Loading...

The Abuse of Teams Inbound Webhook Connectors and Channel Email Addresses

The Abuse of Teams Inbound Webhook Connectors and Channel Email Addresses
An article by security researchers Black Hills pointed to some vulnerabilities with incoming webhook connectors and email connections for Teams channels. Fortunately, it seems like Microsoft is making changes to Teams to improve security. Even so, it's always wise for tenants to keep an eye on how information flows into Teams.

Published on:

Learn more
Office 365 for IT Pros
Office 365 for IT Pros

Office 365 for IT Pros is the world's best book about Office 365 architecture, management, and deployment. Written by a team of highly experienced Microsoft MVPs, Office 365 for IT Pros is refreshed monthly.

Share post:

Related posts

Power Automate: Office 365 Outlook - Get emails Action

Returns an array of emails from a mailbox folder. Filter fields only scan the first 250 emails.

9 hours ago

Quick look at the sponsorOf property in the Graph API

In this article, we take a quick look at the recently introduced sponsorOf property/relationship for Graph API user objects. We examine how to...

10 hours ago

Microsoft Teams: Meeting Participant Detail audit records will be available in all participating (non-organizer) tenants

Starting late August 2026, Microsoft Teams will share Meeting Participant Detail audit records with all participating tenants for their own us...

14 hours ago

Microsoft Purview | Data Loss Prevention: Unified data access messages in Microsoft 365 Copilot

Microsoft 365 Copilot now shows a consistent message when Microsoft Purview DLP policies restrict content access or processing. This update im...

14 hours ago

Microsoft Teams: Update the Teams mobile app to maintain Calendar functionality

Users must update the Microsoft Teams mobile app by late October 2026 to retain Calendar functionality on iOS and Android. Older app versions ...

14 hours ago

Microsoft 365 Copilot: Retirement of role-to-skill mapping files in People Skills

Starting August 22, 2026, Microsoft 365 Copilot will retire role-to-skill mapping files in People Skills. Skills inferencing will no longer us...

14 hours ago

Simplifying creation on M365 Copilot mobile

The Microsoft 365 Copilot mobile app will remove the standalone Create experience, starting August 2026, to simplify content creation via Copi...

14 hours ago

Sales in Microsoft 365 Copilot-Add Microsoft 365 Graph grounding for emails, meetings, chats as knowledge to Sales agent

We are announcing the ability to add Microsoft 365 Graph grounding for emails, meetings, and chats as knowledge to Sales agent in Sales in Mic...

14 hours ago

Microsoft Copilot (Microsoft 365): New Rich Answer Cards

Surface new model-driven, dynamically placed Answer Cards across top 7 segments: weather, sports, finance, images, video, places and news for ...

14 hours ago
Stay up to date with latest Microsoft Dynamics 365 and Power Platform news!
* Yes, I agree to the privacy policy