PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Exploiting Microsoft Teams on macOS during a Purple Team engagement

blog.quarkslab.com | research | #macos | #vulnerability | #pentest | #microsoft-teams | #camera | #dylib
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

During a Purple Team engagement Quarkslab identified a flaw in Microsoft Teams for macOS allowing an attacker to capture the victim's camera and microphone streams; a PoC led to a fix from MSRC.
Published
Collected

Related coverage

research · blog.quarkslab.com
LLDBagility: practical macOS kernel debugging
Presents LLDBagility, which attaches LLDB to a VirtualBox macOS VM via the Fast Debugging Protocol for kernel breakpoints, watchpoints and pause — no debug kernel or SIP changes needed.
research · blog.quarkslab.com
An overview of macOS kernel debugging
First of two posts on macOS kernel debugging: kernel debugger fundamentals, how debugging is implemented for XNU, and the limitations of current tooling (debug kernel builds, no watchpoints).
research · swarm.ptsecurity.com
Daemon Ex Plist: LPE via MacOS Daemons
A deep dive into macOS launchd Agents and Daemons: plist loading mechanisms, directory trust levels, and a defect the author used to demonstrate a local privilege escalation (LPE) vulnerability.
research · projectblack.io
We can't set up the conversation because your organisations are not set up to talk to each other
Troubleshooting the Teams cross-org chat error: it stems from the External access setting, and the fix is usually adding the other organisation's domain to the allow list in the Teams admin center.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · calif.io
cat readme.txt" is not safe in iTerm2
# "cat readme.txt" is not safe in iTerm2 Codex found a bug turning "cat readme.txt" into arbitrary code execution. Hung Nguyen April 17, 2026 Covered by Hacker News madbugs Contents 1. Background:...
Back