# Microsoft Defender Google link false positive > Live situation record from CLSTR: https://clstr.news/situations/microsoft-defender-google-link-false-positive > Updated: 2026-09-06T08:00:17.000Z. Sources: 9. Developments: 2. Microsoft investigated a technical issue where its Microsoft Defender for Office 365 software incorrectly flagged legitimate Google search links as malicious. The error occurred within the Safe Links feature, which is intended to protect users from phishing by verifying URLs in real-time across email, Teams, and Office 365 applications. Users encountered warnings stating that ‘opening this website might not be safe,’ or experienced immediate connection blocks and red warning screens. The incident caused a surge of automated security alerts across administration consoles and monitoring services like Microsoft Sentinel. Microsoft identified the cause as an internal inaccuracy in its threat classification process, specifically a reputation reading error within its own security infrastructure. The company confirmed the event was a large-scale false positive and that there was no actual threat from Google servers or any targeted cyberattacks. The issue was cataloged internally under technical reference MO1465962. ## Timeline ### 2026-09-06: Microsoft Defender incorrectly flags Google search results as dangerous Microsoft Defender incorrectly flagged Google search results as dangerous, causing access blocks for Windows and Office 365 users due to a threat classification error. 2 sources. https://clstr.news/cluster/microsoft-defender-incorrectly-flags-google-search-results-as-dangerous ### 2026-09-03: Microsoft Defender incorrectly flags Google links as malicious Microsoft Defender for Office 365 incorrectly flagged legitimate Google search links as malicious, triggering security warnings for users before the issue was resolved. 7 sources. https://clstr.news/cluster/microsoft-defender-incorrectly-flags-google-links-as-malicious --- Cite as: Microsoft Defender Google link false positive. CLSTR, https://clstr.news/situations/microsoft-defender-google-link-false-positive