Microsoft is rolling out a new layer of protection against phishing links in Outlook and other Office apps this month, alongside an update that lets senders recall emails sent to other organisations.

• What it is: URL time-of-click protection now scans links in your emails at the moment you click them, not just when the message first arrives. This catches phishing links that look safe on delivery but are activated later.
• Who is affected: All Microsoft 365 Basic and Standard plan users; this protection was previously limited to higher-tier plans with Defender for Office 365.
• Cross-tenant message recall: From mid-August, senders will be able to recall an email even after it has reached a recipient at a different organisation, provided that organisation has opted in.
• What to do: No action is required for the link protection, it rolls out automatically. If you rely on message recall for correcting errors, check with your IT provider about enabling the cross-tenant option once it is available.

These changes tighten your email security at no extra cost, and we recommend confirming your tenant has received them once the rollout completes.