Microsoft Edge: Inline Switching for Workspaces

🚨 The Signal: Microsoft Edge Workspaces now support inline switching, allowing users to manage multiple browsing contexts within a single window. This feature could lead to inadvertent data exposure if not properly managed, as users might mix personal and organisational data.

The Impact

All users are affected, with a moderate risk of accidental data exposure between different browsing contexts.

  • End Users: Risk of inadvertently mixing personal and organisational data.
  • Security Teams: Increased complexity in monitoring data leakage across browsing contexts.
  • Admins: Need to review and potentially update browser management policies.
  • Compliance Teams: Potential for non-compliance with data separation policies.

The Action

  1. Review Microsoft Edge browser policies for Workspaces via Microsoft Intune or Group Policy.
  2. Consider disabling Workspaces if strict data separation is required, using the 'BrowserWorkspacesEnabled' policy.
  3. Educate users on the proper use of Workspaces and the risks of mixing contexts.
  4. Implement data loss prevention (DLP) policies to monitor and prevent data exfiltration across browser profiles.

Domain: M365-Apps · Impact: medium · Workload: M365 Apps · Essential Eight: User Application Hardening · ISM: ISM-1412, ISM-1485, ISM-1486, ISM-1542, ISM-1585, ISM-1667, ISM-1668, ISM-1669, ISM-1670, ISM-1823, ISM-1824, ISM-1859, ISM-1860