Major security vulnerabilities found in Microsoft Teams could have allowed cybercriminals to manipulate messages without detection, forge notifications, alter participant names, and impersonate team members. These vulnerabilities, discovered by Check Point Research, signal an alarming new category of threats facing businesses reliant on collaboration platforms.
Collaboration tools such as Teams, Slack, and Zoom now form the digital backbone of modern organizations. But the same ingredient that drives productivity—trust—has increasingly become a weapon in the hands of cybercriminals. In March of last year, cybersecurity analysts uncovered severe security weaknesses in Microsoft Teams, a platform used by more than 320 million monthly users worldwide. It’s worth noting that in 2021, Microsoft Teams was the most widely used video conferencing tool in Poland among remote learners and workers. Although Microsoft was immediately notified of the vulnerabilities, the potential risk remained until October 2025, when the final patch was deployed—addressing voice and video call issues.
Experts say the incident should serve as a wake-up call across the industry. Just as phishing exploited email to pave the way for attacks, today it’s collaboration platforms that are becoming the new battleground for cybersecurity.
“These vulnerabilities strike at the heart of digital trust. Our research shows that criminals no longer need to break in—they just need to manipulate what users trust. Organizations today must protect not only what systems process, but also what people believe,” said Oded Vanunu, Head of Products Vulnerability Research at Check Point Software Technologies.
When Trust Becomes an Attack Vector
Check Point researchers found that the high degree of user trust in the Teams interface could be easily exploited. The identified vulnerabilities included:
- Invisible message editing – Attackers could modify the content of already sent messages without triggering an “Edited” label, allowing the silent rewriting of conversation history.
- Fake notifications – Message alerts could be falsified to appear as if they were sent by a trusted colleague or supervisor.
- Altered chat names – Manipulation of conversation titles could mislead users about the identity of chat participants.
- Impersonation in audio/video calls – Attackers could change the displayed name in calls to impersonate legitimate team members.
Though simple in execution, these manipulations could have profound consequences—fraudulent transfers, data theft, reputational damage, and poor business decisions based on falsified communication.
Experts warn that these are not isolated flaws, but the onset of a new threat model. Attackers no longer need to break encryption or breach security perimeters—it’s enough to manipulate what users see and who they think they’re communicating with. This signals a shift from technological to psychological targeting—from attacking systems to attacking perception. Modern attacks increasingly resemble “conversational phishing,” where victims are drawn into exchanges that appear to come from real colleagues.
Source: https://ceo.com.pl/microsoft-teams-byl-dziurawy-przez-niemal-15-roku-53222
