Microsoft confirmed an ongoing outage preventing some users from setting up MFA or reaching the My Sign-Ins platform with 504 Gateway Timeout errors reported. The company has failed over to alternate infrastructure and is evaluating further steps as elevated error rates continue.
Microsoft has switched to alternative healthy infrastructure to mitigate the impact of the outage.
As elevated error rates persist Microsoft is actively evaluating additional mitigation options.
Administrators should monitor MO1329260 in the Microsoft 365 admin center for updates on telemetry and additional request optimizations.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Microsoft says CVE-2026-124194, a moderate Outlook spoofing flaw, is already exploited and can disclose an NTLMv2 hash if a user opens a crafted file.
Microsoft's November 2026 Security Updates list 1,094 flaws, including 63 rated critical and one Outlook bug already exploited.
Microsoft has announced CVE-2026-118147, a high-severity spoofing vulnerability caused by improper certificate validation in Visual Studio. The flaw affects four product lines and requires immediate updates to the listed fixed builds.
Microsoft reported fiscal first-quarter revenue of $92.3 billion, up 19 percent, with Azure growth of 48 percent. Microsoft Cloud revenue was $63.9 billion, up 30 percent, and Devices and Consumer revenue fell 3 percent to $15.5 billion.
Microsoft published CVE-2026-62765 on Oct. 27, describing a type-confusion flaw in Microsoft Edge (Chromium-based) that could allow remote code execution, rated Important with a CVSS 3.1 score of 7.5. Microsoft's advisory lists it as not exploited and not publicly disclosed. The advisory's fixed-build number conflicts with Edge's own release notes, so the exact patched version is unconfirmed.
