Topic
Security controls and abuse defenses for workplace chat, channel and meeting platforms, addressing phishing, impersonation and malicious files.
Microsoft will open Teams meetings to certified third-party deepfake detectors and add built-in impersonation warnings, both due in November. Deepfake coverage will depend on buying a certified outside detector.
Reality
Unit 42 reports endpoint alerts tied to collaboration tools more than quadrupled in 12 months, with 99% linked to chat phishing. Most controls still watch email and logins, not authenticated sessions.
Reality
Unit 42 says the crew reached more than 150 employees at ten or more companies without a single software exploit, which puts Teams federation policy and NTLM relay hardening in scope and leaves the endpoint downstream.
Perspective Coverage
3 publishersReality
Rapid7's research with Zimbra turned up more than 50 vulnerabilities, several of which let an attacker send mail as another user with no password involved. The operational item today is CVE-2026-73570, the SNMP command injection CISA gave federal agencies three days to fix.
Reality
Weaponizable File Protection has blocked high-risk attachments in Teams chats off a list only Microsoft could edit. From November 2026 administrators can write their own.
Reality