Ironically Azure tweeted a guide on how to protect your DNS against unwanted changes only 3 hours before everything blew up: https://twitter.com/AzureSupport/status/1377697274378260489

You can't make this stuff up.