Defender misclassifies Google search URLs as malicious, triggering false warnings
Microsoft Defender for Office 365 Safe Links is incorrectly identifying legitimate Google search URLs as malicious, causing “Opening this website might not be safe” warnings. The issue (tracked as MO1465962) stems from an inaccurate security classification, and copying these links into a browser won’t bypass the warning. Admins may also see related alerts in Defender Portal and Microsoft Sentinel. Microsoft says it’s working to correct the misclassification and has issued an advisory with limited scope; regional impacts or user counts haven’t been disclosed.