Azure
12 articles
The CISO's New Mandate: Governing Autonomous Agents Without Slowing Innovation
As AI agents gain autonomy, CISOs must shift from perimeter defense to identity-centric governance and AI-powered threat detection to secure the agentic enterprise.
September 2023 Patches Released for Azure DevOps Server Self-Hosted Instances
Microsoft has issued cumulative updates for Azure DevOps Server 2022 and 2020 to address security and reliability issues. Administrators should apply these patches to maintain supported, secure self-hosted deployments.
AI-powered BEC scams use deepfake execs and fake invoices to steal ACH payments
Microsoft details a new AI-assisted business email compromise campaign that impersonates executives and forges invoices to trick finance teams into sending fraudulent ACH payments.
How Storm-3068 turned a leaked credential into full Azure tenant takeover
Attackers used a compromised developer identity to pivot from source code repos to cloud admin rights, exposing gaps in identity hygiene and pipeline security.
Azure Developer CLI Extension Framework GA Enables Custom Dev Workflows
The Azure Developer CLI (azd) extension framework is now generally available, allowing teams to build and share custom workflows for project initialization, deployment, and validation.
Microsoft DCU disrupts EvilTokens PhaaS platform behind device code phishing surge
Microsoft’s Digital Crimes Unit disrupted EvilTokens infrastructure, a top PhaaS platform using AI-assisted lures and automated token theft for device code phishing attacks.
Azure MCP Server 2.0 GA Delivers Self-Hosted Agentic Automation
Azure MCP Server 2.0 reaches general availability with self-hosting support, security hardening, and performance gains for agentic workflows.
Microsoft releases Cloud Web Applications Threat Matrix aligned with MITRE ATT&CK
Microsoft introduces a MITRE ATT&CK-aligned threat matrix to map and mitigate risks in cloud-hosted web apps and serverless platforms.
Microsoft Defender adds AI-themed attack detection for phishing and malware
Microsoft Defender now identifies and disrupts AI-generated phishing, malware, and multi-stage attacks across the kill chain using behavioral and content analysis.