#cross-tenant-security

[ follow ]
#cve-2026-20223 #cisco-secure-workload #unauthenticated-api-access #privilege-escalation #microsoft-teams
Information security
fromtheregister
1 week ago

Cisco serves up yet another perfect 10 bug with Secure Workload admin flaw

Unauthenticated crafted API requests can grant Site Admin privileges, enabling cross-tenant data access and configuration changes in Cisco Secure Workload.
Information security
fromThe Hacker News
6 months ago

MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants

Guest access in Microsoft Teams can allow attackers to bypass Microsoft Defender for Office 365 because protections are determined by the hosting tenant.
[ Load more ]