The alleged theft of 3.64 million employee records from nine companies’ Azure and Entra environments appears more consistent with compromised identities than an Azure vulnerability, Hudson Rock’s analysis suggests. TheHatman is selling the data, but the claims remain unconfirmed: Tata Consultancy Services and Gap say they found no evidence that their corporate systems were breached.

Source

Microsoft keeps Microsoft 365, Entra ID, and Azure services available, but does not promise to restore a customer’s data to a specific known-good point after an attack. That makes independent, immutable backup increasingly important as stolen identities let attackers reach mailboxes, files, cloud resources, and recovery controls.

Source

Azure Private Link over IPv6 is a public preview that lets an IPv6 client reach selected Azure platform-as-a-service (PaaS) resources through a private endpoint. A private endpoint is a network interface with a private address in your Azure virtual network that represents a specific service resource. This article explains what PaaS means, how private access worked before this preview, the practical benefits of IPv6, and the configuration requirements and preview limitations you need to consider.

Source

Microsoft is rolling out three Azure IoT security changes with different readiness levels: TLS 1.3 for IoT Hub and managed-identity authentication between Device Provisioning Service and IoT Hub are in public preview, while HTTPS downloads for Device Update are generally available. The earlier Microsoft security overhaul focused on Cloud Solution Providers; this previous coverage addresses a separate Azure IoT security update.

Source

Windows Server 2016 Extended Security Updates are now generally available through Azure Arc, giving organizations a pay-as-you-go way to keep eligible on-premises, edge, and multicloud servers patched after end of support. Critical and Important security updates will remain available through January 2030 without moving workloads to Azure virtual machines.

Source

Azure DevOps pipelines can now authenticate to Azure DevOps with a Microsoft Entra service principal or managed identity instead of a Personal Access Token (PAT) or build session token. The new Azure DevOps service connection supports cross-organization repositories, artifacts, REST APIs, scripts, and reusable YAML templates without storing persistent credentials.

Source

Microsoft has made Trusted Launch generally available as the default security setting for eligible new Azure Generation 2 virtual machines and scale sets. New deployments automatically receive Secure Boot and a virtual TPM (vTPM), strengthening boot protection without extra cost or manual configuration.

Source