
Microsoft says outage was technical issue, not cybersecurity breach - WBAY
Microsoft confirmed email queues were returning to normal Friday after a global outage impacted Outlook, Teams and Copilot services worldwide.
Microsoft issued a public apology for the disruptions that affected millions of users across public and private industry and government agencies worldwide. The company confirmed the outage was caused by a technical issue introduced during a network capacity upgrade that surfaced during a network change.
Infrastructure Vulnerability
Paul Barford, an expert in computer communication networks security at the University of Wisconsin-Madison, highlighted the struggles of large, complex global infrastructures. Cascading failures are common when capacity upgrades go wrong, as the infrastructure tries to address the outage by moving resources around.
They were in the midst of a capacity transition, but it didn't go well. And the problem is once something breaks in these capacity upgrades, it's not uncommon for there to be cascading failures because everything starts moving around in the infrastructure to try to address the outage.
Tech Dependence Risks
Dave Schroeder, director of national security initiatives at the University of Wisconsin-Madison, emphasized how resources are concentrated in a small number of large vendors, creating single points of failure. This dependency affects critical services like healthcare and emergency response.
National Security Concerns
While the outage wasn't caused by a cyberattack, Schroeder warned that such vulnerabilities make critical infrastructure potential targets for foreign adversaries. The outage demonstrated how vulnerable modern society is when relying on the same digital infrastructure for essential services.
Microsoft has more than 450 million paid Microsoft 365 commercial subscriptions, though the total number of people affected by the outage hasn't been shared. The company has pledged to provide a full post-incident report once its review is complete.