Cobweb Solutions Ltd - Status Page

Microsoft are seeing broad recovery and stability across services. This was a technical issue not related to cyber or AI / agents.

The incident was introduced by an issue during an earlier network capacity upgrade that surfaced following a recent network change.

Microsoft have addressed the underlying issue and continue to restore service to remaining customers and regions.

Given the scale of demand, Microsoft restored services gradually, validating stability at each stage. While this took longer, it helped ensure a stable restoration.

Microsoft remains focused on addressing residual impact and ensuring reliable service restoration.

Microsoft continue to assess recovery across various connection methods and are closely monitoring service health to verify sustained stability.

At this time, Microsoft have no evidence of malicious activity associated with this incident.

Microsoft is seeing continued recovery progress across affected regions, with broader improvements observed across North America and sustained improvements throughout much of Europe. Encouraging recovery signals are also being observed across Asia Pacific. However, some users may continue to experience intermittent access issues or delayed email delivery as mitigation progresses across the remaining affected infrastructure.

Microsoft remains focused on stabilising recovered infrastructure, completing mitigation across the remaining impacted areas and reducing delayed email queues and backlogs. Service consistency is being closely monitored, with recovery being validated across different connection methods as Microsoft works towards full mitigation.

At this time, Microsoft has found no evidence of malicious activity associated with this incident.

Microsoft continues to treat this incident as a high priority and remains focused on achieving full service recovery.

Microsoft is seeing encouraging recovery progress across Europe, with service availability and email delivery performance improving across an increasing portion of affected Microsoft 365 infrastructure. Japan remains comparatively stable, while North America is also showing improvements. However, some users may continue to experience intermittent issues as recovery efforts progress.

Microsoft remains focused on addressing the remaining areas of disruption and improving service consistency across all affected regions. Reducing email queues and backlogs continues to be a priority, with the extended 48-hour email timeout window remaining in place to help protect delayed messages as delivery catches up.

At this time, Microsoft has found no evidence of malicious activity associated with this incident.

Microsoft continues to treat this incident as a high priority and remains focused on achieving full service recovery.

Microsoft has made further progress towards service recovery, with recovery actions completed across portions of the affected infrastructure in the Asia Pacific region. Traffic is being gradually restored, with improvements observed in key customer scenarios, including mailbox access and delayed email processing. However, some users may continue to experience intermittent issues.

Microsoft's focus is now on extending recovery actions across affected infrastructure in other regions, while continuing stabilisation efforts and introducing additional capacity to improve service consistency.

Reducing email queues and backlogs remains a priority. The extended 48-hour email timeout window remains in place to help protect delayed messages while delivery processes return to normal.

At this time, Microsoft has found no evidence of malicious activity associated with this incident.

Microsoft continues to treat this incident as a high priority and remains focused on achieving full service recovery.

Recovery efforts are ongoing and continue to progress in phases across affected Microsoft 365 infrastructure. Global telemetry and customer reports indicate incremental improvements across several workloads; however, service health remains variable, and capacity has not yet fully returned to normal levels.

Network and traffic management activities remain ongoing. To help protect email delivery during recovery, Microsoft continues to prioritise queue and backlog processing. The email timeout window has also been extended to 48 hours to help preserve delayed messages.

At this time, Microsoft has found no evidence of malicious activity associated with this incident.

Microsoft continues to treat this incident as a high priority and remains focused on achieving full service recovery.

Current Status: Microsoft continues recovery efforts across impacted infrastructure. Early signs of stabilisation are being observed; however, service capacity has not yet returned to normal levels, and service health remains variable as traffic is gradually reintroduced.

Microsoft's primary focus remains on restoring service stability through a controlled recovery process. Engineering teams are cycling affected infrastructure through traffic draining, restarts, remediation and staged restoration, with ongoing monitoring. Additional mitigation options are also being evaluated to improve recovery speed and consistency.

Network and traffic management activities remain ongoing, with priority given to maintaining backlog and queue health to protect delayed email during recovery. As part of these efforts, Microsoft is extending the email timeout window to 48 hours to help preserve delayed messages while services recover.

At this time, Microsoft has found no evidence of malicious activity contributing to this incident.

Microsoft continues to treat this incident as a high priority and remains focused on restoring services to full operational capacity. Further updates will be provided as recovery progresses.

Microsoft continues to see improvements in server capacity and stability following the deployment of the upstream authentication and routing configuration component patch.

Following confirmation of improved server stability across the infrastructure where the patch has been applied, Microsoft has begun systematically expanding the deployment, prioritising infrastructure supporting regions currently experiencing or approaching peak business hours.

Microsoft will continue to monitor the impact of these changes and develop further modifications to improve server stability and capacity.

At this time, Microsoft has found no evidence of malicious activity contributing to this incident.

Microsoft continues to treat this incident as a high priority and remains focused on achieving full resolution. Once mitigated, Microsoft will publish a Post-Incident Report detailing the root cause, corrective actions, defence-in-depth improvements and any additional remediation measures.