Microsoft Teams: Pop out calls into a new browser window

🚨 The Signal: Microsoft Teams browser calls can now pop out into a separate, persistent window. This enhances multitasking but introduces a new vector for content display outside the primary browser tab, potentially affecting data visibility controls.

The Impact

All Teams browser users are affected, with a low security risk related to content visibility and potential for inadvertent exposure.

• End Users: May inadvertently display sensitive call content outside the main browser window.
• Security Teams: Need to consider new display contexts for DLP policies and content monitoring.
• Compliance Teams: Review how sensitive data is handled when displayed in a persistent pop-out window.

The Action

1. Review existing Microsoft Purview DLP policies for Teams to ensure coverage for content displayed in pop-out windows.
2. Educate users on the implications of the pop-out window for sensitive information sharing.
3. Monitor Microsoft 365 message center for further guidance on managing this feature.

Domain: Teams · Impact: low · Workload: Teams