ONE COMPANY Blog

Cybersecurity Update

Written by GracoRoberts | 26 Oct 2026, 15:24:29

Teams Is the New Inbox for Attackers. Is Your Cybersecurity Training Up to Date? 

Most of us have learned to be cautious about suspicious emails. But attackers know that too, and they are increasingly using Microsoft Teams chats, calls and meeting invitations to try to catch people off guard. 

Attackers may pose as IT Support, the Helpdesk, an employee or a trusted vendor. Their aim could be to persuade you to click a link, install software, share your credentials or grant access to your computer.

Be particularly cautious if you receive:

  • An unexpected Teams chat or call claiming to be from IT Support or the Helpdesk
  • A message from an external account that appears to be an employee or trusted vendor
  • A request to install software, open or run a file, approve access or share login details
  • An urgent message about expiring access, overdue tasks, account problems or security issues

Stop. Check. Verify. 

If someone contacts you through Teams asking for access, software installation or sensitive information, stop, check and verify the request through a trusted channel before doing anything. If you're unsure, contact the IT Service Desk.

Don't forget your Security Awareness Training 

As GracoRoberts transitions its Security Awareness programme from KnowBe4 to Mimecast, all employees must complete any training assigned to them. 

If you have outstanding KnowBe4 training, look out for an email titled “Please complete your assigned training” from KnowBe4 at do-not-reply@training.knowbe4.com. 

As the Mimecast programme is introduced, you may also receive emails titled “Awareness Training Reminder” from IT Notifications at itnotifications@gracoroberts.com about required Cybersecurity Awareness training. 

Please don't ignore these notifications. Completing your assigned training helps protect GracoRoberts, our customers and our data, while supporting our cybersecurity and compliance requirements. 

If you have questions about your training assignment, or receive a suspicious message claiming to be from IT, please contact the Information Security or IT team.