{"id":34332,"date":"2024-07-03T16:13:27","date_gmt":"2024-07-03T14:13:27","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=34332"},"modified":"2024-10-01T15:03:15","modified_gmt":"2024-10-01T13:03:15","slug":"hornetsecurity-quarantines-microsoft-exchange-emails-july-2-2024","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2024\/07\/03\/hornetsecurity-quarantines-microsoft-exchange-emails-july-2-2024\/","title":{"rendered":"HornetSecurity quarantines Microsoft Exchange emails (July 2, 2024)"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" title=\"Gmail\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2016\/07\/Mail.jpg\" alt=\"Mail\" width=\"88\" height=\"64\" align=\"left\" border=\"0\" \/>[<a href=\"https:\/\/www.borncity.com\/blog\/2024\/07\/02\/hornetsecurity-sortiert-microsoft-exchange-mails-in-quarantne-2-7-2024\/\" target=\"_blank\" rel=\"noopener\">German<\/a>]A information to the administrators among the blog readership who use HornetSecurity to filter mails (e.g. in Microsoft Exchange). A reader informed me that the mails in question (for Exchange) have been quarantined. On the HornetSecurity status page there is currently only a Degraded Performance note. Addendum: In the meantime, the provider is said to be in contact with Microsoft.<\/p>\n<p><!--more--><\/p>\n<h2>A note from a reader<\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg09.met.vgwort.de\/na\/4fe0137a213b41488a44a0420c99aecb\" alt=\"\" width=\"1\" height=\"1\" \/>HornetSecurity is a service used by companies to filter emails for spam and viruses (see also this company page). The service then sorts detected threats or spam into quarantine. A blog reader got in touch yesterday (thanks for that) because HornetSecurity moves all mails in quarantine.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" title=\"HornetSecurity: Quarant\u00e4nedetails f\u00fcr Mail\" src=\"https:\/\/i.postimg.cc\/FK0fj9gn\/image002.png\" alt=\"HornetSecurity: Quarant\u00e4nedetails f\u00fcr Mail\" width=\"519\" height=\"260\" \/><\/p>\n<p>Here is another screenshot with the relevant delivery details.<\/p>\n<p><img decoding=\"async\" title=\"HornetSecurity: Zustelldetails f\u00fcr Mail\" src=\"https:\/\/i.postimg.cc\/0jr8Pwx3\/image003.png\" alt=\"HornetSecurity: Zustelldetails f\u00fcr Mail\" \/><\/p>\n<p>This suddenly happens to all emails that are filtered by HornetSecurity &#8211; everything ends up in quarantine due to suspected phishing.<\/p>\n<p><img decoding=\"async\" title=\"HornetSecurity: Liste der Mails\" src=\"https:\/\/i.postimg.cc\/4NkJrnq8\/image004.png\" alt=\"HornetSecurity: Liste der Mails\" \/><\/p>\n<p><img decoding=\"async\" title=\"HornetSecurity: Freigabestatus der Mails\" src=\"https:\/\/i.postimg.cc\/h40yq53H\/image005.png\" alt=\"HornetSecurity: Freigabestatus der Mails\" \/><\/p>\n<p>The reader reported this to HornetSecurity by telephone. Their status page only provided a \"Degraded Performance\" message at this time.<\/p>\n<p><img decoding=\"async\" title=\"HornetSecurtiy: Degraded Performance\" src=\"https:\/\/i.postimg.cc\/BbdcC2vf\/image.png\" alt=\"HornetSecurtiy: Degraded Performance\" \/><\/p>\n<p>The reader only told me that HornetSecurity planned to get in touch with Microsoft. In the meantime, HornetSecurity has made an addition to the status page:<\/p>\n<blockquote><p>[HSE20240702-01-I] Incident: Degraded Performance: ATP Secure Links<\/p><\/blockquote>\n<blockquote><p>Incident Status: Degraded Performance<\/p>\n<p>Components: Advanced Threat Protection<\/p>\n<p>Locations: Switzerland, Global<\/p>\n<hr \/>\n<p><strong>July 2, 2024 13:28 CEST<br \/>\nJuly 2, 2024 11:28 UTC<\/strong><\/p>\n<p><strong>[Identified] <\/strong>We are in direct contact with Microsoft to resolve this issue. As soon as we have more information we will update you again.<\/p>\n<p><strong>July 2, 2024 11:59 CEST<br \/>\nJuly 2, 2024 09:59 UTC<\/strong><\/p>\n<p><strong>[Investigating] <\/strong>We received reports that Hornetsecurity Secure Links are recognized as phishing by Microsoft Defender. You will see something similar to \"The URL has malicious phishing traits based from high confidence intelligence source.\" The cause is currently being analysed in more detail. Other services and the email flow is not affected.<\/p><\/blockquote>\n<p>As far as I know, HornetSecurity has contacted Microsoft, and they plan to fix that issue. But feedback of blog readers from today (July 3, 2024) says, that there mails still quarantined.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]A information to the administrators among the blog readership who use HornetSecurity to filter mails (e.g. in Microsoft Exchange). A reader informed me that the mails in question (for Exchange) have been quarantined. On the HornetSecurity status page there is &hellip; <a href=\"https:\/\/borncity.com\/win\/2024\/07\/03\/hornetsecurity-quarantines-microsoft-exchange-emails-july-2-2024\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[63,580,1547],"tags":[869,1068,69],"class_list":["post-34332","post","type-post","status-publish","format-standard","hentry","category-cloud","category-security","category-software","tag-exchange","tag-mail","tag-security"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/34332","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=34332"}],"version-history":[{"count":2,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/34332\/revisions"}],"predecessor-version":[{"id":35076,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/34332\/revisions\/35076"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=34332"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=34332"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=34332"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}