“For yesterday’s event, Microsoft’s DDoS protection mechanisms were indeed triggered correctly. However, the response did not go so well.”
Microsoft admits an error in its own defenses amplified the attack instead of mitigating it. Azure App Services, the Azure portal and parts of Microsoft 365 were hit from about 11:45 to 19:43 UTC. Microsoft brags that its global footprint gives it “strategies and techniques that are unavailable to most other organizations.” Most other organizations don’t knock themselves offline with theirs.