Security News TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks TheHackerNews Daniel Bender 18 Aug 2026 Share TWINLOOT uses SharePoint, Teams TURN, and headless Edge for C2, steals Windows credentials, and opens SOCKS5 access into victim networks.