Microsoft is investigating an Trade On-line false optimistic situation inflicting emails containing photographs to be wrongly tagged as malicious and despatched to quarantine.
“Customers’ e-mail messages containing photographs could also be incorrectly flagged as malware and quarantined,” Microsoft stated in a service alert posted on the Microsoft 365 admin heart two hours in the past.
“We’re reviewing service monitoring telemetry to isolate the basis trigger and develop a remediation plan.”
Tracked beneath EX873252, this ongoing service degradation situation appears to be widespread, based on experiences from system directors, and it additionally impacts messages with picture signatures.
“Appears to solely be affecting our outbound site visitors and particularly for replies and forwards of beforehand exterior emails,” one admin stated.
“For us, it was each inbound and intra-org. Inbound solely would have been a lot simpler for me to take care of. Additionally they principally tagged our intra as inbound from what I noticed in tbr message header,” one other one added.
Redmond has but to disclose what areas are impacted by this situation and supply mitigation recommendation for impacted clients till the false optimistic issues are resolved.
In October 2023, Microsoft addressed the same situation attributable to a foul anti-spam rule that flooded Microsoft 365 admins’ inboxes with blind carbon copies (BCC) of outbound emails mistakenly flagged as spam.
Replace August 26, 13:00 EDT: Microsoft has taken measures to maneuver reputable emails mistakenly tagged as malicious out from quarantine.
“We recognized a problem affecting our malware detection programs. We have carried out a mitigation to unblock reputable emails that have been mistakenly quarantined. The replay of impacted emails is in progress,” Microsoft stated.
Replace August 26, 15:20 EDT: Microsoft says the problem has been resolved, and all affected emails have been quarantined.
“We have confirmed this situation is resolved after implementing a mitigation inside the service. Telemetry exhibits over 99% of impacted emails have been unblocked and routinely replayed,” the corporate stated.