Monday, January 13, 2025
HomeCyber Security NewsMicrosoft Warns of MFA Issue Affecting Microsoft 365 users

Microsoft Warns of MFA Issue Affecting Microsoft 365 users

Published on

Microsoft has issued a warning regarding an ongoing issue with Multi-Factor Authentication (MFA) that is impacting some Microsoft 365 (M365) users.

The problem, which surfaced earlier today, is preventing affected users from accessing certain M365 applications, raising concerns for businesses and individuals who rely on these services for essential operations.

Microsoft flagged the issue via its official MSFT365 Status account on X stating:
“We’re investigating an issue in which Multi-Factor Authentication (MFA) may prevent users from accessing some Microsoft 365 (M365) Apps. We’ve redirected affected traffic and service availability is improving.”

The post further advised administrators to refer to incident ID OP978247 within the Microsoft admin center for detailed updates and support.

Microsoft Warns of MFA Issue

Multi-factor authentication has become a cornerstone of digital security, requiring users to verify their identities with an additional layer of authentication, such as a text message, phone call, or app verification, after entering their password.

Investigate Real-World Malicious Links, Malware & Phishing Attacks With ANY.RUN – Try for Free

However, the current issue appears to be causing disruptions in this critical step, thereby restricting access to apps like Outlook, Teams, SharePoint, and others under the M365 umbrella.

While the exact cause of the problem has not yet been disclosed, Microsoft revealed that traffic redirection efforts are underway, and initial signs of service improvement have been observed.

The outage is likely to create challenges for organizations that depend heavily on M365 services for day-to-day communication, collaboration, and workflows.

Users attempting to log in with MFA-enabled accounts may find themselves locked out, potentially disrupting meetings, emails, and document sharing.

For IT administrators, the situation adds pressure as they navigate workarounds to keep their teams connected while keeping security protocols intact.

Businesses handling sensitive data may be especially cautious during this period, as MFA is a critical safeguard against unauthorized access.

Microsoft has assured its users that it is actively investigating the issue and is working on mitigating its impact. The company advises affected users to monitor the Microsoft 365 admin center for the latest updates on OP978247.

Microsoft’s prompt response, including traffic redirection, has reportedly improved the availability of certain services, though users are encouraged to plan for potential delays while Microsoft resolves the issue completely.

Find this News Interesting! Follow us on Google NewsLinkedIn, and X to Get Instant Updates!

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

RedCurl APT Deploys Malware via Windows Scheduled Tasks Exploitation

Researchers identified RedCurl APT group activity in Canada in late 2024, where the attackers...

Hackers Using YouTube Links and Microsoft 365 Themes to Steal Logins

Cybercriminals are executing sophisticated phishing attacks targeting Microsoft 365 users by employing deceptive URLs...

PoC Exploit Released for Critical macOS Sandbox Vulnerability (CVE-2024-54498)

A proof-of-concept (PoC) exploit has been publicly disclosed for a critical vulnerability impacting macOS...

IBM Robotic Process Automation Vulnerability Let Attackers Obtain Sensitive Data

A newly disclosed security vulnerability in IBM Robotic Process Automation (RPA) has raised concerns about potential...

API Security Webinar

72 Hours to Audit-Ready API Security

APIs present a unique challenge in this landscape, as risk assessment and mitigation are often hindered by incomplete API inventories and insufficient documentation.

Join Vivek Gopalan, VP of Products at Indusface, in this insightful webinar as he unveils a practical framework for discovering, assessing, and addressing open API vulnerabilities within just 72 hours.

Discussion points

API Discovery: Techniques to identify and map your public APIs comprehensively.
Vulnerability Scanning: Best practices for API vulnerability analysis and penetration testing.
Clean Reporting: Steps to generate a clean, audit-ready vulnerability report within 72 hours.

More like this

RedCurl APT Deploys Malware via Windows Scheduled Tasks Exploitation

Researchers identified RedCurl APT group activity in Canada in late 2024, where the attackers...

Hackers Using YouTube Links and Microsoft 365 Themes to Steal Logins

Cybercriminals are executing sophisticated phishing attacks targeting Microsoft 365 users by employing deceptive URLs...

PoC Exploit Released for Critical macOS Sandbox Vulnerability (CVE-2024-54498)

A proof-of-concept (PoC) exploit has been publicly disclosed for a critical vulnerability impacting macOS...