Microsoft Defender flags legitimate Google search links as malicious
Key Points:
- Microsoft is investigating a problem where Defender for Office 365 is incorrectly flagging legitimate Google search links as malicious, causing users to see warnings when attempting to open these links.
- The issue stems from an inaccurate security classification within Safe Links, which blocks access to affected URLs, and copying the links into a browser does not bypass the warning.
- IT administrators may receive alerts related to this incident in Microsoft Sentinel and the Defender portal as Microsoft works to correct the misclassification.
- Microsoft has not specified the regions or number of customers affected but has classified the issue as an advisory, indicating limited scope or impact.
- This incident follows previous false positive issues with Microsoft security products, including past problems with Exchange Online mistakenly flagging legitimate emails as spam or phishing.