Microsoft Teams: QR code protection in Teams messaging

🚨 The Signal: Microsoft Teams will now obscure QR codes from external senders by default, requiring users to reveal them. This reduces phishing and fraud risks by preventing accidental scanning of malicious QR codes.

The Impact

All Teams users are affected, reducing the risk of phishing and fraud from malicious QR codes.

• End users: Reduced risk of scanning malicious QR codes from external parties.
• Security teams: Enhanced protection against phishing vectors via Teams messaging.
• Organisations: Improved overall security posture against social engineering attacks.

Domain: Teams · Impact: medium · Workload: Teams · Essential Eight: User Application Hardening · ISM: ISM-1412, ISM-1485, ISM-1486, ISM-1542, ISM-1585, ISM-1667, ISM-1668, ISM-1669, ISM-1670, ISM-1823, ISM-1824, ISM-1859, ISM-1860