Microsoft is currently investigating an issue within Exchange Online that is incorrectly flagging legitimate emails as phishing attempts and sending them to quarantine. The problem, which began on February 5, impacts the company’s cloud-based email service.
According to reports, the issue stems from an updated URL rule intended to improve the detection of sophisticated spam and phishing schemes. Instead, the rule has erroneously categorized certain valid web addresses as malicious, resulting in emails being blocked. The incident underscores the ongoing challenges of balancing email security with ensuring reliable communication.
Microsoft is working to release the affected emails from quarantine and to ensure legitimate links are no longer blocked. The company stated that some users may see previously stopped emails suddenly appearing in their inboxes as a result of the fix.