M365 Changelog: (Updated) Microsoft Defender for Office 365 – Enabling malware filter bypass for SecOps Mailboxes

MC550035 – Updated June 20, 2023: Microsoft has updated the rollout timeline below. Thank you for your patience.

Microsoft is adding the ability for security admins and security operations (SecOps) teams to triage messages with malware verdicts for their own review and analysis. This update enables malware filter bypass on messages delivered to configured SecOps mailboxes in the advanced delivery policy.

This message is associated with Microsoft 365 Roadmap ID 124818

When this will happen:

Microsoft will begin rolling out in early August (previously mid-June) and complete by early September (previously late June).

How this will affect your organization:

Security admins can now review messages with malware verdicts delivered to configured SecOps mailboxes in the advanced delivery policy. With this update, messages with malware verdicts will be delivered for any existing or newly configured mailboxes.

What you need to do to prepare:

Please review configured SecOps mailboxes in the advanced delivery policy to add or remove any mailboxes. No additional actions are required to enable this update.

Learn more about how to the configure advanced delivery policy: Configure the delivery of third-party phishing simulations to users and unfiltered messages to SecOps mailboxes – Office 365 | Microsoft Learn