Microsoft Defender for Office 365
Email and collaboration

Defender For Office 365 Whats New

In brief

Users can report scheduled or Meet now Microsoft Teams meetings, or individual meeting participants, as security concerns during or after the meeting.

What Defender admins need to know

Administrators should account for meeting and participant reports in their security-report handling processes.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

author: chrisda ms.author: chrisda ms.localizationpriority: medium ms.date: 2026-09-28T00:10-05T00:00:00.0000000Z ms.collection:

October 2026

  • Expanding user reporting in Teams to include meetings: Users can report scheduled or Meet now Microsoft Teams meetings or individual meeting participants as a security concern during or after the meeting. Users can also report a meeting participant that was incorrectly identified as suspicious as not a security concern. Depending on Teams user reported settings, reported meeting and participant metadata is sent to the specified reporting mailbox, to Microsoft, or both.

September 2026

  • Separating Teams user reporting settings from email settings: Customers in Worldwide (WW) environments with Defender for Office 365 Plan 1, Defender for Office 365 Plan 2, Microsoft 365 E5, or Office 365 E5 can now manage Teams user reporting settings on a separate page at https://security.microsoft.com/securitysettings/teamsUserSubmission. This separation lets you configure different reporting destinations for Teams and Outlook user reports. For more information, see MC1478463.