Office 365 Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Office 365 Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Weems (@weems) reported 8 minutes ago

  @kmcnam1 "ERROR: Office 365 cannot confirm your identity please contact administrator for more information. "

• 
  Microsoft Threat Intelligence (@MsftSecIntel) reported 8 minutes ago

  Microsoft Threat Intelligence has identified a cluster of compromised websites displaying ClickFix lures and using EtherHiding, a technique associated with the ClearFake campaign. An injected Base64-encoded JavaScript contacts a BNB Smart Chain RPC gateway to query a smart contract previously reported in connection with ClearFake to fetch next-stage instructions. Content stored in a smart contract is resistant to conventional takedown or sinkholing because only the owner of the cryptocurrency wallet that deployed it can make changes. Users are presented with a fake CAPTCHA that instructs them to open the Windows Run dialog, paste clipboard content, and press Enter to execute an attacker-supplied command under the guise of verification. We’re seeing multiple forms of command obfuscation and living-off-the-land abuse, including conhost, cmd, PowerShell, pcalua, mshta, rundll32, msiexec, curl, WMI, WebDAV, and scheduled tasks. Carets split keywords, environment variables hide interpreters, and Windows run headlessly or minimized. TerminalFix lures apply the same technique but direct users to Windows Terminal or PowerShell instead of the Run dialog. This campaign demonstrates that ClickFix and TerminalFix are a high-volume initial access technique. Microsoft reports campaigns targeting thousands of enterprise and consumer devices globally every day, while some malvertising chains can funnel visitors to scam pages. Numerous actors use the technique to deliver Lumma Stealer and other infostealers, RATs such as Xworm and AsyncRAT, loaders including MintsLoader, and remote management tools. A single successful execution can expose credentials, establish persistence, enable lateral movement, and create a path to human-operated ransomware and potential domain compromise. Microsoft recommends that organizations enable Microsoft Defender network, web, and cloud-delivered protection; restrict Run and command-line tools where not required; enable PowerShell script-block logging; and implement application control. Users should never paste commands from CAPTCHAs, browser errors, emails, ads, or unsolicited support pages into Run, Terminal, PowerShell, or Command prompt. Microsoft Defender XDR provides layered protection across the ClickFix attack chain. Defender SmartScreen and Defender for Office 365 help block malicious sites, links, attachments, and fake CAPTCHA lures, while Defender for Endpoint detects suspicious command execution and outbound connections through alerts like “Suspicious command in RunMRU registry”, “Possible ClickFix activity”, “Possible initial access from an emerging threat”. Microsoft Defender Antivirus blocks malicious command execution using detections such as Trojan:Win32/ClickFix.* and Trojan:Win32/TermFix.*. Treat these alerts as evidence of a potential initial access incident: isolate affected devices, investigate credential exposure and persistence, and hunt for related activity.

• 
  Pimplefresh (@pimplefresh) reported 13 minutes ago

  @RihardJarc Half of its market value is office 365. So you can cut that segment in half, thus reducing its market cap by 25%. I think that segment's going to go down even more

• 
  Erin Connors (@ErinJConnors) reported 14 minutes ago

  @thsottiaux And remove the need for administrative approval. If I can sign in through office 365 etc, I should be able to connect my email/office 365 or google equivalent

• 
  Random Poser (@rndposer) reported 17 minutes ago

  @kmcnam1 MS Office 365 is a SCAM and now this! I don’t use AI agents even though I’m a senior developer at a large banking institution. I don’t see a use case considering AI still too slow to respond.

• 
  Simon Holman (@SimonHolman) reported 17 minutes ago

  I hate the fact that the "Microsoft Office" suite of apps is now the "Microsoft Copilot App" with the fire of 1000 suns. Even trying to work out how to download it when I login to Office365 is a complete nightmare!

• 
  Chris Baldassano (@Baldassano) reported 19 minutes ago

  Google has done some real wonky crap latley, Now, If you have an Android and use Gmail, it will no longer properly Auth to Office 365 accounts. Keeps asking for credentials. No fix of Yet.

• 
  Sidstream (@siddusaik) reported 19 minutes ago

  @Sakshi50038 I prefer quality over desi !!! Compare both and tell me which is better. Don't tell me to use indian products bcoz they are indian That's not how purchasing works. How many websites show you login using zoho mail? Chatgpt Copilot is integrated with office 365 sarvam is not.

• 
  Md Najeeb Ahmed (@najeeb775) reported 20 minutes ago

  @MicrosoftHelps it's been 8 days since my office 365 outlook email is blocked by Microsoft apparently because of a technical issue which I have no clue about. Ticket already raised and after multiple follow up with the agent there is no response or progress. Ticket 260430003000.

• 
  John Crickett (@johncrickett) reported 20 minutes ago

  "GitHub's scale is unprecedented." No, it really isn't. GitHub: 150M total users. Office 365: 345M total users. Xbox: 500M monthly active users. Bing: 100M+ daily active users. The company that runs Office, Xbox and Bing can run GitHub. If reliability is slipping, that's a priorities problem, not a scale problem.

• 
  Glenn 🇺🇲⚓️ (@gcanderson57) reported 22 minutes ago

  It's been a stereotypical Monday. Was awake most of the night. Good news is I didn't have to get up at a certain time for anything. Woke enough to coherent at 1100 am. Text messages from a IT customer about hacked email. Determined that last week he got an email saying to check out this file. It was a PDF stored somewhere else. It grabbed his email password. 😒🫤 Logged in & changed his password. Waited for him to get into office so I could clean his PC remotely. Then reset email password again and give him new one. Meanwhile my van which I bought for $4000 "as is" in February 2001 has decided it's time for the ABS module to fail! 😐 It's a 2009 VW Routan (aka rebadged Chrysler Minivan). I've accepted the fact that I got 5 years and I probably need to just replace it. 😕 Cost of repairs probably around $2500-$3000. And then Finally just saw MS is having issues with Exchange email and parts of the Office 365 product suite. Hopefully everyone else is having a good day.

• 
  Pythis (@Pythis1313) reported 30 minutes ago

  @darknesss932 An attorney should request a server level search utilizing Microsoft Purview ediscovery. I would wager they are using office365 for email which means that a query kql could be created pertinent to the case executed on the entire tenant for the time frames involved.

• 
  Vlado Mamic (@vladomamic) reported 32 minutes ago

  Office 365 Fix

• 
  Marco Aurélio (@marcrygamerbr) reported 34 minutes ago

  @Marcelo_gsf_ @davepl1968 @ObnoxiousFumes2 I have invented office365 before microsoft creating a xen server with word, powerpoint, visio and excel hahahaaha, my only windows install

• 
  Riyaz Shaikh (@riyaznriyaz) reported 37 minutes ago

  @Office365 I am very much frustrated and really very much disappointed with my account of Microsoft 365 account. I am got stuck in loop of authentication MFA For asking help also login required. And how could any one login if authentication is not working.