Cyber criminals have discovered a new way to bypass Office 365 Safe Links

Microsoft’s Advanced Threat Protection (ATP) includes a feature called Safe Links. Office 365 Safe Links basically curb all the malicious links coming via phishing emails or documents. Safe Links checks the URL to see if it is blacklisted by Microsoft or any ATP customer or points to any malware. If such malicious link URL appears anywhere it is forbidden for clicking and the users are immediately informed about the same.

However, researchers at Avanan say that hackers have found a way to bypass Office 365 Safe Links by simply splitting the malicious link URL using HTML tag. Here is how they are doing it:

Such an attack is termed as baseStriker attack as it exploits the tag in the header of the HTML page or document. If tag is defined in the header of an HTML page, all subsequent links in the HTML body will take that as starting point for constructing the full URL as shown in the above image.

The researchers tested the baseStriker attack against several configurations and found that “anyone using Office 365 in any configuration is vulnerable,” be it web-based client, mobile app or desktop application of OutLook. What makes these attacks even more interesting is that the most of the URLs used by the hackers to bypass safe links are already blacklisted by Microsoft.

Microsoft has been made aware of these attacks and the company has launched an investigation. “Microsoft has a customer commitment to investigate reported security issues and provide resolution as soon as possible,” a Microsoft spokesperson said.  “We encourage customers to practice safe computing habits by avoiding opening links in emails from senders they don’t recognize.”

However, Routeget Technologies Customers are well protected & would not need to bother with this type of email phishing attack. Routeget Technologies helps in identifying spam emails as well as intruders in your system and take preventive measures. The firewalls are well equipped to keep your organization safe, up and running.

---

Enterprise Architecture & ERP Implementation Governance

Transitioning complex organizational workflows into scalable ERP modernization architectures requires systematic alignment between core operational processes and underlying digital infrastructure across all operating subsidiaries. When executing enterprise deployments within intricate multi-entity business environments, organizations must rigorously prioritize data normalization, chart-of-accounts standardization, and unified telemetry architectures. Establishing resilient, pre-configured integration boundaries across legacy application estates directly eliminates technical debt while ensuring end-to-end data integrity across high-frequency transactional lifecycles. Cross-functional governance committees—uniting financial controllers, supply chain leaders, and enterprise technical architects—remain indispensable for maintaining strict configuration discipline and curbing procedural fragmentation across regional operating units.

Beyond core transactional execution, enduring platform longevity depends on deliberate organizational enablement and continuous operational validation across all stakeholder tiers. Implementing isolated sandbox environments, automated regression testing frameworks, and formalized release cadence protocols enables business units to absorb continuous platform enhancements without introducing unexpected downtime or operational friction. Enterprises that deliberately pair proactive telemetry monitoring with targeted role-based training programs consistently achieve accelerated user adoption, compress post-go-live stabilization horizons, and maximize the long-term return on strategic technology investments. This disciplined operating model provides the institutional agility needed to scale operations predictably.