- Microsoft Teams flaws allowed message edits, spoofed alerts, and forged caller identities
- Attackers could exploit these bugs for phishing, wire fraud, and malware delivery
- Microsoft patched CVE-2024-38197; no user action needed post-October 2025 fixes
Experts have found Microsoft Teams contained multiple vulnerabilities whioch allowed threat actors to edit messages, spoof notifications, and change user names, opening it up for different phishing and social engineering attacks, putting users at risk of data theft, wire fraud, and malware/ransomware infections.
