Microsoft Defender for Office 365 Updates

New Email Actions in Advanced Hunting

Near real-time URL protection in Teams messages:

SecOps can now dispute Microsoft's verdict on previously submitted email or URLs

Users can report external and intra-org Microsoft Teams messages from chats

AI-powered Submissions Response introduces generative AI explanations for admin email submissions

Defender for Office 365 is now able to detect and classify mail bombing

For 101 or more messages selected, only email purge and propose remediation options are available

Create allow entries directly in the Tenant Allow/Block List

User reported messages by third-party add-ins can be sent to Microsoft for analysis

Use the built-in Report button in Outlook

Considerations for integrating non-Microsoft security services with Microsoft 365

Introducing LLM-based BEC detection and classification

Tenant Allow/Block List in Microsoft 365 now supports IPv6 address

Admins can see policy what-if insights for the bulk complaint level (BCL)

New details into who or what was responsible for releasing a message from quarantine