Microsoft Teams: Report suspicious guest invitations

🚨 The Signal: Teams users can now report suspicious guest invitations directly to IT admins. This enhances phishing detection and mitigation, reducing the risk of malicious actors gaining unauthorised access via guest accounts.

The Impact

All Teams users are affected, reducing the risk of successful phishing attacks through guest invitations.

• End Users: Empowered to report suspicious invites, reducing personal phishing risk.
• Security Team: Gains new intelligence for identifying and mitigating phishing campaigns.
• IT Admins: Receives reports for investigation, improving incident response capabilities.

The Action

1. Review existing incident response playbooks for handling reported suspicious guest invitations.
2. Communicate the new reporting capability to end-users through internal security awareness campaigns.
3. Monitor Microsoft 365 Message Center for further details on admin configuration options, if any.

Domain: Teams · Impact: medium · Workload: Teams