The fix can also block the ability to view source code entirely if desired, and when paired with a separate existing policy, can also stop the use of Chrome DevTools entirely.

'We determined that recent additions to the SafeLinks feature resulted in the false alerts and we subsequently reverted these additions to fix the issue,' the company tweeted.Now, Microsoft says it has come up with a fix that it says can stop the option to view a page's source code if a particular website is on an organization’s blocklist. Microsoft this afternoon figured out that changes to SafeLinks, which scans incoming email for malicious hyperlinks and attachments, caused the problem. Many delayed from yesterday.'Īll this comes two months after users reported that Defender for Endpoint's attack surface reduction (ASR) rules suddenly were removing icons and application shortcuts from the Taskbar and Start Menu in both Windows 10 and 11.Ĭynics might even say Defender has had a bit of a false positive problem in the past. A poster on Reddit wrote that 'pictures sent from employees personal GMAIL to work accounts getting flagged (they send pics of their receipts) and zoom links. Perusing the Reddit comments, Zoom links seem to be a particular problem, but not the only one. 'We've checked several of those URLs and all them seem a legit resource.' Microsoft enlarges its cockpit of Copilots to include securityĭefender is 'classifying all ZOOM.US a malicious URL, detecting all clicks as potentially Malicious,' an admin wrote.Google reminds everyone it too can offer an AI code-suggestion bot.Oh, really? Microsoft worries multicloud complicates security and identity.Germany sours on Microsoft again, launches antitrust review.Regardless of whether they can still access the sites, techies are saying the whole thing is a pain.

We're investigating why and what part of the service is incorrectly identifying legitimate URLs as malicious.' Microsoft said it is trying to isolate the root cause by poring over service monitoring.Īn hour after the first tweet, Redmond followed up, saying that 'users are still able to access the legitimate URLs despite the false positive alerts. 'Additionally, admins may be unable to view alert details using the 'View alerts' link in the emails.'' 'The high severity alert emails refer to 'A potentially malicious URL click was detected,'' according to the note.

How to block a site on edge