Microsoft 365 outage expected to fuel phishing and support scams
Original title: Microsoft 365 Outage Set to Ramp up Security Risks to Organizations
Officials and researchers warn of fake Microsoft messages and IT-support calls while recovery is still incomplete.
A global Microsoft 365 outage affecting services that interact with Exchange Online, especially Outlook, is not believed to be cyber-related. Security researchers and Australia's National Cyber Security Coordinator warn that criminals may use the disruption for phishing and fake support calls. Check Point previously reported Microsoft accounted for 33% of brand phishing attempts in Q3 2026. Microsoft said recovery was ongoing, with early stabilization but capacity not yet normal.
Unconfirmed: Phishing and fake-support activity is anticipated, not confirmed, and the outage is not believed to be cyber-related.
- Australia's cyber coordinator urged caution about unsolicited contact on November 13.
- Check Point said Microsoft's brand-phishing share rose from 23% in Q2 2026 to 33% in Q3.
- Advisers suggest reviewing sign-ins, mailbox rules, account changes and endpoint activity from the outage.
- Microsoft Defender XDR and Outlook alerts may have been unavailable during the outage.
- 1.Be cautious of unsolicited contact claiming to be Microsoft or IT support.
- 2.Avoid urgent requests, sharing personal information, and links in messages or email.
- 3.Review sign-ins, mailbox rules, account changes and endpoint activity from the outage window.
From the original article
3 min read at infosecurity-magazine.com
While Microsoft resolves the global M365 and Outlook outage, cybersecurity teams remain on high alert as cybercriminals prepare to exploit the chaos
By Beth Maundrill · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.