Azure

The Miasma malware campaign has poisoned over 20 npm packages in the Leo Platform and RStreams ecosystems, targeting developer credentials and CI environments. The attack, executed in under three seconds by compromising an npm maintainer account, steals secrets from cloud providers, GitHub, and other platforms, and republishes packages to propagate further.

Azure’s 3D printers in Montbello can construct a $70,000 home using 100,000 recycled plastic bottles in a few days. The technology aims to address housing shortages by leveraging recycled materials and rapid construction methods.

Microsoft walked away from a potential $3 billion deal to lease Oracle's cloud infrastructure due to Oracle's refusal to add a security framework for U.S. government data. The failed talks highlight growing competition for cloud computing resources amid the AI boom, with Microsoft now exploring other providers to expand its Azure cloud capacity.

Microsoft is using Amazon's cloud services to address GitHub's AI-driven capacity issues, despite plans to move GitHub to its own Azure cloud by 2027. The surge in AI-related code activity has strained GitHub's infrastructure, prompting a temporary reliance on Amazon Web Services.

Microsoft’s open source tools were hacked to steal passwords of AI developers. The company shut down dozens of GitHub code repositories for Azure and AI coding tools following the reported hack.

The Miasma self-replicating supply chain attack has compromised 73 Microsoft GitHub repositories across four organizations, including Azure, Azure-Samples, Microsoft, and MicrosoftDocs. GitHub has disabled access to the affected repositories in response to the incident.

Cost.dev, developed by Infracost (YC W21), is a CLI designed to reduce costs for coding agents by optimizing token usage and API calls. It integrates with tools like Claude, GitHub Copilot, and IDEs to provide precise cloud cost analysis using static code evaluation and vendor pricing data.

A threat actor is targeting Microsoft 365 and Azure production environments, stealing data by abusing legitimate applications and administration features, including Microsoft Self-Service Password Reset. The attacks are leveraging legitimate tools to gain unauthorized access. This has led to data theft in various instances.

A security researcher reported a critical Azure vulnerability to Microsoft, but the company rejected the report and did not issue a CVE. The researcher claims that Microsoft quietly fixed the vulnerability despite rejecting the report. Microsoft disputes this claim, stating that the behavior was expected and no product changes were made.

Microsoft addressed 137 vulnerabilities in its May Patch Tuesday update, including 13 rated critical, with no actively exploited zero-days reported. The vulnerabilities affect various Microsoft products and components, such as Azure and Microsoft Dynamics 365. Researchers attribute the high volume of vulnerabilities to the growing use of artificial intelligence models in finding previously uncovered defects.

Chevin Fleet Solutions has admitted that attackers accessed customer databases during a FleetWave outage, potentially acquiring operational and personal data. The breach occurred in April and affected customer databases backed up on April 3, 2026. The company has confirmed that exposed information includes names, contact details, and payroll numbers.

Microsoft will stop offering long-term rentals for 17 Azure instance types, most powered by Intel CPUs released in the 2010s. This change affects cloud computing choices. Thirteen instance types will be killed in 2028.

Microsoft will stop offering long-term rentals for 17 Azure instance types and retire 13 of them in 2028, citing a shift towards newer and more efficient CPUs. The retired instances are mostly powered by old Intel CPUs from the 2010s. This move is expected to reduce operating costs for Microsoft and allow for more efficient use of datacenter space.

Nvidia CEO Jensen Huang declares the era of AI factories, where intelligence is the primary output of the global tech economy. However, a silent crisis is brewing in data infrastructure due to the shift from simple chatbots to autonomous AI agents. This shift will overwhelm underlying storage and data access layers.

Microsoft and OpenAI have ended a long-standing agreement regarding artificial general intelligence (AGI), allowing OpenAI to deploy products across any cloud provider. Microsoft remains OpenAI's primary cloud partner, but the AGI clause dictating their partnership has been officially removed.

Microsoft and OpenAI are expanding their partnership to advance AI development through Azure infrastructure and OpenAI's models. The collaboration focuses on scaling AI capabilities and accelerating innovation in enterprise and research applications.

A UK tribunal has approved a £2 billion claim against Microsoft, alleging the company overcharges for Windows Server licenses when not used on Azure. The Competition Appeals Tribunal dismissed Microsoft's objections, allowing the lawsuit by UK-based cloud licensees to proceed to trial.

Alien is a Rust-based tool designed to address challenges in paid self-hosting by enabling developers to manage software in customer environments while maintaining centralized control. It supports AWS, GCP, and Azure, offering solutions for updates, monitoring, and debugging. The article highlights its potential to resolve issues caused by customer misconfigurations.

Commvault has launched AI Protect, a new software tool designed to monitor and roll back actions of rogue AI agents in AWS, Azure, and GCP environments. The solution aims to enhance security by providing control over AI agent activities across major cloud platforms.

APT41, a China-backed threat group, is targeting major cloud providers including AWS, Google, Azure, and Alibaba using typosquatting techniques to deliver undetectable backdoors and harvest cloud credentials. The group's tactics aim to obscure command-and-control communication within cloud environments.

Nutanix claims some Azure cloud desktops should be deployed on-premises for better usability, leveraging its desktop virtualization expertise. The company partners with Microsoft to achieve this, while also asserting its solution can outperform Cisco's custom hypervisor for application delivery.

The threat group TeamPCP is breaching cloud and SaaS instances using stolen credentials, targeting AWS, Azure, and other platforms. Organizations are urged to act swiftly to mitigate risks from compromised credentials.