Back to updates

Cloud-Security - 1

2025 (7)

December (1)

security: Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack

Microsoft Security Blog

2025-12-09

Shai‑Hulud 2.0 is a large-scale supply chain attack in which adversaries maliciously modified hundreds of public packages to compromise developer environments, CI/CD pipelines, and cloud workloads in order to harvest credentials and configuration secrets. Microsoft published guidance to detect, investigate, and defend against these compromises across development toolchains, build systems, and cloud assets.

November (2)

azure: [In development] Private Preview: Azure Boost confidential device

Azure Updates

2025-11-18

Azure Boost confidential device is entering a private preview. Azure Boost offloads virtualization tasks such as networking, storage, and host management from the hypervisor and host OS to purpose-built hardware and software.

security: New IDC research highlights a major cloud security shift

Microsoft Security Blog

2025-11-06

IDC research urges CISOs to adopt AI-powered, integrated cloud security platforms—such as CNAPP, XDR, and SIEM—to lower risk, reduce complexity, and improve resilience, according to a Microsoft Security Blog post.

October (2)

security: Inside the attack chain: Threat activity targeting Azure Blob Storage

Microsoft Security Blog

2025-10-20

Microsoft’s Security Blog highlights that Azure Blob Storage is an attractive, high-value target because it stores massive volumes of unstructured data across many workloads. Threat actors are increasingly using sophisticated attack chains that exploit misconfigurations, exposed credentials, and evolving cloud-specific tactics to compromise Blob Storage.

security: New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

Microsoft Security Blog

2025-10-07

Microsoft’s Secure Future Initiative (SFI) patterns and practices provide practical, practitioner‑led guidance based on Microsoft’s Zero Trust implementation. The guides are designed to help organizations accelerate security maturity, reduce implementation friction, and build systems that are secure by design, by default, and in operation.

September (1)

azure: Retirement: Azure Disk Encryption

Azure Updates

2025-09-24

Azure Disk Encryption will be retired on September 15, 2028; customers are advised to transition to Encryption at Host (or other supported OS-disk encryption solutions such as CVM OS disk encryption) before that date.

August (1)

security: Storm-0501’s evolving techniques lead to cloud-based ransomware

Microsoft Security Blog

2025-08-27

Microsoft reports that financially motivated threat actor Storm-0501 has shifted from deploying on-premises endpoint ransomware toward cloud-based ransomware tactics, increasingly focusing on cloud-specific TTPs after previously targeting hybrid cloud environments.