Microsoft Edge: v.141 - Real-time video translation

🚨 The Signal: Microsoft Edge now offers real-time video translation, dubbing foreign language videos into a user's preferred language. This introduces a new vector for potential data exfiltration or content manipulation through third-party translation services.

The Impact

All users are affected by a new browser feature that could introduce data integrity and confidentiality risks.

• End Users: Risk of consuming manipulated content or exposing sensitive data to third-party translation services.
• Security Teams: New data flow to monitor for exfiltration and integrity, requiring policy enforcement.
• Admins: Need to evaluate and configure the LiveVideoTranslationEnabled policy to manage risk.

The Action

1. Review the LiveVideoTranslationEnabled policy documentation for Microsoft Edge.
2. Evaluate the security implications of real-time video translation for your organisation's data handling policies.
3. Implement the LiveVideoTranslationEnabled policy via Group Policy or Intune to disable the feature if not required or if risks are unacceptable.
4. Communicate the risks and policy decisions to end-users and relevant stakeholders.

Domain: M365-Apps · Impact: high · Workload: M365 Apps · Essential Eight: User Application Hardening · ISM: ISM-1412, ISM-1485, ISM-1486, ISM-1542, ISM-1585, ISM-1667, ISM-1668, ISM-1669, ISM-1670, ISM-1823, ISM-1824, ISM-1859, ISM-1860