
False Positive from MS Defender XDR Leads to Public Sharing of 1,700+ Sensitive Docs via ANYRUN
CybersecurityDataLeakMicrosoftDefenderXDRANYRUNFalsePositiveSensitiveDocuments
This content is an AI-generated summary. If you encounter any misinformation or problematic content, please report it to cyb.hub@proton.me.
A false positive from Microsoft Defender XDR has led to the publication of more than 1,700 sensitive documents via ANYRUN. The system incorrectly identified Adobe Acrobat Cloud links as malicious, prompting users to upload files containing sensitive corporate data for analysis in public mode. ANYRUN has made these analyses private to stop the leaks, but users continue to share confidential documents publicly.