FlagThis

References :

• ciso2ciso.com: Microsoft fails to collect critical security logs, exposing customers to risks – Source: www.csoonline.com
• social.skynetcloud.site: Microsoft fails to collect critical security logs, exposing customers to risks – Source: www.csoonline.com
• malware.news: Microsoft customer security logs misplaced due to vulnerability
• www.scworld.com: SCWorld’s brief summary of the incident, emphasizing the loss of security logs for a month.
• ciso2ciso.com: Microsoft Reveals Loss of Customer Security Logs for a Month – Source: heimdalsecurity.com
• cysec.social: VXUnderground’s tweet referencing the incident and highlighting Microsoft’s loss of customer security logs.
• CSO Online: CSO Online article discussing the broader implications of the incident for organizations relying on Microsoft cloud services and the potential impact on security monitoring and threat detection.
• CSO Online: Microsoft has admitted that it failed to collect crucial security logs for nearly a month due to a bug, leaving enterprise customers vulnerable to cyberattacks.
• cyberplace.social: Microsoft tells customers they lost log data for key security products.
• m365admin.handsontek.net: Starting around 23:00 UTC on 2 September 2024, a bug in one of Microsoft’s internal monitoring agents resulted in a malfunction in some of the agents when uploading log data to our internal logging platform.
• www.businessinsider.in: Microsoft has admitted that it failed to collect crucial security logs for nearly a month due to a bug, leaving enterprise customers vulnerable to cyberattacks.
• infosec.exchange: Before you leave for the weekend, make sure you check out today's Metacurity to stay on top of the most critical infosec developments you should know, including --FBI busts Alabama man for SIM-swap attack on SEC X account --ESET denies compromise after Israeli business infected with wiper, --Globe Life faces extortion after June breach, --Radiant Capital loses $50M in breach, --Group-IB dishes details on Cicada3301, --Microsoft loses logs for some cloud products, --Fake Google Meet pages used in new malware campaign, --much more
• www.bleepingcomputer.com: This warning comes as a result of a bug that prevented critical logs for some enterprise customers from being consistently collected during the first three weeks of September.

Classification:

• HashTags:
• Company: Microsoft
• Target: Microsoft Cloud Service Users
• Product: Microsoft Cloud Services
• Feature: Security Logs
• Type: DataBreach
• Severity: Major