Microsoft Defender incorrectly flags Google links as malicious

Microsoft is investigating an issue within its Windows antivirus software where legitimate Google search links are being incorrectly flagged as malicious. The error specifically affects Microsoft Defender for Office 365.

Users encountering the issue receive a warning stating that “opening this website might not be safe.” This misclassification occurs within the Safe Links feature, which is designed to protect against phishing by verifying URLs in real-time across email, Teams, and Office 365 applications.

Microsoft has categorized the incident as a “notice,” indicating a service issue with limited scope and impact. While the company did not specify the number of affected users or geographic regions, they reported that they have been working to correct the classification and mitigate the impact. At the time of reporting, the problem has been resolved.