Cyber Attack News

Microsoft 365 Outage Hits North America as CDN Misconfiguration Disrupts Multiple Services

Microsoft is actively investigating a service disruption affecting multiple Microsoft 365 products for users in the North American region, with engineers pointing to Content Delivery Network (CDN) configuration issues as the likely root cause.

The incident, tracked in the Microsoft 365 admin center, began on March 6, 2026, and remains under active investigation as of late evening IST.

Users across North America began experiencing access failures to a range of Microsoft 365 services, including the Microsoft 365 Admin Center, rendering IT administrators unable to manage users, monitor security posture, or access service health dashboards.

Microsoft’s service health page acknowledged the disruption, confirming that “some users in the North American region may be unable to access multiple Microsoft 365 services.”

The incident timeline shows a series of rapid engineering updates:

Timestamp (IST)Update
Mar 6, 8:51 PMInitial acknowledgment of service disruption in North American region
Mar 6, 9:16 PMEngineers began reviewing service monitoring telemetry for Admin Center access
Mar 6, 9:39 PMContinued investigation into impacted services
Mar 6, 9:56 PMInvestigation focused on CDN configuration as the probable source

Microsoft 365 Outage

Microsoft’s investigation has narrowed specifically to Content Delivery Network (CDN) configurations as the suspected trigger.

The Office 365 CDN is responsible for distributing static assets and accelerating content delivery across Microsoft’s global infrastructure a misconfiguration at this layer can cascade into broad service unavailability across dependent products.

This is not the first time CDN-related or North American infrastructure issues have destabilized Microsoft 365. In January 2026, a separate major outage lasting nearly ten hours was traced to infrastructure in the North American region “not processing traffic as expected,” which also took down Outlook, Defender, and Purview simultaneously. A similar disruption in February 2026 locked thousands of IT administrators out of the Microsoft 365 Admin Center for over three hours.

While Microsoft has not released a definitive list of impacted services for this specific incident, prior outages with similar CDN and North American infrastructure triggers have disrupted Teams, Outlook, SharePoint Online, Exchange Online, and the Microsoft 365 Admin Center.

Notably, SharePoint’s legacy CDN domain publiccdn.sharepointonline.com is already on track for retirement by late April 2026, adding urgency to CDN-related stability concerns.

Affected organizations are advised to:

  • Monitor the Microsoft 365 Service Health Dashboard in the Admin Center for real-time updates.
  • Use the Microsoft 365 Status page (status.microsoft365.com) and Microsoft’s official X account for live incident tracking.
  • Implement backup administrative access procedures in case Admin Center remains inaccessible.
  • Review internal CDN dependencies for SharePoint and update references from the legacy CDN domain ahead of its April 2026 sunset.

Microsoft has not yet confirmed a resolution time, and engineers are continuing to analyze telemetry across impacted services as the incident remains open.

Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.

Guru Baran

Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments.

Recent Posts

NSA, CISA and NIST Release New Security Guidelines to Detect and Shut Down Rogue AI Agents

NSA, CISA, and NIST have released joint security guidelines to help organizations detect, contain, and…

3 hours ago

Hackers Exploit SiteGuard WAF Vulnerability That Could Give Them Full Control of Servers

Hackers are exploiting a command injection flaw in SiteGuard Server Edition, a web application firewall…

3 hours ago

Hackers Registered New Teams-Based Domains and Used a Login Page to Steal Your Logins

A newly registered domain copies Microsoft Teams’ login page and interface, raising concerns about a…

4 hours ago

16-Year-Old Broadcom Wi-Fi Flaw Lets Attackers Hack Routers Without Knowing Passwords

A 16-year-old flaw in Broadcom’s Wi-Fi software can let attackers within wireless range take control…

4 hours ago

Google Unveils New Android AI Protections to Block Scam Calls, Phishing Links and OTP Theft

Google has announced a new set of Android security protections designed to stop mobile scams…

9 hours ago

Hackers Exploiting Plex Vulnerabilities in the Wild to Deploy Cryptominer Malware

Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a…

11 hours ago