Microsoft Sentinel is Azure's cloud-native SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automated Response) platform. The Codeless Connector Framework (CCF) — formerly known as the Codeless Connector Platform — is the mechanism that enables partners, customers, and developers to build data connectors without writing infrastructure code. The newly public-preview CCF Push feature extends this framework with an event-driven ingestion pattern that sends security data directly to Sentinel as events occur, bypassing the latency inherent in traditional polling. This article explains what CCF Push is, how it differs from pull connectors, which Azure resources it automatically provisions, and how you configure an application to push data using the Log Ingestion API and OAuth 2.0.

Source

Microsoft announced the general availability (GA) of centralized RDP Shortpath configuration using Intune and Group Policy (GPO). RDP Shortpath is a UDP-based direct transport protocol that establishes connections between Remote Desktop clients and session hosts, reducing latency and improving reliability for Azure Virtual Desktop and Windows 365 Cloud PCs. You can now centrally configure this feature using Group Policy and Microsoft Intune, eliminating the need for manual per-host configuration.

Source

Microsoft announces the general availability of the Azure Test Run Hub, which delivers a new interface for managing test execution in Azure DevOps Test Plans.

Source

The Azure Developer CLI (azd) December 2025 release delivers substantial improvements centered on extension capabilities and developer workflow enhancements. The update introduces a powerful extension framework with custom configuration properties, support for interactive mode via Text User Interfaces, and distributed tracing for improved observability. User experience improvements include an interactive environment selector, faster provisioning progress updates with polling reduced from 10 seconds to 3 seconds, and clearer error messages for configuration issues. The release also adds flexible configuration options, such as support for azure.yml as an alternative filename and integrated access to the template gallery within initialization commands. Additionally, the update includes comprehensive bug fixes for Container Apps, Azure Pipelines, and deployment workflows, along with Microsoft Foundry rebranding throughout the platform.

Source

Ce tutoriel explique comment déployer Azure Bastion et se connecter à une machine virtuelle Azure à l'aide du Bureau à distance (RDP) et d'un compte Entra ID.

Le post Azure Bastion : comment accéder à une VM via RDP et un compte Entra ID ? a été publié sur IT-Connect.

Recent Microsoft Entra and Windows updates introduce multiple changes across authentication, identity management, and access control. The updates include an option to replace the legacy EdgeHTML WebView with the Chromium-based WebView2 for Entra ID authentication flows, improved identity constructs for AI agents, public preview support for synced passkeys, and expanded self-service account recovery. Additional changes cover jailbreak detection in Microsoft Authenticator, enforcement of a stricter Content Security Policy for browser-based sign-ins, updates to session revocation behavior, and new capabilities in Entra ID Governance, External ID, and Global Secure Access.

Source

Microsoft launched the new Azure Network Security Hub, providing a centralized interface for managing Azure Firewall, Web Application Firewall, and DDoS Protection services. The hub expands and rebrands Azure Firewall Manager to reflect broader network security capabilities.

Source