DDoS cyberattack affects several Microsoft services

Microsoft has reported, via its Azure post-incident review page (ID: KTY1-HW8), an incident handled on 30 July that affected the connection quality of several customers trying to access Microsoft services using Azure Front Door (AFD) and Azure Content Delivery Network (CDN).

Analysis of the incident revealed that the source of the incident was a distributed denial of service (DDoS) attack, which affected several of the company's services, including Azure App Services, Application Insights, Azure IoT Central, Azure Log Search Alerts, Azure Policy, the Azure portal itself, as well as a subset of Microsoft 365 and Microsoft Purview services.

Furthermore, in the incident report, Microsoft acknowledges that an error in the implementation of Azure's defensive anti-DDoS measures amplified the impact of the attack, rather than reducing it.