{"id":19873,"date":"2022-07-15T13:21:49","date_gmt":"2022-07-15T17:21:49","guid":{"rendered":"https:\/\/www.sherweb.com\/blog\/?p=19873"},"modified":"2023-09-28T15:34:46","modified_gmt":"2023-09-28T19:34:46","slug":"control-third-party-apps-microsoft-365","status":"publish","type":"post","link":"https:\/\/www.sherweb.com\/blog\/security\/control-third-party-apps-microsoft-365\/","title":{"rendered":"Control third-party apps in Microsoft 365"},"content":{"rendered":"

These days, there\u2019s so much existing software that helps us do our jobs and live our lives that it\u2019s overwhelming. Every day we learn about something new that can improve our workflow, time management and more. But how do we know what\u2019s useful and what\u2019s just trouble in disguise? How do we make sure shiny new third-party apps won\u2019t cause more problems than benefits?<\/p>\n

 <\/p>\n

Learn how to keep your Microsoft 365 tenants safe with this eBook<\/a><\/h3>\n

 <\/p>\n

Third-party apps vs. native apps<\/h2>\n

One of the main security risks with this new software is third-party applications. A third-party application is an app that is not created by the manufacturer of a device. This is different from a native app, which is developed by the manufacturer. So, if Apple develops an app for the iPhone, it is a native app. If someone else develops an app that runs on iPhone, it is a third-party app. Same for Facebook\u2014apps that are not developed by Meta (formerly known as Facebook) are considered third-party and will often ask your permission to access your Facebook data.<\/p>\n

There are three types of third-party apps:<\/strong><\/h3>\n
    \n
  1. \n
      \n
    1. Applications created for official online app stores (like Microsoft AppSource<\/a> or Google Play): <\/strong>These applications follow strict criteria for development and publishing and are often vetted for issues like malware<\/a>.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

       <\/p>\n

        \n
      1. \n
          \n
        1. Applications offered through unofficial websites: <\/strong>These apps are usually offered via websites not affiliated with the manufacturer of the device. They are not vetted by manufacturers.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

           <\/p>\n

            \n
          1. Applications which connect with another service: <\/strong>This type of application is not downloaded. Instead, it piggybacks off another installed app and asks for permission to access the information you\u2019ve given to the other app. A good example of this is Facebook games.<\/li>\n<\/ol>\n

             <\/p>\n

            The risk of third-party apps<\/h2>\n

            There are varying levels of threats associated with each type of third-party app. The official app stores pose the least amount of danger due to their development criteria and vetting process, but no store can guarantee that all applications sold there are safe. It only takes one bad apple to compromise your data.<\/p>\n

            Unofficial third-party app stores may sell good apps, but they are more likely to have applications infected with malware. They can also sell what appears to be common, safe apps at lower prices than the official store. However, these apps can have ransomware or adware<\/a> injected into their code that you cannot see.<\/p>\n

            The risk of the third type of app that connects with another service isn\u2019t malware. But when used, you\u2019ve permitted it to view sensitive data from that point forward. So long after you\u2019ve played that quick game, the company is still mining your profile for potentially sensitive data.<\/p>\n

             <\/p>\n

            The risk for your business<\/h2>\n

            As you can see, the biggest problem with third-party apps is ambiguity. You don\u2019t honestly know if an app is malicious or helpful at first glance. It takes much research and time to determine if an app is coded with malware, even if you’re an IT professional. For someone without IT experience, it takes even more research and time.<\/p>\n

            What happens if malicious third-party apps slip through?<\/h3>\n

            What if someone doesn\u2019t do their due diligence, and a malicious third-party app downloads onto your network? What kind of malware could make its way into your system, and what trouble could it cause? Here are a few examples.<\/p>\n