Quick fix: In the Microsoft 365 Defender portal, go to Defender portal → Email & collaboration → Policies & rules → Threat policies → DKIM and publish the required CNAME records (selector 1/2) to your ...