Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a…
Live intelligence
AI, cloud & security insights.
Headlines refreshed automatically from AWS, Microsoft Azure, Google Cloud and established technology and security publications.
Publisher images are hidden to protect your privacy. Allow external media to show them.
[In preview] Public Preview: Support database-level managed identity (including FIC) in Create Database Scoped Credential T-SQL
With database-level managed identity in Azure SQL Database, you can use a user-assigned managed identity for each database to query files in Azure Bl…
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerber…
[Launched] Generally Available: Large OS Disk Encryption for Azure Confidential VM migrations
Large OS Disk Encryption (LOSDE) is now generally available for Azure Confidential VM migration scenarios. Organizations can move larger, production-…
[Launched] Generally Available: HTTP DDoS ruleset for Azure Front Door Premium WAF
Announcing the general availability of the HTTP DDoS ruleset for Azure Web Application Firewall (WAF) on Azure Front Door Premium. HTTP-layer DDoS at…
[Launched] Generally Available: Azure MCP Server 3.0
Azure MCP Server 3.0 is now generally available, expanding how AI agents and developer tools interact with Azure through the open Model Context Proto…
Tracking AI adoption in North Korean threat actor tradecraft
As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identi…
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The post IDC MarketScape names M…
Azure Cloud HSM Hardware Audit Logging: Verifiable audit trails for security and compliance
Security, compliance, and operations teams can use this hardware-originated evidence for monitoring, compliance reporting, and forensic investigation…
Announcing: Migrate Azure Container Apps logging destination from Log Analytics to Azure Monitor
The Log Analytics logging destination for Azure Container Apps is now a legacy logging option. Existing environments configured with the Log Analytic…
Introducing the Microsoft Copilot harness in Foundry Agent Service
Today, we’re introducing the Microsoft Copilot harness in Foundry Agent Service in public preview. The post Introducing the Microsoft Copilot harness…
[In preview] Public Preview: Cross Tenant Restore with Azure Backup
Cross-Tenant Restore (CTR) helps organizations establish an independent recovery path by enabling Azure VM backups to be restored into a separate Azu…
[Launched] Generally Available: Marketplace private offer enhancements
Private offers through Microsoft Marketplace help you optimize your spending power with pricing and terms aligned to your organization’s needs, inclu…
The CISO’s evolving role: Protecting and defending in the agentic era
As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity and data guardrails, and mod…
[Launched] Generally Available: Higher limit of Azure Blob Storage accounts per region per subscription
Higher Azure Storage account resource quotas are now generally available, supporting up to 1,000 storage accounts with standard endpoints per region,…
[Launched] Generally Available: Cost management and tagging for Claude models in Microsoft Foundry
Microsoft Foundry now brings Claude models into Azure Cost Management alongside the rest of your Foundry spend, generally available. Until now, Claud…
[Launched] Generally Available: Azure Front Door profile and route level WAF policies
Announcing the general availability of profile and route level policies for Azure Web Application Firewall (WAF) on Azure Front Door Premium. WAF pol…
[Launched] Generally Available: Network Watcher VNet flow logs filtering
Azure Network Watcher VNet flow logs filtering is now generally available, enabling you to control which network traffic flows are logged based on sp…