RSS excerpt. This is not the full article or an independently verified AEGLIX assessment.
Read the full story at The Hacker News ↗ (opens in a new tab)