Microsoft is rolling out a pivotal update to its Teams collaboration platform, shifting security control from rigid defaults to customizable policies for IT administrators. The new feature will enable organizations to define their own lists of blocked file extensions, moving beyond the current system-wide, non-editable blocklist maintained by Microsoft.
As reported by BleepingComputer, this update addresses a key limitation in Teams' security framework. Currently, Microsoft enforces a global default blocklist that prevents users from sharing file types commonly linked to malware, such as certain executables. While this provides baseline protection, it lacks flexibility for organizations with unique threat landscapes or compliance demands.
The change introduces a dedicated interface in the Teams admin center where administrators can craft tailored blocklists. This allows IT teams to enforce granular security policies directly within the collaboration environment, blocking file extensions based on their specific risk profiles and operational needs. For instance, enterprises in specialized industries could restrict custom file formats that pose internal threats but are not covered by Microsoft's defaults.
This enhancement arrives as collaboration platforms increasingly become targets for cyberattacks, with threat actors exploiting their trusted status to distribute malicious files. By enabling proactive, customizable blocking, organizations can deploy more precise defenses against evolving threats, complementing standard protections.
Moreover, the feature integrates seamlessly with broader security strategies. Administrators can align Teams file policies with existing Data Loss Prevention (DLP) and endpoint protection rules, fostering a cohesive security posture across the digital workspace. This ensures that collaboration tools are managed as critical components of the corporate network.
The move reflects a broader industry trend toward greater configurability in cloud services, allowing enterprises to adapt security controls to their distinct operational realities. By providing these options, Microsoft acknowledges that effective cybersecurity often requires customization to match specific threat environments and internal policies.
The update is slated for a future release, and once available, it will become a vital configuration step for IT teams aiming to fortify their communication infrastructure against file-based risks.
Microsoft 正為其 Teams 協作平台推出一項關鍵更新，將安全控制權從僵化的預設設定轉移至 IT 管理員可自訂的策略。這項新功能將使組織能夠定義自己的封鎖檔案副檔名清單，超越現時由 Microsoft 維護、全系統範圍內且不可編輯的封鎖清單。
據 BleepingComputer 報導，此更新解決了 Teams 安全框架中的一個主要限制。目前，Microsoft 強制執行一個全域預設封鎖清單，阻止用戶分享常與惡意軟件關聯的檔案類型，例如某些執行檔。雖然這提供了基本保護，但對於具獨特威脅形勢或合規要求的組織而言，缺乏靈活性。
這次改動在 Teams 管理中心引入了一個專用介面，管理員可在此設計量身訂造的封鎖清單。這使 IT 團隊能夠在協作環境內直接執行細粒度安全策略，根據其特定風險狀況和營運需求封鎖檔案副檔名。例如，處於特定行业的企業可限制可能構成內部威脅但 Microsoft 預設封鎖清單未涵蓋的自訂檔案格式。
此項增強功能推出的時機，正值協作平台日益成為網絡攻擊目標之際。威脅行為者利用其受信任的地位來分發惡意檔案。透過啟用主動式、可自訂的封鎖功能，組織可以部署更精確的防禦措施以應對不斷演變的威脅，作為標準防護的補充。
此外，該功能與更廣泛的安全策略無縫整合。管理員可將 Teams 檔案策略與現有的資料外洩防護（DLP）及端點保護規則保持一致，促進整個數碼工作空間的安全態勢協調。這確保了協作工具作為企業網絡關鍵組件得到妥善管理。
此舉反映了雲服務向更高可配置性發展的更廣泛行業趨勢，使企業能夠根據其獨特的營運實況調整安全控制。透過提供這些選項，Microsoft 承認有效的網絡安全通常需要根據特定威脅環境和內部政策進行客製化。
該更新計劃於未來版本中推出，一旦可用，將成為旨在加強其通訊基礎設施以抵禦檔案相關風險的 IT 團隊的關鍵配置步驟。