LIVE · cybersecurity feed
Live wire
patch

Microsoft working to fix Exchange Online mailbox quarantine issue

Microsoft is actively working to resolve an issue within its Exchange Online service that has led to the incorrect quarantining of customer mailboxes since Sunday, July 19. The incident, identified by Microsoft as EX1436407, has resulted in affected users being unable to send or receive emails and experiencing difficulties accessing their calendars.

ZeroDay News ·

Source: BleepingComputer

Microsoft is actively working to resolve an issue within its Exchange Online service that has led to the incorrect quarantining of customer mailboxes since Sunday, July 19. The incident, identified by Microsoft as EX1436407, has resulted in affected users being unable to send or receive emails and experiencing difficulties accessing their calendars.

The company has attributed the problem to a recent infrastructure change. This change reportedly caused an unexpected increase in memory consumption due to indexing data, leading to an out-of-memory condition that subsequently triggered the erroneous mailbox quarantines. Microsoft has confirmed that users sending emails to these quarantined mailboxes may receive Non-delivery Reports (NDRs).

This current issue is a recurrence of a previous incident, tracked under the designation EX1434354, indicating that additional steps are required for a complete resolution. While Microsoft has not specified the geographical regions or the exact number of customers impacted, it has classified the event as an incident, which typically signifies a noticeable effect on users.

Remediation efforts involve an ongoing cleanup of the excessive indexing data. Progress on this cleanup was reported at 66% complete by Wednesday afternoon and had advanced to 72% by Wednesday evening. As memory levels are validated across different regions, mailboxes are gradually being removed from quarantine to expedite recovery.

Microsoft has not yet provided a definitive timeline for the full restoration of services but has indicated that an update with this information would be forthcoming. The next scheduled update on the incident was set for 6 p.m. UTC on the day of the report.

This is not the first time Exchange Online has faced issues involving email quarantines or incorrect spam flagging. In March 2025, an Exchange Online bug caused anti-spam systems to mistakenly quarantine emails. A similar issue occurred in May 2025, when a machine learning model incorrectly flagged emails from Gmail accounts as spam. More recently, in September, an anti-spam service problem blocked Exchange Online and Microsoft Teams users from opening URLs and also led to the mistaken quarantining of emails. In February, Microsoft addressed another Exchange Online issue where faulty heuristic detection rules, intended to block credential phishing, incorrectly flagged thousands of legitimate URLs as phishing links, leading to the quarantine of valid emails.

patch
ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.