Microsoft Teams to Get New Anti-Phishing Tools Amid Rising Enterprise Attacks

Microsoft has issued a warning about ongoing abuse of Microsoft Teams targeting enterprise users, while also announcing new protections designed to counter phishing and impersonation attacks. The updates are listed under Microsoft 365 Roadmap ID 560547 and are expected to begin rolling out in June 2026.

New protections focused on social engineering threats

The upcoming features focus on limiting common attack vectors such as phishing, impersonation, and social engineering. Microsoft aims to strengthen how organizations detect and respond to suspicious activity within Teams conversations, especially those involving external contacts.

Built-in reporting for suspicious users

One of the key additions is a new user reporting tool that allows employees to flag suspicious external contacts directly inside Teams. This feature introduces human-driven signals into Microsoft’s existing automated detection systems, helping security teams identify threats faster and with greater accuracy.

Centralized security detection dashboard

Microsoft is also introducing a new Security Detection Report within the admin center. This dashboard gives administrators a centralized view of messaging-related threats across the organization.

It highlights incidents such as impersonation attempts, malicious links, and potentially dangerous file types. Admins can monitor activity in real time and export detailed logs to support investigations and incident response workflows.

Strengthening Teams as an enterprise security layer

With these updates, Microsoft is positioning Teams as a more secure communication platform for businesses. The focus remains on improving visibility, accelerating response times, and reducing the risk posed by increasingly sophisticated social engineering attacks.

The rollout is expected to begin in June 2026, though timelines may evolve as features move closer to release.

In other security news, Microsoft recently released a .NET patch to address an emerging issue, while researchers also reported a Linux variant of the GoGra backdoor abusing Outlook via Microsoft Graph API for data harvesting.

Via BleepingComputer