:

HACKER TWINS BUST THEMSELVES ON TEAMS CALL RECORDING

SECURITY DESK1 MIN READ
SAT, JUN 27, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Two fired hackers were caught committing crimes after forgetting to end a Microsoft Teams recording during their unauthorized activities. The recording provided authorities with direct evidence of their actions.

The twins, both recently terminated from their positions, conducted illegal hacking activities while a Teams meeting remained active and recording. They failed to notice the ongoing capture of audio and video as they carried out the crimes. The recorded session became crucial evidence for investigators, documenting the pair's actions firsthand. The oversight eliminated any ambiguity about their involvement and provided law enforcement with a clear record of the incident. The case highlights how easily digital oversight can undermine criminal activity. Standard security practices—checking that calls are properly ended before engaging in sensitive activity—were neglected by the suspects. This breach of operational security resulted in a straightforward investigation, with the recorded evidence leaving little room for dispute. The incident serves as a reminder of how readily available technology can capture unintended records, particularly in workplace communications platforms where recording features are enabled by default or remain active unless explicitly terminated.

■ SOURCES

Ars Technica

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Federal prosecutors have unsealed a 2024 indictment charging three Russian nationals and two web hosting services with facilitating cyberattacks and money laundering that victimized cybercrime targets of $62 million.

1H AGOSecurity Desk

A hacker accessed Suno's source code using stolen employee credentials, revealing that the AI music generator scraped decades of audio from YouTube to train its model.

1H AGOAI Desk

Criminals can now clone voices with AI in mere seconds, outpacing traditional authentication defenses that banks and financial institutions rely on to prevent fraud.

1H AGOAI Desk

Five malicious versions of AsyncAPI packages were published to npm, delivering a remote access trojan capable of stealing credentials and sensitive data from developer systems.

1H AGODev Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.