Microsoft said it lost weeks of security logs for its customers’ cloud products

Microsoft notified customers that a bug in its internal monitoring agent caused a two-week outage in security log collection (September 2–19) for services including Entra, Sentinel, Defender for Cloud, and Purview. While not a security incident, the missing logs may hinder customers’ ability to detect threats and analyze events from that period. Microsoft rolled back a service change to mitigate the issue and informed affected customers, amid ongoing scrutiny of its logging practices highlighted after the Storm-0558 intrusions.