Microsoft has confirmed Exchange Online is incorrectly flagging legitimate emails as phishing due to an overly aggressive URL detection rule introduced this week.