Microsoft Foundry introduces toolboxes to streamline the development of AI agents by centralizing authentication and tool management. By abstracting complex tasks like user delegation, token isolation, and consent management, this architecture allows developers to build agents that act on behalf of users without embedding sensitive auth logic in their code. Foundry handles these security requirements server-side, ensuring that agents remain auth-free and easier to maintain.

Source

A critical vulnerability in Microsoft’s official Azure DevOps Model Context Protocol (MCP) server enables attackers to perform indirect prompt injection attacks. By embedding invisible HTML comments within a pull request description, an attacker can manipulate an AI coding assistant into executing unauthorized actions. Because the AI agent operates using the reviewer's elevated credentials, it can be tricked into accessing confidential wiki pages, triggering pipelines in restricted projects, and exfiltrating sensitive data.

Source

Microsoft has committed a multibillion-dollar investment to support Mistral AI in constructing new data center infrastructure across Europe. This expanded partnership aims to accelerate the deployment of advanced AI models while addressing regional demands for data control and regulatory compliance. By leveraging Mistral’s European-based GPU resources, Microsoft intends to strengthen its competitive position against other global AI providers.

Source

Microsoft has released the July 2026 cumulative security update for on-premises Azure DevOps Server, specifically supporting the 2022 and 2024 releases. This patch, identified as KB5121391, is essential for addressing two critical zero-day vulnerabilities that could be exploited via service connections. These flaws include CVE-2026-56155, which affects Active Directory Federation Services, and CVE-2026-56164, which impacts SharePoint Server.

Source

Azure Event Grid namespaces now feature Autoscale, currently in public preview. This feature automatically adjusts Throughput Units based on real-time workload utilization. It eliminates the need for manual capacity provisioning and helps maintain consistent performance during traffic spikes. By dynamically scaling resources, you can optimize costs and avoid throttling.

Source

Microsoft will deploy AMD's Helios rack-scale AI platform on Azure beginning in the second half of 2026 to run large AI models for its own use, customers, and Azure AI services. Helios combines AMD GPUs, CPUs, networking chips, and software as a full-system alternative to Nvidia's dominant rack-scale offerings. AMD CEO Lisa Su called the expanded deal a major milestone, while Microsoft CEO Satya Nadella stressed that customers need more choices in AI infrastructure.

Source

Microsoft will deploy AMD’s Helios rack-scale AI platform at scale on Azure to handle frontier-model inference for its own services, Azure AI offerings, and customer workloads. Helios integrates 72 Instinct MI455X GPUs providing 31.1 TB of HBM4 memory, up to 1.4 exaFLOPS of FP8 and 2.9 exaFLOPS of FP4 compute, plus 260 TB/s scale-up and 43 TB/s scale-out bandwidth via UALink over Ethernet. The open rack-scale design also incorporates sixth-generation EPYC “Venice” CPUs, Pensando DPUs, and ROCm software for large-scale training and inference.

Source

Microsoft has released Dusseldorf as a free open-source out-of-band application security testing platform. OAST tools detect flaws such as server-side request forgery, cross-site scripting, server-side template injection, and XML external entity issues that only appear when an application contacts external systems. The project name derives from the city Düsseldorf because its letters spell SSRF, with the umlaut dropped for simplicity.

Source

As of July 2026, SQL Server migration enabled by Azure Arc supports SQL Server on Azure Virtual Machines as a generally available (GA) migration target. This adds a second destination alongside Azure SQL Managed Instance and brings the entire migration lifecycle into a single guided workflow in the Azure portal. The migration method relies on backup and restore combined with log shipping, using Azure Blob Storage as an intermediary staging area. This article covers what the feature does, prerequisites, how the migration works, and its limitations.

Source

Microsoft is implementing a system-wide overhaul of its partner ecosystem to mitigate risks associated with Cloud Solution Providers (CSPs). These partners are frequent targets for nation-state actors seeking a vector to compromise downstream customer environments and steal sensitive data. To counter this, Microsoft is transitioning from reactive controls to a proactive, integrated security model that emphasizes continuous validation and identity verification.

Source

AWS Security Hub now natively monitors Microsoft Azure resources, marking the service's first expansion into direct multicloud management. The integration automatically discovers Azure virtual machines, storage containers, and SQL databases to evaluate them for misconfigurations and software vulnerabilities. Findings from Azure are normalized into the same format as AWS alerts, allowing security teams to manage risks across both platforms from a single console.

Source

Microsoft fait face à un recours collectif d’actionnaires aux États-Unis. L'entreprise est accusée d'avoir minimisé le ralentissement d’Azure

Cet article Azure, IA et dépenses massives, Microsoft est visé par une plainte d’actionnaires a été publié en premier par GinjFo.