Microsoft has published a reference architecture for governing AI agents across multiple Microsoft Entra tenants without copying business data into a central tenant. It combines shared oversight with tenant-local agent identities, data, runtime enforcement, and audit records.

Source

Azure Cosmos DB Shell is now available from Data Explorer in the Azure portal, where it opens already connected to the account you’re viewing. The feature is in preview, but it lets users inspect data and run NoSQL queries without setting up a separate connection.

Source

Microsoft says most regions affected by an Azure network outage are recovering, but five still show impact as the company investigates a disruption tied to infrastructure servicing. The September 30 incident affected ExpressRoute and VPN gateways, Azure VMware Solution, and other network services across 18 regions.

Source

Researchers say the reasoning-extraction trick OpenAI disrupted still worked through Microsoft Azure, including against GPT-6 Astra. The finding follows OpenAI’s shutdown of a July distillation campaign linked to Moonshot AI—an effort to copy hidden model reasoning.

Source

Microsoft will begin enforcing tighter Content Security Policy checks on Entra ID sign-ins in mid-October 2026, blocking externally injected scripts and limiting logon pages to trusted Microsoft CDN content. The change rolls out automatically, needs no tenant configuration, and is meant to reduce exposure to cross-site scripting and other sign-in attacks.

Source

Microsoft 365 Groups expose conversation, thread, and post data through Microsoft Graph, but that still does not make them equivalent to Outlook mailbox access. The key issue is that Graph can work with group conversations at a structured level, yet it does not cover the full set of mailbox elements available through the Outlook mailbox API.

Source

Microsoft’s September 2026 Azure SDK roundup is led by the first stable release of Azure Storage SAS for Rust and PostgreSQL Authentication for.NET and JavaScript. The update also pushes a wave of new 1.0.0 management libraries across several languages, while Azure AI Search previews pick up the latest service API and broader knowledge-source features.

Source

Even with stronger large language models, Microsoft says enterprise AI still depends on a separate extraction layer that can turn messy PDFs, images, audio and video into structured, auditable data. The company is positioning Azure Document Intelligence and Azure Content Understanding as complementary tools for admins and developers who need grounding, confidence signals, and production-grade reliability rather than raw model output.

Source

Microsoft says JadePuffer used AI agents to automate reconnaissance, credential theft, lateral movement, persistence, and destructive actions in Azure. The campaign builds on the Storm-3168 attack that used two compromised service principals to map and destroy Azure resources; the newly detailed activity shows how agents helped coordinate the attack chain.

Source

Microsoft has made SQL Server on Azure Local generally available in connected and disconnected modes, extending Azure management to air-gapped and intermittently connected deployments. The SQLCon/FabCon Europe updates also bring DiskANN vector indexes to general availability across Azure SQL Database Hyperscale, Azure SQL Managed Instance, and SQL database in Fabric.

Source

Microsoft will stop accepting new Azure Communication Services (ACS) customers on October 23, 2026, before retiring most ACS offerings on September 30, 2028. The change leaves organizations using ACS Email Communication Services for bulk external email needing a replacement, while several Teams-related capabilities will continue under new conditions.

Source

Azure Cosmos DB support is now in public preview for Microsoft Fabric Database Hub, adding estate-wide discovery and monitoring without moving accounts into Fabric. The update expands the hub previously introduced as a unified database control plane in Database Hub and Fabric IQ.

Source

Microsoft has released two open-source tools that let AI coding agents build Azure SQL applications from a single prompt. The Azure SQL Developer Hub provides free databases and tested build scenarios, while Microsoft SQL Agent Skills teaches agents how to handle authentication, schemas, migrations, troubleshooting, and vector search.

Source

Storm-3168, also known as JADEPUFFER, used two compromised Azure service principals to map a tenant and rapidly destroy cloud resources in an 18-hour campaign. Most storage accounts targeted were deleted, but resource locks and deletion protection blocked some attacks and prevented wider damage.

Source

Microsoft is expanding Microsoft Foundry with a model-agnostic agent platform designed to let organizations change AI models without rebuilding their applications. The update also adds native voice agents, resilient long-running tasks, on-demand tool discovery, and automated optimization based on production data.

Source

Microsoft Foundry is adding request-time token enforcement, project-level cost attribution, and ROI tracking to help organizations control AI agent spending. The update extends Microsoft’s effort to turn AI agent spending into a FinOps problem by moving governance closer to the requests that generate consumption.

Source

Microsoft says its own supply-chain transformation has reduced cycle times by up to 75% in selected workflows after deploying more than 100 purpose-built AI agents. The result strengthens Azure’s pitch as an end-to-end platform for enterprise AI, combining models, data, infrastructure, applications, developer tools, security, and governance rather than treating each project as a standalone model deployment.

Source

Microsoft is positioning Azure Container Apps Sandboxes as the execution layer for production AI agents, while Microsoft Foundry handles identity, governance, tracing, and evaluation. The separation addresses a growing enterprise problem: agents that can reason and use tools need more than a model and a host application—they need isolated runtimes that can act without gaining uncontrolled access.

Source

Anthropic's Claude Opus 5.5 is now generally available in Microsoft Foundry, hosted on Azure infrastructure. Customers can choose Global Standard or US DataZone deployments. Pricing matches Anthropic's own list, following the release that made Claude Opus 5.5 cheaper than Opus 5 on input, output and cache reads. Anthropic is also shipping new beta API features for long-running agents alongside the model.

Source