TEAMS ADMINS GET FILE EXTENSION BLOCKING

The update addresses a common security challenge: Teams currently blocks file types associated with malware and phishing attacks, but one-size-fits-all policies don't work for every organization. Admins will be able to modify the default blocked extension list to align with their company's security requirements and risk tolerance. This gives IT teams finer control over what employees can share through the platform. The feature responds to feedback from enterprise customers who need flexibility in managing file-sharing risks across different departments and use cases. Separately, Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods before February 2027, when SMS-based first-factor sign-in will be discontinued. The company is pushing organizations toward passkeys and other advanced authentication to reduce account compromise risks.