Cloud, apps and data

Azure security

Azure Firewall, Web Application Firewall, DDoS Protection, Bastion, Key Vault and Private Link.

Full changelog All Azure security news RSS

Last 30 days15updates across news and docs

News38posts in 180 days Product changes6in 12 months · 1 GA, 0 preview Roadmap0items announced

News

Azure security news

38 posts in the last 180 days from Microsoft's blogs, Tech Community and Azure Updates.

Filter all news

Azure securityNov 11Preview
Public Preview: Rate limit grouping for Azure Front Door Premium WAF
Announcing the public preview of rate limit grouping for Azure Web Application Firewall (WAF) on Azure Front Door Premium.
Azure Updates
Azure securityNov 5GA
Generally Available: Azure Front Door TLS key exchange policy with post-quantum support
Azure Front Door now supports configurable TLS key exchange policies, including hybrid post-quantum key exchange, to help you prepare for evolving cryptographic threats…
Azure Updates
Azure securityNov 5GA
Generally Available: WAF Insights for Azure Application Gateway
WAF Insights for Azure Application Gateway Web Application Firewall (WAF) is now generally available.
Azure Updates
Azure securityNov 4Preview
Public Preview: Azure Firewall IPv6 now supports application rules
Azure Firewall now supports application rules in IPv6 Public Preview, enabling layer 7 filtering for IPv6 HTTP and HTTPS traffic.
Azure Updates
Azure securityNov 4
Addressing PHP2Shell CVE-2026-109618 and CVE-2026-109619: upgrade guidance and Azure WAF mitigations
Written in collaboration with yuvalpery and Gunjan Jain Introduction Today, two critical remote code execution (RCE) vulnerabilities were disclosed in PHP.
Azure Network Security Blog
Azure securityNov 3Preview
Public Preview: JWT validation for Application Gateway for Containers
Application Gateway for Containers now supports centralized JSON Web Token validation through the AuthPolicy custom resource.
Azure Updates
Azure securityNov 3Preview
Public Preview: MCP gateway for Application Gateway for Containers
Application Gateway for Containers now supports Model Context Protocol routing through the new MCPRoute custom resource.
Azure Updates
Azure securityNov 3Preview
Public Preview: Private ingress for Application Gateway for Containers
Application Gateway for Containers now supports private frontends that are reachable only through approved Azure Private Link private endpoints.
Azure Updates
Azure securityNov 2
Protect against Brotli CVE-2026-111497 with Azure Web Application Firewall (WAF)
Google Brotli versions 1.0.3 through 1.2.0 contain a buffer overflow vulnerability in the Brotli decoder, according to the recently published CVE-2026-111497 .
Azure Network Security Blog

Show 29 older posts

Azure securityOct 29GA
Generally Available: HTTP DDoS ruleset for Azure Front Door Premium WAF
Announcing the general availability of the HTTP DDoS ruleset for Azure Web Application Firewall (WAF) on Azure Front Door Premium.
Azure Updates
Azure securityOct 27GA
Generally Available: Azure Front Door profile and route level WAF policies
Announcing the general availability of profile and route level policies for Azure Web Application Firewall (WAF) on Azure Front Door Premium.
Azure Updates
Azure securityOct 26
Azure WAF custom rules for PHP2Shell mitigation
Written in collaboration with Gunjan Jain and yuvalpery As described in our earlier blog, Addressing PHP2Shell CVE-2026-109618 and CVE-2026-109619: upgrade guidance and…
Azure Network Security Blog
Azure securityOct 20GA
Generally Available: Service tag match condition for Azure Front Door Premium WAF
Announcing the general availability of the service tag match condition for Azure Web Application Firewall (WAF) custom rules on Azure Front Door Premium.
Azure Updates
Azure securityOct 20GA
Generally Available: Keyless TLS on Application Gateway with Azure Key Vault Managed HSM
Azure Application Gateway now supports keyless TLS termination using certificates whose private keys stay in Azure Key Vault Managed HSM.
Azure Updates
Azure securityOct 16GA
Generally Available: External key management for Azure Key Vault Managed HSM
External key management for Azure Key Vault Managed HSM is now generally available in all Azure public regions.
Azure Updates
Azure securityOct 9Retirement
Retirement: Azure Key Vault Secrets Provider Extension for Azure Arc enabled Kubernetes clusters
The Azure Key Vault Secrets Provider Extension for Azure Arc-enabled Kubernetes will be retired on October 9, 2027.Customers currently using the extension should plan to…
Action may be required
Azure Updates
Azure securityOct 8GA
Generally Available: Exceptions in WAF for Azure Application Gateway and Azure Front Door
Announcing the general availability of exceptions for Web Application Firewall on Azure Application Gateway and Azure Front Door.Azure Web Application Firewall (WAF)…
Azure Updates
Azure securityOct 5Preview
Public Preview: IPv6 Support for Application Gateway WAF
Announcing the Public Preview of IPv6 support for Application Gateway WAF.Application Gateway Web Application Firewall (WAF) now supports inspection and enforcement for…
Azure Updates
Azure securitySep 29GA
Generally Available: Azure Database for PostgreSQL Flexible Server supports cross-tenant customer-managed keys (CMK)
Azure Database for PostgreSQL Flexible Server now supports cross-tenant customer-managed keys (CMK).
Azure Updates
Azure securitySep 2Preview
Public Preview: Azure Front Door profile and route level WAF policies
Azure Front Door’s Web Application Firewall (WAF) now supports profile and route level WAF policy associations in public preview.
Azure Updates
Azure securitySep 1GA
Generally Available: Azure Firewall auto-learn SNAT routes
Azure Firewall’s auto-learn SNAT routes is now generally available, automatically learning registered and private destination prefixes periodically and applying them as…
Azure Updates
Azure securityAug 26GA
Generally Available: Azure Bastion shareable link expiration
Azure Bastion shareable link expiration is now generally available.
Azure Updates
Azure securityAug 26Preview
Public Preview: IPv6 dual-stack support for Azure Bastion
Azure Bastion support for IPv4 and IPv6 dual-stack configurations is now available in public preview.
Azure Updates
Azure securityAug 26GA
Generally Available: Connect to AKS clusters using Azure Bastion
Azure Bastion integration with Azure Kubernetes Service is now generally available.
Azure Updates
Azure securityAug 24GA
Generally Available: Custom block response code and body for Application Gateway WAF
Announcing the General Availability of custom block response code and body for WAF integrated with Application Gateway Azure WAF integrated with Application Gateway now…
Azure Updates
Azure securityAug 18Preview
Public Preview: Ipv6 support in Azure Firewall
Azure Firewall now supports IPv6 in public preview, enabling customers to configure Azure Firewall and Firewall Policy in dual-stack mode for both IPv4 and IPv6 traffic.
Azure Updates
Azure securityAug 12Preview
Public Preview: Azure Front Door mutual TLS
Mutual TLS, also known as client certificate authentication, enables Azure Front Door to authenticate clients using X.509 certificates before requests reach an…
Azure Updates
Azure securityAug 11GA
Generally Available: 2.2X IDPS performance optimization in Azure Firewall
Azure Firewall Premium now delivers up to 22 Gbps throughput with TLS inspection and IDPS in Deny mode, a 120% increase from 10 Gbps, and up to 600 Mbps per TCP…
Azure Updates
Azure securityAug 5GA
Generally Available: Explicit proxy in Azure Firewall
Azure Firewall explicit proxy is now generally available.
Azure Updates
Azure securityJul 30Preview
Public Preview: Symmetric keys on Azure Key Vault Premium
We’re announcing post-quantum resilient symmetric keys on Azure Key Vault Premium are now available in public preview.
Azure Updates
Azure securityJul 27GA
Generally Available: HTTP header insertion in Azure Firewall
Azure Firewall now supports HTTP header insertion, enabling organizations to add or overwrite HTTP/HTTPS request headers directly from Azure Firewall application rules.
Azure Updates
Azure securityJul 23Preview
Public Preview: Azure DDoS Protection custom policy
Azure DDoS Protection custom policy is now in public preview.
Azure Updates
Azure securityJul 13
Secure Native Access to Azure Kubernetes Service (AKS) Private Clusters with Azure Bastion
Written in Collaboration with AvirupChat ShabazShaik Mohit_Kumar YuriDiogenes Introduction: As organizations move toward containerized workloads such as Azure Kubernetes…
Azure Network Security Blog
Azure securityJul 9
Azure DDoS Protection & Azure WAF: A Layered Defense for Modern DDoS Attacks
Introduction: The Need for Layered DDoS Defense Organizations today operate in an environment where Distributed Denial of Service (DDoS) attacks continue to evolve…
Azure Network Security Blog
Azure securityJul 7Preview
Public Preview: Exceptions in WAF for Azure Application Gateway and Azure Front Door
Azure Web Application Firewall (WAF) helps protect your web applications from common threats and attacks.
Azure Updates
Azure securityJun 17
Designing Cloud Landing Zones by Traffic Flow: A Defence‐in‐Depth, DMZ‐First Architecture
As enterprises adopt Microsoft Azure for large‐scale and regulated workloads, security architecture must be driven by traffic trust boundaries and inspection intent, not…
Azure Network Security Blog
Azure securityJun 11
A deep dive into Azure Bastion session recording
If you’ve worked with Azure Bastion’s Premium SKU, you’ve likely encountered one of its most powerful security features: graphical session recording.
Azure Network Security Blog
Azure securityMay 27
Become an Azure Network Security Ninja
Azure Network Security Blog

Product changes

New features and changes

All 6 entries Microsoft documented on Learn in the last 12 months, newest first.

Full changelog

March 2026

6 entries

New feature
Supported control plane API versions
Use the latest stable version for production workloads. Preview versions are for early testing only and aren't covered by Azure support SLAs. Each link points to the API specification in the azure-rest-api-specs repository. Stable API versions. 2026-02-01 (recommended) 2025-05-01 2024-11-01…
Docs2026-05-15 2026-02-01 2025-05-01 2024-11-01
Listed under March 2026 on Microsoft Learn
New feature
Private endpoint limit enforcement
Azure Key Vault is enforcing limits on the number of private endpoints per vault. Customers exceeding these limits may need to reduce usage or request an exception through Azure support. For more information on private endpoint limits, see Azure Key…
DocsAzure Key Vault service limits
Azure Key Vault service limits Review the service limits for Azure Key Vault, including transaction throughput, API request limits, and Managed HSM capacity.
Listed under March 2026 on Microsoft Learn
Deprecation
Preview API version deprecation
Azure Key Vault is deprecating older preview control plane API versions in accordance with Azure guidelines. All preview API versions except 2026-04-01-preview will be deprecated with a 90-day notice period. Customers using preview API versions should plan to migrate to…
DocsUpdate the Azure Key Vault API version you useNew
Update the Azure Key Vault API version you use Learn how to determine which Azure Key Vault API version your applications use, and move to a current, supported control plane or data plane version.
Listed under March 2026 on Microsoft Learn Action may be required
GA
New control plane API versions
New Azure Key Vault control plane API versions (2026-02-01 and 2026-03-01-preview) are now available across public Azure regions, with availability extended to Mooncake and Fairfax clouds.
Listed under March 2026 on Microsoft Learn
Retirement
Control plane SDK releases
All five Azure Key Vault control plane management SDKs supporting API version 2026-02-01 are now released. Control plane management SDKs that use older API versions will stop working when those API versions retire on February 27, 2027. Upgrade to the…
Listed under March 2026 on Microsoft Learn Action may be required
New feature
Azure RBAC is the default access control model for new vaults
Azure Key Vault API version 2026-02-01 introduces Azure RBAC as the default access control model for newly created key vaults when using this API version. Existing vaults continue using their current access model unless explicitly updated. Both Azure RBAC and…
DocsPlan for Azure RBAC as the default access control model in Key VaultNew
Plan for Azure RBAC as the default access control model in Key Vault Learn how API version 2026-02-01 and later affects the default access control model for new Azure Key Vaults, and decide whether to use Azure RBAC or access policies.
Listed under March 2026 on Microsoft Learn