Cloud Security - 1

2025 (5)

November (1)

security: New IDC research highlights a major cloud security shift

Microsoft Security Blog

2025-11-06

IDC research urges CISOs to adopt AI-powered, integrated cloud security platforms—such as CNAPP, XDR, and SIEM—to lower risk, reduce complexity, and improve resilience, according to a Microsoft Security Blog post.

October (2)

security: Inside the attack chain: Threat activity targeting Azure Blob Storage

Microsoft Security Blog

2025-10-20

Microsoft’s Security Blog highlights that Azure Blob Storage is an attractive, high-value target because it stores massive volumes of unstructured data across many workloads. Threat actors are increasingly using sophisticated attack chains that exploit misconfigurations, exposed credentials, and evolving cloud-specific tactics to compromise Blob Storage.

security: New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

Microsoft Security Blog

2025-10-07

Microsoft’s Secure Future Initiative (SFI) patterns and practices provide practical, practitioner‑led guidance based on Microsoft’s Zero Trust implementation. The guides are designed to help organizations accelerate security maturity, reduce implementation friction, and build systems that are secure by design, by default, and in operation.

September (1)

azure: Retirement: Azure Disk Encryption

Azure Updates

2025-09-24

Azure Disk Encryption will be retired on September 15, 2028; customers are advised to transition to Encryption at Host (or other supported OS-disk encryption solutions such as CVM OS disk encryption) before that date.

August (1)

security: Storm-0501’s evolving techniques lead to cloud-based ransomware

Microsoft Security Blog

2025-08-27

Microsoft reports that financially motivated threat actor Storm-0501 has shifted from deploying on-premises endpoint ransomware toward cloud-based ransomware tactics, increasingly focusing on cloud-specific TTPs after previously targeting hybrid cloud environments.