Microsoft recently disabled access to dozens of open-source repositories on GitHub following a supply chain attack. The breach targeted projects primarily related to Azure cloud services and various AI development tools used within VS Code. Attackers successfully injected malicious code designed to exfiltrate passwords and sensitive credentials from developers who utilized the compromised tools.

Source

Microsoft has introduced confidential live migration for Azure to improve the availability of highly secure virtual machines. Previously, confidential VMs often required full restarts during host maintenance or patching due to the isolation of protected hardware environments. This new feature allows these specialized workloads to move between hosts with only a brief pause, maintaining operational agility.

Source

Microsoft recently unveiled MAI-Thinking-1, a new in-house reasoning model designed to reduce its reliance on OpenAI technology. The company marketed the model to enterprise customers as being trained on a clean and commercially licensed data lineage to minimize legal risks. This flagship model features a mixture-of-experts architecture with 35 billion active parameters and a 256K context window for advanced software engineering tasks.

Source

Microsoft Foundry provides a unified platform for managing the full lifecycle of production AI applications. It addresses the transition from simple prototyping to complex production environments where performance, cost, and safety are critical. The platform supports a model-agnostic approach, allowing integration with Microsoft, open-source, and third-party models like Fireworks AI.

Source

Microsoft introduced Rayfin, an open-source SDK and CLI designed to provide an enterprise-grade backend for applications built by autonomous AI agents. This tool allows developers to define data models and authentication in code, which Rayfin then deploys directly to the Microsoft Fabric platform. To ensure security, Microsoft also unveiled a new containment framework and runtime controls to keep these autonomous agents within governed boundaries.

Source

Microsoft now offers Windows Server 2025 hotpatching through Azure Arc at no additional charge for eligible Azure Arc-enabled servers. Hotpatching installs Windows security updates without restarting the server in most months, but it does not eliminate all reboots. You still need Azure Arc, the Azure Connected Machine agent, Virtualization-based Security, and a supported Windows Server 2025 edition. This article explains what those requirements mean, how to enable the feature, and where its limits are.

Source

Microsoft Identity Manager (MIM) 2016 Service Pack 3 (SP3) became generally available on May 14, 2026, after an initial release in late March 2026 that Microsoft quietly withdrew without public explanation. SP3 is primarily a platform compatibility update: it adds support for SQL Server 2022, SharePoint Subscription Edition (SE), and Exchange Server SE. The most technically significant additions are Azure SQL Database support for the Synchronization Service using managed identities and claims-based authentication via Active Directory Federation Services (AD FS) for the MIM Portal. MIM 2016 remains supported until January 9, 2029.

Source