Mon, Nov 2 brief Breaches and campaigns
Fake IT support on Teams ends in certificates for admins, Microsoft says
In two intrusions, the attackers abused weak certificate settings in Active Directory to act as privileged accounts or a domain controller, and stole file server data in one.