I just installed their update and Outlook seems to be working ok now. I had had the same problem as reported on this thread. This is weird.
Latest message
, May 11, 2021 11:41 PM
View history
Title: Users having multiple issues related to email flow, links within email messages and the Microsoft Defender portal
User Impact: Users may experience multiple issues related to email flow, links within emails and the Microsoft Defender portal
More info:
Currently impacted scenarios:
- Delays in Automated Investigation and Threat Explorer should be mitigated for most customers. We are continuing to monitor for any remaining issues or delays.
- Alert policies and investigations related to false positive events are disabled in MDO and Defender portal to mitigate any additional false positive impact. They will be enabled once any remaining issues are resolved.
Prior Impact scenarios and mitigations:
- Admins may have seen delays in showing detailed action logs in the Action Center for email actions taken through Threat Explorer or Investigations; though, action results may still be viewed in Explorer or via the email timeline in the email entity.
- Some users may have seen messages still listed as quarantined in the admin portal. All impacted messages have already been released and admin portal should be showing correct status once all data is updated in the portal.
- Users were previously unable to receive email that contained URLs from legitimate domains like Google or DropBox. These messages would have been quarantined. This issue is resolved now.
- Users were unable to access links within emails as they were identified as risky. This is no longer occurring for legitimate email.
- Users may have been blocked from sending emails, if their messages were incorrectly flagged as spam or phishing attempts. We’ve unblocked all known impacted users.
- Users may have previously experienced latency within the Microsoft Defender portal due to large numbers of erroneous alerts. We have mitigated the performance issues related to Defender portal. We have paused ingestion of alerts related to the false positive event into the Defender portal.
This is continuation of multiple communications, and users may have seen aspects of this event reported previously under EX255432 and EX255435 before the full impact of this incident was understood.
Current status: We’ve mitigated the issue causing delays for Automated Investigations and Threat Explorer. In parallel, Alert policies and investigations related to the false positive event and investigations will remain disabled for MDO while we fully resolve the issue.
Scope of impact: This could potentially impact any user.
Start time: Sunday, May 9, 2021, 7:00 PM (5/10/2021, 12:00 AM UTC)
Next update by: Wednesday, May 12, 2021, 6:00 PM (11:00 PM UTC)