Microsoft Defender misidentifies legitimate URLs as malware
Microsoft Defender is mistakenly flagging legitimate links as malicious, causing some customers to receive dozens of alert emails. The company is investigating the issue as a false positive and has confirmed that users can still access the legitimate URLs despite the false positive alerts. Microsoft is reviewing service monitoring telemetry to isolate the root cause and develop a remediation plan. The impact is specific to any admin served through the affected infrastructure.