Microsoft 365 suffering from outage for admin center

https://www.bleepingcomputer.com/news/microsoft/microsoft-365-outage-knocks-down-admin-center-in-north-america/

https://status.office.com/

Microsoft releases emergency patch to address a problem in the November patch cycle that broke Windows Server authentication using SSO or hybrid Azure AD. But you can’t get the fix from Windows update

https://www.bleepingcomputer.com/news/microsoft/new-microsoft-emergency-updates-fix-windows-server-auth-issues/

A newly discovered bug exists in Azure AD that allows undetected brute force attacks

https://thehackernews.com/2021/09/new-azure-ad-bug-lets-hackers-brute.html

US-Cert shines light on Azure OMI problems; MS patch available

@CISAgov encourages Azure users running Linux VMs to review https://t.co/badwMA3gCY and:

▪️ ensure automatic and manual updates are applied, as patches are made available
▪️ restrict external access to Linux systems that expose OMI ports (TCP 5985, 5986, and 1270) https://t.co/upRNF8xhkJ

— CISA Cyber (@CISACyber) September 17, 2021

4 Zero-Day vulnerabilities in Azure’s Open Management Infrastructure (OMI) affects thousands of Azure customers and millions of endpoints; being targeted by botnets

Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk

https://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-execution