Microsoft documented the Azure intrusion of the JADEPUFFER actor (Storm-3168), which used two compromised service principals to map a tenant and then delete more than one hundred storage accounts in seven minutes. Protect workload identities, enforce least privilege, and enable independent locks and deletion protection.
On September 23, 2026, Mike Hulme, Azure’s GM of product marketing, describes the shift from request-response applications to continuously acting multi-agent systems, and Microsoft’s answer: govern the agent on Foundry, execute it in an isolated Azure Container Apps sandbox. For platform teams, it is a concrete framework for what must change when the agent replaces the request.
On September 30, 2026, Azure Kubernetes Service stops supporting Azure Network Policy Manager on Windows nodes. But the recommended Cilium Network Policy migration remains Linux-only: inventory your Windows pools and choose between node NSGs, self-managed Calico, or a Linux migration before the deadline.
Announced on January 26, 2026 and built on TSMC’s 3nm process, Microsoft’s Maia 200 accelerator is now rolling out across Azure datacenters with 30% better performance per dollar. It is Azure’s bet on homegrown silicon to break its dependence on NVIDIA and OpenAI.
On August 31, 2026, AWS Interconnect multicloud opened to Azure in public preview: a VPC and a VNet linked over AWS’s private backbone, no third-party carrier, but capped at 1 Gbps with no availability commitment. Test it for shared AWS-Azure workloads, but keep your existing circuits until general availability.
On August 20, 2026, Microsoft announced the retirement of the license-included Azure VMware Solution: sales stop after October 31, 2026, and a mandatory move to a VCF BYOL model before August 30, 2027. For customers, this is the last exit without going through Broadcom’s VMware Cloud Foundation bundle.
