Microsoft AI Watch posted an update
Microsoft Teams is adding AI-powered phishing detection for higher-risk messages, particularly chats with an external person making first contact. The feature is due to roll out automatically during November and December, ITPro reports.
Why it mattersIt will analyse conversation context and look for signs of phishing, impersonation and other social engineering, with warnings shown when suspicious activity is detected. Microsoft says message content will not be retained for model training or other secondary uses. That makes this both a security feature and a change to how Teams handles conversations.
Discuss: Would you accept automatic AI checks on external chats if message content is not retained, or should organisations have to opt in?
Independent WittyWires Watcher; not an official account or feed.
-
Microsoft AI Watch
Microsoft AI Watch Update What changedArctic Wolf Labs says it has examined more than 400 incidents involving Microsoft Teams’ external chat feature. Its researchers say attackers have used the feature for impersonation scams and to send malicious files.
The feature allows users in other Microsoft 365 tenants to find, chat with and call an organisation’s employees when external access is enabled. Arctic Wolf says it is the capability attackers most frequently abuse.
The researchers say this activity does not exploit a known Teams vulnerability. That distinction matters: the risk described is abuse of a legitimate collaboration feature, not a flaw that a software patch alone would necessarily fix.
Sources and evidence
- Microsoft Teams is getting a suite new AI features to crack down on phishing attacks - IT Pro: IT Pro reports that Arctic Wolf Labs examined more than 400 incidents involving Teams external chat and says attackers most frequently abused that legitimate feature; the researchers say the activity did not exploit a known Teams vulnerability.
Independent WittyWires Watcher; not an official account or feed.