{"id":329115,"date":"2026-09-03T00:06:54","date_gmt":"2026-09-02T22:06:54","guid":{"rendered":"https:\/\/borncity.com\/blog\/?p=329115"},"modified":"2026-09-03T00:08:55","modified_gmt":"2026-09-02T22:08:55","slug":"microsoft-defender-for-office-365-stuft-legitime-google-suchlinks-als-boesartig-ein-1-9-2026","status":"publish","type":"post","link":"https:\/\/borncity.com\/blog\/2026\/09\/03\/microsoft-defender-for-office-365-stuft-legitime-google-suchlinks-als-boesartig-ein-1-9-2026\/","title":{"rendered":"MO1465962: Microsoft Defender for Office 365 stuft legitime Google-Suchlinks als b\u00f6sartig ein (1.9.2026)"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" title=\"Bug\" src=\"https:\/\/borncity.com\/blog\/wp-content\/uploads\/2025\/10\/bug05.jpg\" alt=\"Bug\" width=\"77\" height=\"77\" align=\"left\" border=\"0\" \/>Kurzer Hinweis f\u00fcr Windows-Benutzer: Der Microsoft Defender for Office 365 dreht nach einem Definitions-Update durch und stuft wohl legitime Google-Suchlinks als b\u00f6sartig ein. Microsoft hat das Problem eingestanden und untersucht diesen Fall.<\/p>\n<p><!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg02.met.vgwort.de\/na\/e94b7bfb146048da9db9d9d1058c933e\" alt=\"\" width=\"1\" height=\"1\" \/>Auf X tauchten vor einigen Stunden <a href=\"https:\/\/x.com\/Thijs0x57\/status\/2095067108342210886\" target=\"_blank\" rel=\"noopener\">Tweets<\/a> auf, die sich dar\u00fcber beklagten, dass der Microsoft Defender Google-Links als \"sch\u00e4dlich\" bem\u00e4ngelt und fragten, ob andere Nutzer das auch feststellen.<\/p>\n<p><a href=\"https:\/\/x.com\/Thijs0x57\/status\/2095067108342210886\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone\" title=\"Microsoft Defender false alert\" src=\"https:\/\/borncity.com\/blog\/wp-content\/uploads\/2026\/09\/image-1.png\" alt=\"Microsoft Defender false alert\" width=\"606\" height=\"629\" \/><\/a><\/p>\n<p>Microsoft hat bereits zum 1. September 2026 den Statusbeitrag <a href=\"http:\/\/admin.microsoft.com\/#\/MessageCenter\/:\/messages\/MO1465962\" target=\"_blank\" rel=\"nofollow noopener\">MO1465962<\/a> <a href=\"https:\/\/mailservices.isc.upenn.edu\/computing\/email\/penno365\/alerts\/ms-incidents.html\" target=\"_blank\" rel=\"noopener\">Some users may have been unable to open Google search links from email and Microsoft Teams messages<\/a> zu dieser St\u00f6rung gepostet. Bleeping Computer hat das Thema zum 2. September 2026 in <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/microsoft-defender-flags-legitimate-google-search-links-as-malicious\/\" target=\"_blank\" rel=\"noopener\">diesem Beitrag<\/a> aufgegriffen. Die St\u00f6rung betrifft den Microsoft Defender for Office 365 (insbesondere die Funktion Safe Links).<\/p>\n<p>Laut Microsoft k\u00f6nnen Benutzer m\u00f6glicherweise keine Google-Suchlinks aus E-Mails und Microsoft Teams-Nachrichten \u00f6ffnen.\u00a0Aufgrund einer fehlerhaften Klassifizierung stuft das System legitime Google-Suchlinks f\u00e4lschlicherweise als b\u00f6sartig ein. Benutzer erhalten die Warnmeldung \"Das \u00d6ffnen dieser Website ist m\u00f6glicherweise nicht sicher\" (\"Opening this website might not be safe\"), wenn sie versuchen, \u00fcber blockierte Hyperlinks auf Google URLs zuzugreifen.<\/p>\n<p>IT-Administratoren sehen m\u00f6glicherweise vermehrt Fehlalarme und automatische Sicherheitsmeldungen in Microsoft Sentinel oder im Microsoft Defender Portal. Das Kopieren des Hyperlinks und das direkte Einf\u00fcgen in einen Browser umgeht die Warnung nicht.<\/p>\n<p>Microsoft gibt inzwischen an, die fehlerhafte Sicherheitsklassifizierung korrigiert zu haben, und interne Tests w\u00fcrden zeigen, dass das Problem dadurch erfolgreich behoben wurde. Bei einigen Benutzern k\u00f6nnen jedoch f\u00fcr einen begrenzten Zeitraum weiterhin Auswirkungen auftreten, w\u00e4hrend die Abhilfema\u00dfnahme in der Service-Infrastruktur umgesetzt wird. Wir setzen uns mit einer Reihe betroffener Benutzer in Verbindung, um zu \u00fcberpr\u00fcfen, ob die Behebung abgeschlossen ist. Hier noch der Text der betreffenden Meldung &#8211; war jemand betroffen?<\/p>\n<blockquote><p>MO1465962 &#8211; Some users may have been unable to open Google search links from email and Microsoft Teams messages<br \/>\nStatus: serviceRestored<br \/>\nStart Time: Tue Sep 1 22:53:00 2026<br \/>\nEnd Time: Wed Sep 2 07:24:26 2026<br \/>\nService: Microsoft 365 suite<br \/>\nFeature Group: Administration<br \/>\nClassification: advisory<br \/>\nLast Updated: Wed Sep 2 07:25:56 2026<br \/>\nRoot Cause: An inaccurate security classification caused legitimate Google search URLs to be incorrectly identified as malicious, resulting in Microsoft Defender for Office 365 Safe Links blocking access to affected links.<br \/>\nNext Update: N\/A<br \/>\ncollapse section Details<\/p>\n<p>Time: Wed Sep 2 07:25:52 2026<br \/>\nDescription: Title: Some users may have been unable to open Google search links from email and Microsoft Teams messages<br \/>\nUser impact: Users may have been unable to open Google search links from email and Microsoft Teams messages.<br \/>\nMore info: Microsoft Defender for Office 365 Safe Links may have blocked the opening of Google search links (URLs), identifying them as malicious. In addition, admins may have received related alerts and incidents in the Microsoft Defender portal and Microsoft Sentinel as a result of these detections. Affected users received the following message when attempting to open the Google search links:<br \/>\n\"Opening this website might not be safe\"<br \/>\nCopying the hyperlink and pasting it directly into a browser didn't bypass the warning.<br \/>\nFinal status: We've received confirmation that the issue has been successfully resolved. However, some users may continue to experience impact for a limited time while the mitigation propagates through the service infrastructure.<br \/>\nScope of impact: Some users attempting to open Google search links from email and Microsoft Teams messages may have been impacted.<br \/>\nStart time: Wednesday, September 2, 2026, at 2:53 AM UTC<br \/>\nEnd time: Wednesday, September 2, 2026, at 10:17 AM UTC<br \/>\nRoot cause: An inaccurate security classification caused legitimate Google search URLs to be incorrectly identified as malicious, resulting in Microsoft Defender for Office 365 Safe Links blocking access to affected links.<br \/>\nNext steps: &#8211; We're reviewing our URL reputation classification processes to help prevent similar false-positives in the future.<br \/>\nThis is the final update for the event.<br \/>\nTime: Wed Sep 2 06:37:02 2026<br \/>\nDescription: Title: Some users may be unable to open Google search links from email and Microsoft Teams messages<br \/>\nUser impact: Users may be unable to open Google search links from email and Microsoft Teams messages.<br \/>\nMore info: Microsoft Defender for Office 365 Safe Links may block the opening of Google search links (URLs), identifying them as malicious. In addition, admins may receive related alerts and incidents in the Microsoft Defender portal and Microsoft Sentinel as a result of these detections. Affected users receive the following message when attempting to open the Google search links:<br \/>\n\"Opening this website might not be safe\"<br \/>\nCopying the hyperlink and pasting it directly into a browser doesn't bypass the warning.<br \/>\nCurrent status: We've corrected the inaccurate security classification, and internal testing indicates that this has successfully resolved the issue. However, some users may continue to experience impact for a limited time while the mitigation propagates through the service infrastructure. We're reaching out to a number of affected users to validate that remediation is complete.<br \/>\nScope of impact: Some users attempting to open Google search links from email and Microsoft Teams messages may be impacted.<br \/>\nStart time: Wednesday, September 2, 2026, at 2:53 AM UTC<br \/>\nRoot cause: An inaccurate security classification is causing legitimate Google search URLs to be incorrectly identified as malicious, resulting in Microsoft Defender for Office 365 Safe Links blocking access to affected links.<br \/>\nNext update by: Wednesday, September 2, 2026, at 12:30 PM UTC<br \/>\nTime: Wed Sep 2 05:58:38 2026<br \/>\nDescription: Title: Some users may be unable to open Google search links from email and Microsoft Teams messages<br \/>\nUser impact: Users may be unable to open Google search links from email and Microsoft Teams messages.<br \/>\nMore info: Microsoft Defender for Office 365 Safe Links may block the opening of Google search links (URLs), identifying them as malicious. In addition, admins may receive related alerts and incidents in the Microsoft Defender portal and Microsoft Sentinel as a result of these detections. Affected users receive the following message when attempting to open the Google search links:<br \/>\n\"Opening this website might not be safe\"<br \/>\nCopying the hyperlink and pasting it directly into a browser doesn't bypass the warning.<br \/>\nCurrent status: We've determined that an inaccurate security classification is causing legitimate Google search URLs to be incorrectly identified as malicious, resulting in Microsoft Defender for Office 365 Safe Links blocking access to affected links. We're working to correct the misclassification to remediate impact.<br \/>\nScope of impact: Some users attempting to open Google search links from email and Microsoft Teams messages may be impacted.<br \/>\nStart time: Wednesday, September 2, 2026, at 2:53 AM UTC<br \/>\nRoot cause: An inaccurate security classification is causing legitimate Google search URLs to be incorrectly identified as malicious, resulting in Microsoft Defender for Office 365 Safe Links blocking access to affected links.<br \/>\nNext update by: Wednesday, September 2, 2026, at 12:00 PM UTC<br \/>\nTime: Wed Sep 2 04:25:05 2026<br \/>\nDescription: Title: Some users may be unable to open Google search links from email and Microsoft Teams messages<br \/>\nUser impact: Users may be unable to open Google search links from email and Microsoft Teams messages.<br \/>\nMore info: Microsoft Defender for Office 365 Safe Links may block the opening of Google search links (URLs), identifying them as malicious. In addition, admins may receive related alerts and incidents in the Microsoft Defender portal and Microsoft Sentinel as a result of these detections. Affected users receive the following message when attempting to open the Google search links:<br \/>\n\"Opening this website might not be safe\"<br \/>\nCopying the hyperlink and pasting it directly into a browser doesn't bypass the warning.<br \/>\nCurrent status: We're reviewing affected alert IDs for a subset of impacted users, while also analyzing blocked links and their source, to determine why legitimate Google search URLs are being classified as malicious.<br \/>\nScope of impact: Some users attempting to open Google search links from email and Microsoft Teams messages may be impacted.<br \/>\nNext update by: Wednesday, September 2, 2026, at 10:30 AM UTC<\/p><\/blockquote>\n<p>&nbsp;<\/p>\n<p><strong>\u00c4hnliche Artikel:<\/strong><br \/>\n<a href=\"https:\/\/borncity.com\/blog\/2026\/08\/30\/microsoft-defender-meldet-faelschlich-abgeschalteten-windows-virenschutz-28-8-2026\/\" rel=\"bookmark\">Microsoft Defender meldet f\u00e4lschlich abgeschalteten Windows-Virenschutz (28.8.2026)<\/a><br \/>\n<a href=\"https:\/\/borncity.com\/blog\/2026\/08\/22\/microsoft-defender-treiber-ermoeglicht-schutz-zu-deaktivieren\/\" rel=\"bookmark\">Microsoft Defender-Treiber erm\u00f6glicht Schutz zu deaktivieren<\/a><br \/>\n<a href=\"https:\/\/borncity.com\/blog\/2026\/08\/20\/nachlese-zum-windows-defender-crash-am-18-august-2026\/\" rel=\"bookmark\">Nachlese zum Windows Defender-Crash am 18. August 2026<\/a><br \/>\n<a href=\"https:\/\/borncity.com\/blog\/2026\/08\/22\/ist-das-defender-synology-backup-false-alarm-problem-geloest\/\" rel=\"bookmark\">Ist das Defender Synology-Backup-False-Alarm-Problem gel\u00f6st?<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kurzer Hinweis f\u00fcr Windows-Benutzer: Der Microsoft Defender for Office 365 dreht nach einem Definitions-Update durch und stuft wohl legitime Google-Suchlinks als b\u00f6sartig ein. Microsoft hat das Problem eingestanden und untersucht diesen Fall.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8537,161,301],"tags":[24,4313,3288],"class_list":["post-329115","post","type-post","status-publish","format-standard","hentry","category-problem","category-virenschutz","category-windows","tag-problem","tag-virenschutz","tag-windows-en"],"_links":{"self":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/329115","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/comments?post=329115"}],"version-history":[{"count":3,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/329115\/revisions"}],"predecessor-version":[{"id":329119,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/329115\/revisions\/329119"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/media?parent=329115"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/categories?post=329115"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/tags?post=329115"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}