Sunday, October 18, 2026

Microsoft Teams Launches Automatic Alerts for Malicious Links

Microsoft is significantly enhancing security for its Teams platform by introducing automatic warning systems that alert users about malicious links in chat messages.

This new protective feature represents a crucial advancement in safeguarding collaboration platforms from increasingly sophisticated cyber threats targeting workplace communications.

Enhanced Real-Time Threat Detection System

The new security feature operates as part of Microsoft Defender for Office 365, designed specifically to protect users from phishing, spam, and malware attacks by automatically flagging potentially harmful URLs shared in both internal and external conversations.

The system utilizes Microsoft Defender’s advanced threat intelligence combined with machine learning-based detection engines to analyze and evaluate every link shared within Teams conversations.

When users receive messages containing flagged URLs, a clear warning banner appears directly within the chat interface, immediately alerting them that the link may be unsafe.

This proactive approach provides users with critical information before they can accidentally click on malicious content.

Additionally, the system notifies the sender when their shared link has been identified as potentially harmful, allowing them to edit or delete the problematic message.

A particularly innovative aspect of this security enhancement is its ability to continuously re-evaluate URLs even after message delivery.

Through Zero-hour auto purge (ZAP) technology, the system can retroactively apply warning banners to messages if a link is identified as malicious up to 48 hours post-delivery.

This ensures that newly discovered threats are immediately flagged, even if they were initially considered safe.

The feature seamlessly integrates with existing Microsoft 365 security measures, working alongside Safe Links to create multiple layers of protection.

While Safe Links provides time-of-click verification, the new message warnings offer earlier defense by alerting users before any interaction with suspicious URLs occurs.

 automatic malicious link alerts
automatic malicious link alerts

The automatic malicious link alerts will begin rolling out in public preview for enterprise customers in early September 2025, with complete worldwide general availability expected by mid-November 2025.

The feature will be accessible across all Microsoft Teams platforms, including desktop, web, Android, and iOS applications.

During the public preview period, administrators must opt-in to activate the warnings, but the feature will be enabled by default once general availability is reached.

IT administrators can manage settings through the Teams Admin Center under “Messaging settings” or via PowerShell commands, allowing organizations to customize protection according to their specific security policies.

This security update addresses the growing threat landscape facing over 320 million monthly active Teams users, providing essential protection against sophisticated phishing campaigns that increasingly target collaboration platforms in modern workplace environments.

Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant Updates.

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access...

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how...

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a...

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign...

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting...

New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs

A new GhostBat RAT variant targets 60 Android financial...

New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads

ROMULUS, a shared ClickFix delivery platform operating across six...

Related Articles

Recent News