Microsoft Defender Flags Google Links as Malicious

Microsoft Defender Flags Google Links as Malicious

First seen 3 Sep 2026, 19:58 UTC Scworldwww.bleepingcomputer.com 21.9

Article Content

Browse articles
ThreatCluster

Microsoft is addressing an issue with its Defender for Office 365 software, which is mistakenly flagging legitimate Google search links as malicious. Users are receiving warnings stating, 'Opening this website might not be safe,' preventing access to these links. The problem stems from an inaccurate security classification within the Safe Links feature, which is intended to protect users by verifying URLs in emails and other Office 365 applications. Microsoft has categorized this incident as an advisory, indicating limited scope, but has not disclosed the number of affected users or regions. This is not the first occurrence of such false positives; similar issues have been reported in the past with Exchange Online. Microsoft is actively working on a fix to restore normal functionality. As of the latest update, the issue has been resolved, although some users may still experience residual effects.

Key Points: • Microsoft Defender for Office 365 incorrectly flags Google links as malicious. • Users receive warnings that prevent access to legitimate URLs. • Microsoft is investigating and has categorized the issue as an advisory.

Timeline

2026-09-03
Microsoft acknowledges issue
Microsoft confirms that Defender for Office 365 is mistakenly flagging Google links as malicious, affecting user access.
BleepingComputer
2026-09-03
Issue resolved
Microsoft announces that the misclassification issue has been successfully resolved, although some users may still experience impact.
BleepingComputer