Skip to content
Microsoft Defender Flags Google Links as Malicious

Microsoft Defender Flags Google Links as Malicious

First seen 3 Sep 2026, 19:58 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 4, 2026 at 19:43 UTC
  • •Microsoft Defender for Office 365 incorrectly flags Google links as malicious.
  • •Users receive warnings that prevent access to legitimate URLs.
  • •Microsoft is investigating and has categorized the issue as an advisory.

Microsoft is addressing an issue with its Defender for Office 365 software, which is mistakenly flagging legitimate Google search links as malicious. Users are receiving warnings stating, 'Opening this website might not be safe,' preventing access to these links. The problem stems from an inaccurate security classification within the Safe Links feature, which is intended to protect users by verifying URLs in emails and other Office 365 applications. Microsoft has categorized this incident as an advisory, indicating limited scope, but has not disclosed the number of affected users or regions. This is not the first occurrence of such false positives; similar issues have been reported in the past with Exchange Online. Microsoft is actively working on a fix to restore normal functionality. As of the latest update, the issue has been resolved, although some users may still experience residual effects.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 49d ago How this analysis works

Timeline

2026-09-03
Microsoft acknowledges issue
Microsoft confirms that Defender for Office 365 is mistakenly flagging Google links as malicious, affecting user access.
BleepingComputer
2026-09-03
Issue resolved
Microsoft announces that the misclassification issue has been successfully resolved, although some users may still experience impact.
BleepingComputer

More articles in this cluster (4)