MEDIUM Threat Intel
Identity Abuse and Phishing via Enterprise Collaboration Platforms
Threat actors increasingly misuse enterprise collaboration platforms for identity phishing, credential theft, and malware delivery.
- Immediate impact: Threat actors misuse enterprise collaboration platforms to conduct identity phishing, credential theft, and malware delivery against corporate users.
- Affected systems: Enterprise SaaS collaboration platforms, Microsoft Teams, and Slack environments utilizing external federation or guest access.
- Remediation: Implement comprehensive monitoring of authenticated collaboration sessions and apply strict controls on external federation and guest accounts.
Runtime Rebel Intel
3 min read · Aug 20, 2026