Skip to content
Microsoft Exchange Online Misclassifies Legitimate Emails as Phishing

Microsoft Exchange Online Misclassifies Legitimate Emails as Phishing

First seen 10 Feb 2026, 22:20 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 16:10 UTC

Microsoft is investigating an incident affecting Exchange Online that began on February 5, 2026, where legitimate emails are being incorrectly flagged as phishing and quarantined. This issue has disrupted business communications for many organizations using Microsoft 365. The problem is linked to a newly implemented URL detection rule.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

Timeline

2026-02-05
Incident began with emails flagged as phishing
2026-02-09
Microsoft acknowledged the bug in a service alert
2026-02-10
Microsoft continues investigation and disruption persists

More articles in this cluster (13)

Following this threat?

Track Microsoft in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed