[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZXqExXxj9WxkbMgVm3fqJzY4WiiDlPXURirJMQBQerU":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":114},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"03607ca4-ca0e-4906-9f08-68f530edbbe2","Microsoft blames massive Microsoft 365 outage on maintenance bug","microsoft-blames-massive-microsoft-365-outage-on-maintenance-bug-bc1247","Microsoft says a bug in its automated network maintenance request system caused Thursday's massive outage by mistakenly removing IP routes from more devices than intended, disrupting Azure and Microsoft 365 services. [...]","A bug in Microsoft's automated network maintenance system mistakenly removed IP routes from numerous devices, leading to a widespread outage affecting Microsoft 365 and Azure services. The issue, which began on July 23rd, disrupted services like SharePoint, Excel, and Teams, with Microsoft eventually reverting the maintenance change to restore functionality.","Microsoft 365 outage caused by bug in automated network maintenance system.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fmicrosoft\u002Fmicrosoft-blames-massive-microsoft-365-outage-on-maintenance-bug\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F01\u002F26\u002Fmicrosoft-red-header.jpg","2026-07-24T15:41:44+00:00","2026-07-24T16:00:13.548811+00:00",7,[17,20,22,25,27,29],{"name":18,"type":19},"Microsoft 365","product",{"name":21,"type":19},"Azure",{"name":23,"type":24},"Microsoft","vendor",{"name":26,"type":19},"SharePoint",{"name":28,"type":19},"Excel",{"name":30,"type":19},"Microsoft Teams","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39,44],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[23,18,21],{"controls":52,"vendors":107},[53,82],{"slug":54,"name":55,"problem":56,"products":57},"log-management","Log management and security data pipelines","Security logs are so expensive to collect and keep that teams drop the ones they need when an incident happens.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-onum","Falcon Onum","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-siem\u002Ffalcon-onum\u002F","Real-time telemetry pipeline from CrowdStrike's purchase of Onum. It filters and streams data into Falcon Next-Gen SIEM and can run detections on third-party data before it is stored.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"abstract-security","Abstract Security","\u002Fvendor-logos\u002Fabstract-security.png","abstract-pipelines","Abstract Pipelines","https:\u002F\u002Fwww.abstract.security\u002Fplatform\u002Fcollection","Collects security data from any source, normalises it in the pipeline and routes it to several destinations.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"edge-delta","Edge Delta","\u002Fvendor-logos\u002Fedge-delta.png","edge-delta-telemetry-pipelines","Telemetry Pipelines","https:\u002F\u002Fedgedelta.com\u002Fproduct\u002Ftelemetry-pipelines","Pipelines that process logs, metrics, traces and security events before they are indexed, with masking, hashing and pre-built packs, and a full-fidelity copy in object storage for rehydration.",{"slug":83,"name":84,"problem":85,"products":86},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":43,"product_name":104,"url":105,"description":106},"CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",[108],{"slug":109,"name":23,"logo_path":110,"roles":111},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png",[112,113],"affected","reported_by",{"slug":115,"title":116,"body":117,"framework_refs":118,"framework_notes":128},"automated-maintenance-bug-triggers-massive-microsoft-365-outage","Automated Maintenance Bug Triggers Massive Microsoft 365 Outage","A flaw in Microsoft's automated network maintenance system incorrectly removed IP routes from a large number of network devices, causing a cascading failure across Microsoft 365 and Azure services. This incident highlights the critical risk of insufficient validation and testing in automated infrastructure management pipelines — a single unchecked change propagated broadly before it could be caught. The blast radius was magnified by the automated nature of the system, which applied the erroneous change at scale faster than human review could intervene. This matters because enterprise organizations depend on cloud platforms like Microsoft 365 for mission-critical operations, meaning even short outages translate to significant productivity losses, financial impact, and erosion of customer trust.",[119,120,121,122,123,124,125,126,127],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 11: Data Recovery","NIST SP 800-53 CM-2: Baseline Configuration","NIST SP 800-53 CM-3: Configuration Change Control","NIST SP 800-53 SI-7: Software, Firmware, and Information Integrity","NIST SP 800-53 IR-4: Incident Handling","ITIL Change Management: Change Advisory Board (CAB) approval process","ITIL Problem Management: Root Cause Analysis for recurring incidents","ISO\u002FIEC 20000-1: Service continuity and availability management",{}]