Applies to Spamtitan versions 8 and 9 only.

You will have received a notification email from us regarding Microsoft Safe Links detonation in quarantine reports. 

This notification pertains specifically to user-level allow lists, with the likelihood of any significant impact being minimal. 

However, if you've noticed an uptick in False Negatives/Allowed messages with certain users recently, it's possible that some allow list entries were added by Microsoft's Real-time URL scanning process.  It is also possible that Quarantine Reports were changed, including disabling reports for some users. 

Development have mitigated this going forward by preventing Office365-related IP from accessing quarantine line, but we wanted to make you aware as we value transparent communication. If you have any further queries, please feel free to open a ticket with our support team.