Microsoft confirmed widespread service degradation across its 365 suite, affecting Outlook, OneDrive, SharePoint, Teams, Copilot and Universal Print. Users reported problems sending or receiving emails, loading files, and accessing print jobs, though Microsoft says availability has largely stabilized above 99 percent.
androidauthority.com
· 2026-09-02
A multi-day outage tied to Microsoft's Exchange Online authentication system continues to disrupt Outlook and other Microsoft 365 services into Tuesday, even after Monday's mitigation efforts. Microsoft says the root cause was a misconfiguration preventing authentication components from deploying properly across parts of its infrastructure, affecting SharePoint, Teams, Copilot, Defender XDR, Purview, the admin center, and Universal Print alongside Outlook.
techcrunch.com
· 2026-09-01
Microsoft confirmed a widespread outage of Exchange Online on Monday, causing Outlook users to experience delayed or failed emails, authentication errors, and search failures. The company traced the problem to an authentication component and began testing a fix on part of its infrastructure before a broader rollout. Downdetector logged over 5,000 user reports by 2 PM ET, with complaints also flooding social media.
techcrunch.com
· 2026-08-31
Researchers have identified a subscription-based phishing toolkit called NovaCookies that uses adversary-in-the-middle techniques to intercept live Microsoft 365 login sessions. Rather than just harvesting usernames and passwords, the kit captures session cookies, letting attackers bypass multi-factor authentication and take over accounts directly. It is being sold as a service for roughly $320 a month, making advanced phishing capability accessible to less-skilled criminals.
darkreading.com
· 2026-08-26
Microsoft is rolling out a new Teams meeting protection policy letting admins automatically block all identified external bots from joining meetings, without requiring organizer approval. This expands on a June update that flagged bots in the lobby but still let organizers admit them manually. The feature is off by default, deploying via targeted release through August with general availability expected by late September.
bleepingcomputer.com
· 2026-08-24