logo

Microsoft fixes machine learning bug flagging Adobe emails as spam

ID: de11edda-7880-5135-a89a-e9a8118c52a1

STIX ID: report--de11edda-7880-5135-a89a-e9a8118c52a1

Feed Name: Bleeping Computer

Threat Score
50/100

Date Published: 2025-04-24

Date Updated: 2026-04-20

Author: Sergiu Gatlan

...
...

Microsoft mitigated a false-positive in an Exchange Online ML model that flagged legitimate Adobe URLs and emails as malicious, causing alerting and delivery issues; Microsoft used Replay Time Travel and updated ML logic to reduce future false positives. As a consequence, MANY free-plan users and Defender XDR customers uploaded more than a thousand Adobe Acrobat files (containing sensitive corporate data from hundreds of companies) to the public ANY.RUN sandbox, prompting ANY.RUN to make analyses private while some confidential documents remained publicly shared.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.