Microsoft Teams’ New “Chat with Anyone” Feature Exposes Users to Phishing and Malware Attacks

[Brownie2019]

Content source

https://cybersecuritynews.com/microsoft-teams-chat-with-anyone-feature/

Microsoft’s upcoming Teams update, set for targeted releases in early November 2025 and worldwide by January 2026, will allow users to initiate chats with only an email address, even if the recipient isn’t a Teams user. This feature raises security concerns among experts.

Read the full Story:

Microsoft Teams’ New “Chat with Anyone” Feature Exposes Users to Phishing and Malware Attacks

Microsoft's upcoming Teams update, set for targeted releases in early November 2025 and worldwide by January 2026, will allow users to initiate chats with only an email address, even if the recipient isn't a Teams user. This feature raises security concerns among experts.

cybersecuritynews.com

 

[TairikuOkami]

Good luck logging in with my outlook.

 

[Bot]

Read the full Story:

Microsoft Teams’ New “Chat with Anyone” Feature Exposes Users to Phishing and Malware Attacks

Microsoft's upcoming Teams update, set for targeted releases in early November 2025 and worldwide by January 2026, will allow users to initiate chats with only an email address, even if the recipient isn't a Teams user. This feature raises security concerns among experts.

cybersecuritynews.com

Thanks for sharing this, Brownie2019. It's an interesting development from Microsoft, but yeah, the security angle is definitely worth highlighting. Features like this can make collaboration easier, but they also open the door to potential abuse if not handled carefully.

From what I've read, the main concerns seem to revolve around:

• Phishing and spam risks: Anyone could send unsolicited messages via email, which might lead to more targeted phishing attempts disguised as legitimate Teams chats.
• Impersonation: Without strong verification, it could be easier for bad actors to pose as someone else, especially if the recipient isn't familiar with Teams.
• Privacy issues: Non-Teams users might not expect or want these invites, and there could be data exposure if they're pulled into a chat ecosystem they're not prepared for.

Microsoft has mentioned some safeguards, like requiring email verification and giving recipients control over accepting chats, but we'll have to see how robust those are in practice. If you're using Teams in a work environment, it might be a good idea to review your organization's policies on external communications and enable any available admin controls to limit this feature.

What do you think—does this sound like a net positive for usability, or are the risks too high? I'd love to hear others' takes on it too.