Connect with us

Technology

Microsoft Teams might have a few serious security issues

Published

3 years ago

on

Microsoft Teams might have a few serious security issues

Security researchers have discovered four separate vulnerabilities in Microsoft Teams. Attackers can use these vulnerabilities to spoof link previews, leak IP addresses, and even access the software giant’s internal services.

According to a new blog post, these findings were “stumbled upon” by Positive Security researchers while looking for a way to bypass the Same Origin Policy (SOP) in Teams and Electron. For those who are unfamiliar, SOP is a security mechanism in the browser that can help prevent websites from attacking each other.

During the investigation of this matter, the researchers found that they could bypass the SOP in Teams by abusing the link preview feature in the Microsoft video conferencing software, allowing the client to generate link previews for the target page, and then use summary text or optical preview images On the character recognition (OCR) to extract information.

Advertisement

However, while performing this operation, Positive Security co-founder Fabian Bräunlein discovered other unrelated vulnerabilities in the implementation of this feature. Microsoft Teams vulnerability
Of the four vulnerabilities discovered by Bräunlein in Teams, two can be used on any device and allow server-side request forgery (SSRF) and spoofing, while the other two only affect Android smartphones and can be exploited to leak IP addresses and achieve Denial of service (DOS).

By exploiting SSRF vulnerabilities, researchers were able to leak information from Microsoft’s local network. At the same time, spoofing vulnerabilities can be used to increase the effectiveness of phishing attacks or hide malicious links.

The DOS error is particularly worrying because an attacker can send a message to the user that contains a link preview with an invalid preview link target (for example, “boom” instead of “https://…”), thereby causing the Teams application The program crashes Android. Unfortunately, when trying to open a chat or channel with malicious messages, the app will continue to crash.

Positive Security disclosed its findings to Microsoft responsibly through its bug bounty program on March 10. However, since then, the software giant has only patched the IP address leak vulnerability in the Android version of Teams. Now Positive Security has publicly disclosed its findings. Although Microsoft told researchers that they would not pose a direct threat to its users, it may have to patch the remaining three vulnerabilities.

Advertisement

Complete News Source : techradar.pro

Related Topics:
Continue Reading

$92.8 million

Akshay Kumar wishes director Priyadarshan on birthday with Bhooth Bangla BTS pic: ‘Surrounded by ghosts…

Published

3 weeks ago

on

January 30, 2025

By

Akshay Kumar wishes director Priyadarshan on birthday with Bhooth Bangla BTS pic: ‘Surrounded by ghosts…

Akshay Kumar and Priyadarshan, the acclaimed Indian director, celebrated their 68th birthday on Instagram. Kumar, who has worked with Priyadarshan on several cult comedies of the early 2000s, wished him a happy birthday and called him a mentor. The duo is now back together for their upcoming horror-comedy, Bhooth Bangla.

The first poster of the movie has been released, and it is expected to hit theaters in 2025. Akshay Kumar wore a black fedora and a green jacket, layered over a black tee, and fans have expressed their excitement for their new movie.

Advertisement

The duo’s dynamic and deep bonding have been praised by fans, who have expressed high anticipation for their new movie. The first poster of Bhooth Bangla has already been released, and the movie is expected to hit theaters in 2025.

Akshay Kumar, the versatile Bollywood actor, recently celebrated director Priyadarshan’s birthday by sharing a behind-the-scenes (BTS) photograph from their upcoming film, “Bhooth Bangla.” In the image, Akshay humorously captioned, “Surrounded by ghosts…” The photo features Akshay alongside Priyadarshan and co-actor Paresh Rawal, all dressed in traditional attire, with a black cat perched on Akshay’s shoulder, adding a whimsical touch to the scene.

Reunion After 14 Years

This collaboration marks a significant reunion between Akshay Kumar and Priyadarshan, who last worked together on the film “Bhool Bhulaiyaa” in 2007. Their partnership has been celebrated in the past for delivering successful comedies like “Hera Pheri” and “Garam Masala.” Fans have eagerly anticipated their return to the big screen together, and “Bhooth Bangla” promises to be a delightful addition to their repertoire.

Advertisement

About ‘Bhooth Bangla’

“Bhooth Bangla” is a horror-comedy that blends elements of suspense with humor, a genre in which both Akshay Kumar and Priyadarshan have excelled. The film is produced by Balaji Telefilms Ltd in association with Cape of Good Films. The motion poster released earlier this year features Akshay Kumar in a suit, with a cat on his shoulder, licking milk slyly, setting the tone for the film’s intriguing and humorous premise.

instantbollywood.com

Anticipation and Fan Reactions

Advertisement

The BTS photo shared by Akshay Kumar has generated excitement among fans, who are eager to see the trio back together on screen. The playful caption and the presence of the black cat suggest that “Bhooth Bangla” will offer a mix of thrills and laughs, staying true to the successful formula of their previous collaborations.

As the release date for “Bhooth Bangla be a significant highlight in the upcoming entertainment lineup. The reunion of Akshay Kumar, Priyadarshan, and Paresh Rawal, combined with the intriguing premise and the playful BTS moments, has set high expectations among audiences. Fans can look forward to a cinematic experience that promises both chills and chuckles.

For a visual glimpse into the making of “Bhooth Bangla,” you can watch the following video Akshay Kumar expressed his gratitude as they once again united for their upcoming movie Bhooth Bangla. This marks a new chapter in their long-standing collaboration since the 2000s. He shared a picture from behind the scenes of their new movie, where it seems like they are laughing about something.

Akshay wrote,”Happy Birthday, Priyan Sir! What better way to celebrate than by spending the day on a haunted set, surrounded by ghosts…both real and unpaid extras? Thank you for being a mentor, and the only person who can make chaos look like a masterpiece. May your day be filled with fewer retakes. Wishing you a fantastic year ahead!”

Advertisement

Group Media Publications
Entertainment News Platforms – anyflix.in      
Construction Infrastructure and Mining News Platform – https://cimreviews.com/
General News Platform – https://ihtlive.com/
Legal and Laws News Platforms – https://legalmatters.in/
Podcast Platforms – https://anyfm.in/

Continue Reading
Anyskill-ads

Facebook

Trending