Microsoft Outage a Reminder of Fragility of Web Technology

Microsoft recently experienced a significant outage affecting its email, calendar, video conferencing, and cloud storage systems. Microsoft firmly denied the incident was due to a malicious cyber attack, attributing it to a network capacity upgrade issue that arose from a recent network change. This outage follows a series of widespread disruptions in late October, also not caused by cybercrime but discovered vulnerabilities in PHP, a programming language used in about 70% of global websites.

The vulnerabilities, warned about by the FBI on October 21, posed a threat of remote code execution. In response, businesses and web services scrambled to update PHP software, leading to a reminder of the vulnerability inherent in web technology. While much attention has been given to defending against malicious attacks, sometimes the sheer size and complexity of these systems can cause errors and disruptions.

The Small Business Charter in the U.K.'s executive director noted that firms heavily rely on digital systems like Microsoft Outlook for operations. The outage, which began around 1pm ET on November 12 and lasted into November 13, resulted in some services remaining unavailable. Notably, the Workhorse Group, an industrial manufacturer, rescheduled its Q3 earnings call due to the issue.

Microsoft later confirmed no malicious activity was involved and announced improvements in service availability, though some users continued to experience intermittent issues or delayed email delivery.