New Microsoft Teams vulnerability

A security issue in Microsoft Teams allows attackers to modify recipient IDs in message POST requests to make external accounts appear internal, enabling delivery of links and binaries (including malware) to targets; the report demonstrates a proof-of-concept using the TeamsPhisher tool and recommends mitigations such as ThreatLocker policies, Internet Ringfencing™, or disabling external tenant communications in Teams Admin Center.