Microsoft Teams: Malicious URL Protection for Teams Chat and Channels

🚨 The Signal: Microsoft Teams now automatically detects and warns users about malicious URLs in chats and channels. This enhances protection against phishing and malware, reducing the risk of compromise via Teams communications.

The Impact

All Teams users are affected, with a reduced risk of malware infection from malicious links.

  • End Users: Reduced risk of clicking malicious links.
  • Security Teams: Fewer incidents related to Teams-borne malware.
  • Admins: Enhanced default security for Teams communications.
  • Organisations: Improved compliance with security policies.

The Action

  1. Review Microsoft Defender for Office 365 Safe Links policies for Teams (if applicable): https://security.microsoft.com/safelinks
  2. Communicate new protection to end-users for awareness.
  3. Monitor security reports for Teams-related threats in Microsoft 365 Defender portal.

Domain: Defender · Impact: medium · Workload: Teams · Essential Eight: User Application Hardening · ISM: ISM-1412, ISM-1485, ISM-1486, ISM-1542, ISM-1585, ISM-1667, ISM-1668, ISM-1669, ISM-1670, ISM-1823, ISM-1824, ISM-1859, ISM-1860