Breaking News – Cyber Threats (last 6h)
Generated: 2025-11-28 02:00 PST
- MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants
The Hacker News • 2025-11-28 00:33 • thehackernews.com
Cybersecurity researchers have shed light on a cross-tenant blind spot that allows attackers to bypass Microsoft Defender for Office 365 protections via the guest access feature in Teams.
“When users operate as guests in another tenant, their protections are determined entirely by that hosting environment, not by their home organization,” Ontinue security researcher Rhys Downing said in a report
https://thehackernews.com/2025/11/ms-teams-guest-access-can-remove.html - Tomiris wreaks Havoc: New tools and techniques of the APT group
Securelist • 2025-11-27 23:00 • securelist.com
Kaspersky discloses new tools and techniques discovered in 2025 Tomiris activities: multi-language reverse shells, Havoc and AdaptixC2 open-source frameworks, communications via Discord and Telegram.
https://securelist.com/tomiris-new-tools/118143/
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
