Said It Here

Why are security warning emails so vague?

Security notifications often fail to provide specific error details or pinpoint where an issue originates, leaving teams unable to determine if their organization is actually affected. Without actionable information, administrators are forced to manually audit logs and guess whether the warnings apply to production instances or forgotten sandboxes.

What people tried

Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.

  1. 1
    Running email logs in Setup
  2. 2
    Checking domain verification settings manually
  3. 3
    Submitting support cases
  4. 4
    Forwarding emails to consultants or colleagues for advice
  5. 5
    Checking underlying redirect links such as aka.ms
  6. 6
    Searching external blogs and articles to verify if a notification type exists

In their words

Unedited, most upvoted first, each linked to the thread it came from.

To add to this I am not actually sure the email is correct, since everything we send out comes from our DKIM verified domain.source ↗

UmpireFabulous1380 · r/salesforce · 86 upvotes

If Salesforce can actually tell me what's wrong and where they have identified an issue, then maybe we can do something about it.....source ↗

UmpireFabulous1380 · r/salesforce · 12 upvotes

Glad to see it’s not just me. I ran logs of every email sent from our org over the last 30 days and they were all either @salesforce.com or @<our already DKIM’d company domain>.net. Would love some insight on thissource ↗

Sagemel · r/salesforce · 9 upvotes

Just received the following email that passes SPF and DKIM from outlooksupport at outlook.mail.microsoftsource ↗

Is this something real? When exactly is the year 0001?source ↗

ifpfi · r/sysadmin · 9 upvotes

Same, I suspect a Sandbox issue since I don't think DKIM keys are auto copied, but the Org ID is my production instance.source ↗

UmpireFabulous1380 · r/salesforce · 6 upvotes

This is what I thought. Either my dev sandboxes or it was a blanket reminder. But JFC they are TERRIBLE communicators.source ↗

DaZMan44 · r/salesforce · 5 upvotes

Is this satire? That is the most scammy looking emailsource ↗

th3bennyb0y · r/sysadmin · 1 upvotes

I don't know whether the email is legitimate or not, I haven't seen that beforesource ↗

Beefcrustycurtains · r/sysadmin · 1 upvotes

Where this came up

People with this problem also raised