Security
20 posts.
Azure Front Door Gets Post-Quantum TLS Key Exchange Policies
Cryptographic threats keep evolving, and the TLS handshake at your edge is where that starts. Azure Front Door now lets you control how keys are exchanged, including a hybrid…
Azure Front Door Premium WAF Gets a Managed HTTP DDoS Ruleset, Now GA
HTTP-layer DDoS attacks remain a leading cause of application downtime, and static controls such as IP filters and fixed rate limits often struggle to keep up with them. If you…
Large OS Disk Encryption Is GA for Azure Confidential VM Migrations
Moving big, production-scale workloads into confidential computing has often meant compromising on the OS disk. That gap just closed: Large OS Disk Encryption (LOSDE) is now…
Keyless TLS on Application Gateway Is Now GA with Managed HSM
TLS private keys sitting on a gateway are a standing risk. Azure Application Gateway now supports keyless TLS termination, so the key never has to leave the vault. The feature is…
Keep Your Keys Outside Azure: External Key Management for Managed HSM Is GA
If your regulator or sovereignty rules say you must keep physical control of your key-encryption keys, Azure Key Vault Managed HSM just got a lot more useful. External key…
Azure Cloud HSM Now Writes Hardware-Level Audit Logs
If you run keys in Azure Cloud HSM, you can now get proof of what happened on the device itself. Hardware audit logging is generally available, and it changes how you answer the…
Lock Down Your Cloud Storage: Entra ID Meets User-Delegated SAS
Security and flexibility are often at odds, but the latest update to Azure Storage proves they can work in perfect harmony. The era of anonymous, high-risk tokens is evolving. With…
Unified Security: Azure Container Apps Now Integrated with Microsoft Defender for Cloud
Securing serverless environments is no longer a "nice-to-have"—it is a critical requirement for modern cloud-native architectures. As container estates expand, managing security…
Scale Securely: Azure VM Image Builder Now GA in Sovereign and Secret Clouds
Maintaining parity across highly regulated and air-gapped environments is no longer a manual hurdle for infrastructure teams. In an era where security and consistency are…
Take Control of Your WAF: Custom Block Responses are Now GA!
Stop settling for generic "403 Forbidden" pages that leave your users in the dark. In the high-stakes world of web security, the user experience shouldn't end just because a…
Locked Down: Azure SQL Backups Are Now Immutable by Default
Ransomware and malicious actors don't just target your live production environments; they go straight for your safety net. In an era where data integrity is the last line of…
Security by Default: Azure Hardens Gen2 VMs with Trusted Launch
In an era where sophisticated firmware-level threats are on the rise, your cloud infrastructure needs more than just a perimeter firewall—it needs a foundation of trust. Microsoft…
Master Your Traffic: Azure Firewall Now Supports HTTP Header Insertion
Granular control at the network edge just got a major upgrade. As organizations navigate the complexities of multi-tenant environments and strict compliance standards, the ability…
Secure Your Streams: Azure Event Hubs Gains Network Security Perimeter Support
In the world of cloud-scale messaging, the line between accessibility and security is often thin. Azure Event Hubs serves as a cornerstone for modern data streams, but managing…
Shield Your Streams: Confidential Computing Comes to Azure Event Hubs
In a world where data breaches are an ever-looming threat, the security of "data in use" has become the new gold standard. Most organizations have mastered encryption at rest and…
Visibility Without Limits: Azure VNet Flow Logs and Microsoft Sentinel Join Forces
Is your network traffic a blind spot in your security strategy? In modern cloud environments, visibility is the difference between a minor incident and a total breach. Identifying…
Say Goodbye to Storage Keys: Azure Files SMB Meets Managed Identities
Is your cloud storage security still relying on the digital equivalent of a "skeleton key"? For years, managing static credentials and account keys for SMB access has been a…
Securing Azure Databricks: Beyond IP Access Lists to Zero Trust Architecture
Is your data truly safe behind a simple IP whitelist? In the era of Zero Trust Architecture, relying on basic hybrid connectivity is no longer enough for enterprise-grade…
Granular Security at Scale: Prefix-Scoped Access for Azure Blob Storage is Now GA
Managing cloud storage security just got a significant upgrade. For developers and architects, the challenge has always been balancing least-privilege access with operational…
Azure Service Bus Just Got a Security Upgrade You Can't Ignore
Azure Service Bus is now fortified with Network Security Perimeter (NSP) in general availability—a game-changing security layer that creates a virtual fortress around your…