Outlook: Send availability in Outlook mobile apps

🚨 The Signal: Outlook mobile apps now allow users to share availability, including enhanced accessibility for iOS. This feature could inadvertently expose user schedules, increasing the risk of social engineering or targeted attacks.

The Impact

End users are affected by increased ease of sharing availability, creating a low security risk of inadvertent information disclosure.

• End users: Risk of oversharing calendar details.
• Security team: Potential for social engineering based on availability.
• Privacy officers: Increased surface for personal information exposure.

The Action

1. Educate users on the risks of sharing availability with external parties.
2. Review existing mobile device policies for data sharing guidelines.
3. Monitor user behaviour for excessive availability sharing.

Domain: M365-Apps · Impact: low · Workload: M365 Apps