Microsoft: Yesterday's Azure and 365 server outage was caused by a DDoS attack | Canada News Media
Connect with us

Business

Microsoft: Yesterday’s Azure and 365 server outage was caused by a DDoS attack

Published

 on

Canada News Social Media

On Tuesday, Microsoft’s Azure data center infrastructure experienced a significant outage, causing widespread disruption for businesses and services dependent on the cloud platform. The incident, which included a Distributed Denial of Service (DDoS) attack and a subsequent faulty mitigation measure by Microsoft, highlighted the vulnerabilities even the most robust systems can face.

The Azure outage affected thousands of businesses globally, including major banks, airlines, and other critical infrastructure. Microsoft’s own services, such as Outlook, also suffered downtime. This disruption added to the woes of IT departments already grappling with a recent massive flaw in Crowdstrike’s endpoint protection software, which had previously caused widespread chaos and significant financial losses.

Microsoft explained that an unexpected usage spike led to Azure Front Door (AFD) and Azure Content Delivery Network (CDN) components underperforming, resulting in intermittent errors, timeouts, and latency spikes. The initial trigger was a DDoS attack, which overwhelmed the system with millions of bogus requests. Ironically, Microsoft’s defensive measures intended to protect against the DDoS attack exacerbated the problem rather than mitigating it.

DDoS attacks involve overwhelming a server with a massive volume of requests, typically delivered by botnets, which are networks of malware-infected computers acting in unison. These attacks can cripple systems by flooding them with more traffic than they can handle. While Microsoft’s Azure infrastructure is generally robust against such attacks, the unexpected spike and subsequent errors in their defensive mechanisms led to the significant outage.

Microsoft was quick to respond to the outage, working to mitigate the impact and restore services. The company issued an apology and provided an explanation for the downtime. “While the initial trigger event was a Distributed Denial-of-Service (DDoS) attack, which activated our DDoS protection mechanisms, initial investigations suggest that an error in the implementation of our defenses amplified the impact of the attack rather than mitigating it,” Microsoft stated on its status page.

Cybersecurity is an increasingly critical issue, with state-backed hacking groups often targeting global IT infrastructures. Microsoft, a significant provider of cloud services to nation-states and defense departments, is frequently in the crosshairs. The company has been actively involved in defending against cyber threats, contributing to Ukraine’s cyber defense and providing infrastructure for the U.S. Department of Defense. However, incidents like the recent Azure outage underscore the ongoing challenges in maintaining cybersecurity.

The Azure outage followed closely on the heels of a significant vulnerability in Crowdstrike’s endpoint protection software, which affected millions of computers and kiosks worldwide. This flaw led to substantial disruptions in critical infrastructure, causing chaos for customers and billions in losses globally. The incident has spurred calls for stricter regulations and more robust cybersecurity measures, highlighting the need for constant vigilance and improvement in cyber defense strategies.

Microsoft’s acknowledgment of the issues in its defensive measures is likely to lead to further scrutiny and questions about its priorities in cybersecurity. As cyber attacks continue to evolve, so must the tools and strategies used to defend against them. With the advent of AI platforms aiding hostile actors in automating their processes, the cybersecurity landscape is expected to become even more challenging in the coming years.

The Azure outage serves as a stark reminder of the vulnerabilities inherent in even the most sophisticated systems. While Microsoft has taken steps to address the immediate issues, the incident highlights the need for ongoing investment in cybersecurity infrastructure and strategies. As businesses and governments continue to rely on cloud services, ensuring the resilience and security of these systems will remain a top priority.

For those affected by the outage, it’s crucial to stay informed about updates and improvements to Azure’s infrastructure. Microsoft encourages all users to review their systems and ensure they are prepared for potential future disruptions. As cybersecurity threats continue to grow, staying ahead of the curve will be essential for maintaining the integrity and reliability of critical IT systems.

Source link

Continue Reading

Business

Canada Goose to get into eyewear through deal with Marchon

Published

 on

 

TORONTO – Canada Goose Holdings Inc. says it has signed a deal that will result in the creation of its first eyewear collection.

The deal announced on Thursday by the Toronto-based luxury apparel company comes in the form of an exclusive, long-term global licensing agreement with Marchon Eyewear Inc.

The terms and value of the agreement were not disclosed, but Marchon produces eyewear for brands including Lacoste, Nike, Calvin Klein, Ferragamo, Longchamp and Zeiss.

Marchon plans to roll out both sunglasses and optical wear under the Canada Goose name next spring, starting in North America.

Canada Goose says the eyewear will be sold through optical retailers, department stores, Canada Goose shops and its website.

Canada Goose CEO Dani Reiss told The Canadian Press in August that he envisioned his company eventually expanding into eyewear and luggage.

This report by The Canadian Press was first published Sept. 19, 2024.

Companies in this story: (TSX:GOOS)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Business

A timeline of events in the bread price-fixing scandal

Published

 on

 

Almost seven years since news broke of an alleged conspiracy to fix the price of packaged bread across Canada, the saga isn’t over: the Competition Bureau continues to investigate the companies that may have been involved, and two class-action lawsuits continue to work their way through the courts.

Here’s a timeline of key events in the bread price-fixing case.

Oct. 31, 2017: The Competition Bureau says it’s investigating allegations of bread price-fixing and that it was granted search warrants in the case. Several grocers confirm they are co-operating in the probe.

Dec. 19, 2017: Loblaw and George Weston say they participated in an “industry-wide price-fixing arrangement” to raise the price of packaged bread. The companies say they have been co-operating in the Competition Bureau’s investigation since March 2015, when they self-reported to the bureau upon discovering anti-competitive behaviour, and are receiving immunity from prosecution. They announce they are offering $25 gift cards to customers amid the ongoing investigation into alleged bread price-fixing.

Jan. 31, 2018: In court documents, the Competition Bureau says at least $1.50 was added to the price of a loaf of bread between about 2001 and 2016.

Dec. 20, 2019: A class-action lawsuit in a Quebec court against multiple grocers and food companies is certified against a number of companies allegedly involved in bread price-fixing, including Loblaw, George Weston, Metro, Sobeys, Walmart Canada, Canada Bread and Giant Tiger (which have all denied involvement, except for Loblaw and George Weston, which later settled with the plaintiffs).

Dec. 31, 2021: A class-action lawsuit in an Ontario court covering all Canadian residents except those in Quebec who bought packaged bread from a company named in the suit is certified against roughly the same group of companies.

June 21, 2023: Bakery giant Canada Bread Co. is fined $50 million after pleading guilty to four counts of price-fixing under the Competition Act as part of the Competition Bureau’s ongoing investigation.

Oct. 25 2023: Canada Bread files a statement of defence in the Ontario class action denying participating in the alleged conspiracy and saying any anti-competitive behaviour it participated in was at the direction and to the benefit of its then-majority owner Maple Leaf Foods, which is not a defendant in the case (neither is its current owner Grupo Bimbo). Maple Leaf calls Canada Bread’s accusations “baseless.”

Dec. 20, 2023: Metro files new documents in the Ontario class action accusing Loblaw and its parent company George Weston of conspiring to implicate it in the alleged scheme, denying involvement. Sobeys has made a similar claim. The two companies deny the allegations.

July 25, 2024: Loblaw and George Weston say they agreed to pay a combined $500 million to settle both the Ontario and Quebec class-action lawsuits. Loblaw’s share of the settlement includes a $96-million credit for the gift cards it gave out years earlier.

Sept. 12, 2024: Canada Bread files new documents in Ontario court as part of the class action, claiming Maple Leaf used it as a “shield” to avoid liability in the alleged scheme. Maple Leaf was a majority shareholder of Canada Bread until 2014, and the company claims it’s liable for any price-fixing activity. Maple Leaf refutes the claims.

This report by The Canadian Press was first published Sept. 19, 2024.

Companies in this story: (TSX:L, TSX:MFI, TSX:MRU, TSX:EMP.A, TSX:WN)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Business

TD CEO to retire next year, takes responsibility for money laundering failures

Published

 on

 

TORONTO – TD Bank Group, which is mired in a money laundering scandal in the U.S., says chief executive Bharat Masrani will retire next year.

Masrani, who will retire officially on April 10, 2025, says the bank’s, “anti-money laundering challenges,” took place on his watch and he takes full responsibility.

The bank named Raymond Chun, TD’s group head, Canadian personal banking, as his successor.

As part of a transition plan, Chun will become chief operating officer on Nov. 1 before taking over the top job when Masrani steps down at the bank’s annual meeting next year.

TD also announced that Riaz Ahmed, group head, wholesale banking and president and CEO of TD Securities, will retire at the end of January 2025.

TD has taken billions in charges related to ongoing U.S. investigations into the failure of its anti-money laundering program.

This report by The Canadian Press was first published Sept. 19, 2024.

Companies in this story: (TSX:TD)

The Canadian Press. All rights reserved.

Source link

Continue Reading

Trending

Exit mobile version