Microsoft Teams guest access could allow hackers to bypass some critical security protections

• Microsoft Teams Guest Chat Feature Creates Unprotected Attack Vector for Malware and Phishing
• Guests rely on host security, allowing bad actors to bypass typical protections.
• Businesses are advised to restrict external invitations, disable chats and train staff on phishing risks

A new feature recently added to Microsoft Teams has also introduced a “fundamental architectural gap” – a vulnerability that could be exploited to drop malware, share phishing links and more – all without setting off the usual security alarms, experts have warned.

Cybersecurity researchers Ontinue discovered that the guest access feature in Microsoft Teams creates an unprotected attack vector.