- Microsoft Teams guest chat feature creates unprotected attack vector for malware and phishing
- Guests rely on host’s security, enabling malicious actors to bypass usual protections
- Businesses advised to restrict external invites, disable chats, and train staff on phishing risks
A new feature recently added to Microsoft Teams has also introduced a “fundamental architectural gap” - a vulnerability that could be exploited to drop malware, share phishing links and more - all without triggering the usual security alarms, experts have warned.
