grumpybozo, Oh, hey, folks who use #SpamAssassin: if you rely on the “default welcomelist” embedded in The Rules to avoid blocking mostly-good senders you should move to something more fit-to-purpose. A removal from it may cause you FPs.
By ~Monday, the ‘updates' rules channel will no longer have any def_whitelist_from_* entries for @.microsoft.com, as there has been documented #spam from such addresses. See my toot of yesterday.