AI Weekly Malaysia

A weekly cybersecurity roundup covering CEO phishing kits, 5,000 Dropbox account compromises, and OAuth-based attacks, plus 17 additional stories. The standout detail is a Microsoft Teams vishing campaign (dubbed Spring Ring) that targeted 150+ employees across 10+ companies between January and April 2026, where attackers impersonated IT help desk staff via Teams external collaboration, then used RMM tools, PowerShell, a malicious MSI package, a portable Node.js runtime, and an obfuscated JavaScript implant to gain persistent C2 and pivot to domain controllers via WinRM.

Why: If your team uses Microsoft Teams external collaboration or relies on OAuth 'Allow' flows for third-party app integrations, these are now confirmed attack vectors with documented enterprise breach chains. Builders should review whether external Teams access is enabled by default and audit OAuth consent prompts in their SaaS stack, since the attack path described goes from a single social-engineered click to domain controller access.

Microsoft's August 2026 security update (KB5121003) causes the new Outlook and Teams to fail to launch or crash on ARM-based Windows devices including Surface Pro 11 and Surface Laptop 7. The workaround is installing the Auto Super Resolution Package v1.0.19.0 or later from the Microsoft Store—a package designed for AI game upscaling. A separate August 27 preview update resets custom mouse cursors to defaults on non-English Windows 11 24H2/25H2 installations.

Why: If your team or customers use ARM Windows devices (Surface Pro 11, Surface Laptop 7, Snapdragon X2 hardware), patch KB5121003 can break Outlook and Teams with no root-cause explanation from Microsoft yet. The fix—installing an AI gaming package—is bizarre and worth noting as a cautionary tale of Windows update reliability on ARM. For most builders not shipping to ARM Windows endpoints, this is low-impact.