Microsoft 365 allows Teams users to chat with team members who are outside their work network. The feature allows anyone with a Teams account to message any employee in an organization by knowing their email ID or phone number. Security experts say the update opens up avenues for threat actors to attack organizations. Microsoft 365 product page says the updates are currently in development and are being tested. The company says it has started rolling out these updates to users, but they are not yet available to all applicable users. It says the update could potentially open Teams to spam and data loss from external users.”]
Source: https://www.cuinfosecurity.com/microsoft-teams-new-feature-sparks-security-concerns-a-18052