https://securitynews.ms/products/microsoft-defender-for-cloud/Microsoft Defender for Cloud news and documented product changes, each linked to Microsoft's own source.enSun, 01 Nov 2026 00:00:00 +0000https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#arc-proxy-support-for-defender-for-sql-servers-on-machineshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#arc-proxy-support-for-defender-for-sql-servers-on-machinesSun, 01 Nov 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnNovember 4, 2026 Defender for SQL Servers on Machines now supports Azure Arc SQL Server instances with Arc proxy enabled, starting with Defender for SQL extension version 2.0.3585.403 . Organizations that don't allow direct internet access from their machines can…https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/cloud-security-billing-simplified-introducing-the-defender/ba-p/4559743https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/cloud-security-billing-simplified-introducing-the-defender/ba-p/4559743Tue, 20 Oct 2026 19:02:27 +0000Microsoft Defender for Cloud BlogThat's the thinking behind an upcoming improvement to Microsoft Defender for Cloud: the Defender Workload Unit , or DWU. It's a new billing model and product experience that translates workload-specific usage into a common billing unit, with one unit price and one…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#posture-policies-and-recommendation-exemptions-available-in-microsoft-defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#posture-policies-and-recommendation-exemptions-available-in-microsoft-defenderThu, 01 Oct 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnOctober 28, 2026 Posture policies and recommendation exemptions are now available in public preview in the Microsoft Defender portal for Azure environments. With these new capabilities, you can: Gain visibility into your security posture through evaluations of Azure resources against…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#on-demand-malware-scanning-now-supports-scanning-specific-blobs-files-containers-and-file-shares-gahttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#on-demand-malware-scanning-now-supports-scanning-specific-blobs-files-containers-and-file-shares-gaThu, 01 Oct 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnOctober 5, 2026 On-demand malware scanning in Microsoft Defender for Storage now supports targeted scanning of specific items. Instead of scanning an entire storage account, you can scope scans to a single blob or file, a specific container or file…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#new-defender-server-security-experiencehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#new-defender-server-security-experienceThu, 01 Oct 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnOctober 6, 2026 The new Defender server security experience brings together cloud and endpoint data from Microsoft Defender for Endpoint and Defender for Servers. In the Microsoft Defender portal, you can: Review the new server asset page with combined cloud…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#kspm-misconfiguration-recommendations-moving-to-controller-level-scope-gahttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#kspm-misconfiguration-recommendations-moving-to-controller-level-scope-gaThu, 01 Oct 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnOctober 5, 2026 Kubernetes security posture management (KSPM) misconfiguration recommendations are being updated to align their resource scope with Kubernetes workload controllers. Previously, recommendations appeared at the individual running container instance level. They will now appear at the container deployment…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#expanded-server-onboarding-experiencehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#expanded-server-onboarding-experienceThu, 01 Oct 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnOctober 20, 2026 The new Defender server security experience expands to include onboarding guidance for Azure and on-premises servers, building on the investigation and access management capabilities released on October 6. With this update, you can: Onboard supported Azure virtual…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#cloud-security-plan-management-in-the-defender-portalhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#cloud-security-plan-management-in-the-defender-portalThu, 01 Oct 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnOctober 20, 2026 Cloud security plan management is scheduled to become available in public preview in the Microsoft Defender portal for Azure commercial environments on October 20, 2026. With this experience, you can: Connect Azure subscriptions and management groups to…https://azure.microsoft.com/updates?id=570282https://azure.microsoft.com/updates?id=570282Tue, 01 Sep 2026 22:34:43 +0000Azure UpdatesCustomers can now bring Azure Container Apps environments into Microsoft Defender for Cloud’s Serverless Containers Posture experience, helping security teams extend posture management across more of their container estate from a single workflow. This makhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#upcoming-deprecation-of-the-machines-should-have-a-vulnerability-assessment-solution-recommendationhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#upcoming-deprecation-of-the-machines-should-have-a-vulnerability-assessment-solution-recommendationTue, 01 Sep 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnSeptember 23, 2026 As part of the transition to individual recommendations, the Machines should have a vulnerability assessment solution recommendation will be deprecated on December 14, 2026. Customers should use individual recommendations in Microsoft Defender for Cloud to review and…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#upcoming-billing-updates-for-defender-for-servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#upcoming-billing-updates-for-defender-for-serversTue, 01 Sep 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnSeptember 30, 2026 Effective November 1, 2026, Microsoft Defender for Servers introduces two related updates: Billing policy update: Productivity and desktop client devices, such as Windows 10 and Windows 11 PCs, are no longer billed as servers. For more information…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#general-availability-of-defender-for-cosmos-db-in-azure-government-cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#general-availability-of-defender-for-cosmos-db-in-azure-government-cloudTue, 01 Sep 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnSeptember 3, 2026 With this general availability announcement, the Defender for Cosmos DB plan in Azure Government cloud now aligns with the commercial cloud offering in feature coverage and runtime protection capabilities. For more information about Microsoft Defender for Cosmos…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#enhanced-agent-for-defender-for-sql-servers-on-machines-is-fully-available-in-azure-government-cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#enhanced-agent-for-defender-for-sql-servers-on-machines-is-fully-available-in-azure-government-cloudTue, 01 Sep 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnSeptember 29, 2026 In Azure Government cloud, the Defender for SQL Servers on Machines plan in Microsoft Defender for Cloud protects SQL Server instances running on Azure virtual machines and on Azure Arc-enabled machines connected to that cloud. The enhanced…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#aws-guardduty-coverage-status-is-now-shown-on-the-s3-asset-pagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#aws-guardduty-coverage-status-is-now-shown-on-the-s3-asset-pageTue, 01 Sep 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnSeptember 3, 2026 Microsoft Defender for Cloud now shows Amazon GuardDuty coverage status for AWS S3 buckets, in the Cloud security details section of the S3 asset page. Two statuses are shown for each bucket, each as Enabled or Disabled…https://techcommunity.microsoft.com/blog/microsoftthreatprotectionblog/defender-for-cloud-and-mdti-are-better-together/3723047https://techcommunity.microsoft.com/blog/microsoftthreatprotectionblog/defender-for-cloud-and-mdti-are-better-together/3723047Tue, 11 Aug 2026 13:44:45 +0000Microsoft Defender XDR BlogWhen used together, Microsoft Defender for Cloud (MDC) and Microsoft Defender Threat Intelligence (MDTI) enable analysts to quickly understand exposures and...https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#update-to-cve-details-data-consumption-in-azure-resource-graphhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#update-to-cve-details-data-consumption-in-azure-resource-graphSat, 01 Aug 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnAugust 21, 2026 Microsoft Defender for Cloud has updated how vulnerability assessment CVE details are consumed in Azure Resource Graph. CVE information remains available, but detailed CVE properties are now consumed through the microsoft.security/cvedetails resource type to improve query performance…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#on-demand-malware-scanning-now-supports-scanning-specific-blobs-files-containers-and-file-shareshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#on-demand-malware-scanning-now-supports-scanning-specific-blobs-files-containers-and-file-sharesSat, 01 Aug 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnAugust 6, 2026 On-demand malware scanning in Microsoft Defender for Storage now supports targeted scanning of specific items. Instead of scanning an entire storage account, you can scope scans to a single blob or file, a specific container or file…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#classic-defender-for-sql-apis-retirementhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#classic-defender-for-sql-apis-retirementSat, 01 Aug 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnAugust 17, 2026 The classic Defender for SQL APIs for Vulnerability Assessment and Advanced Threat Protection will be retired on August 16, 2027 . If you use these APIs, migrate to the supported configuration model and update any dependent scripts…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#breaking-change-unused-actions-no-longer-included-in-aws-and-gcp-overprovisioned-identity-assessmentshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#breaking-change-unused-actions-no-longer-included-in-aws-and-gcp-overprovisioned-identity-assessmentsSat, 01 Aug 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnAugust 6, 2026 To improve the performance and scalability of overprovisioned identity recommendation generation, Microsoft Defender for Cloud will no longer use the unused actions when computing overprovisioned identity assessments for AWS and GCP environments. As a result of this…https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/built-to-protect-the-architecture-behind-codename-mdash/ba-p/4541662https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/built-to-protect-the-architecture-behind-codename-mdash/ba-p/4541662Thu, 30 Jul 2026 18:45:00 +0000Microsoft Defender for Cloud BlogInformation Table Defender Foundations Regional Operation AI & Data Containment Responsible Governance Built as a production Microsoft Security service, not an isolated research system. Operates alongside Microsoft Defender in the clouds and regions customers already use. Designed to keep source, findings, and…https://www.microsoft.com/en-us/security/blog/2026/07/06/5-insights-from-frost-sullivans-2025-frost-radar-for-cloud-security-posture-management/https://www.microsoft.com/en-us/security/blog/2026/07/06/5-insights-from-frost-sullivans-2025-frost-radar-for-cloud-security-posture-management/Mon, 06 Jul 2026 16:00:00 +0000Microsoft Security BlogRead five key learnings from the Frost & Sullivan 2025 Frost RadarTM for CSPM to learn how CSPM is evolving from point-in-time compliance to continuous risk management.https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/now-generally-available-serverless-posture-coverage-in-microsoft/ba-p/4532353https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/now-generally-available-serverless-posture-coverage-in-microsoft/ba-p/4532353Wed, 01 Jul 2026 16:00:48 +0000Microsoft Defender for Cloud BlogServerless workloads are a foundation of modern application development, powering everything from low-code and no-code solutions to AI applications and agentic workflows. Development teams use functions, app services, containers, APIs, and event-driven infrastructure to move quickly, scale on demand, and reduce…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#plan-enablement-api-now-blocks-onboarding-to-five-deprecated-defender-planshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#plan-enablement-api-now-blocks-onboarding-to-five-deprecated-defender-plansWed, 01 Jul 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJuly 5, 2026 Effective immediately, onboarding is blocked through the plan-enablement API for five deprecated Microsoft Defender for Cloud pricing plans. This update aligns with Microsoft deprecation policy and matches existing portal behavior, where these plans are already blocked in…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#new-container-security-capabilities-are-now-generally-availablehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#new-container-security-capabilities-are-now-generally-availableWed, 01 Jul 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJuly 1, 2026 The following container security capabilities in Microsoft Defender for Cloud are now generally available: Container-level misconfiguration recommendations for Kubernetes : Agentless, container-level KSPM recommendations in Defender CSPM that assess individual containers rather than entire clusters. The following…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#kubernetes-misconfiguration-enforcement-in-defender-for-containers-is-now-generally-availablehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#kubernetes-misconfiguration-enforcement-in-defender-for-containers-is-now-generally-availableWed, 01 Jul 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJuly 1, 2026 Kubernetes misconfiguration enforcement in Microsoft Defender for Containers is now generally available. This feature evaluates Kubernetes resource configurations at admission time and can audit or block deployments that don't meet Microsoft security best-practice rules. With this release…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#discovery-and-posture-for-serverless-container-workloads-is-now-generally-availablehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#discovery-and-posture-for-serverless-container-workloads-is-now-generally-availableWed, 01 Jul 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJuly 1, 2026 Discovery and posture for serverless container workloads is now generally available in Microsoft Defender for Cloud. This capability provides inventory visibility, security recommendations for misconfigurations and vulnerability assessment findings, and attack path analysis for Azure Container Apps…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#deprecation-completed-legacy-grouped-recommendations-removed-from-azure-portalhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#deprecation-completed-legacy-grouped-recommendations-removed-from-azure-portalWed, 01 Jul 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJuly 31, 2026 Retirement of legacy grouped recommendations (sub-assessments) has started. Customers can no longer access the deprecated data through the API. The Azure portal and Azure Resource Graph might take a few days to reflect the change. Individual recommendations…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#database-level-recommendations-for-sql-vulnerability-assessment-gahttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#database-level-recommendations-for-sql-vulnerability-assessment-gaWed, 01 Jul 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJuly 26, 2026 The SQL vulnerability assessment recommendations created as part of the transition from grouped to individual recommendations are now generally available. Each SQL vulnerability assessment rule is surfaced as its own recommendation, reported directly on the affected SQL…https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/microsoft-defender-for-cloud-expands-multicloud-coverage-across/ba-p/4532200https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/microsoft-defender-for-cloud-expands-multicloud-coverage-across/ba-p/4532200Tue, 30 Jun 2026 17:36:56 +0000Microsoft Defender for Cloud BlogOrganizations are building and running applications across multiple cloud platforms and hybrid environments to move faster, improve resilience, and choose the services that best fit each workload. But that flexibility also changes how teams need to manage exposure. A risk may start…https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/closing-the-loop-on-container-security-from-code-to-runtime-in/ba-p/4528599https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/closing-the-loop-on-container-security-from-code-to-runtime-in/ba-p/4528599Tue, 16 Jun 2026 23:15:21 +0000Microsoft Defender for Cloud BlogContainers are the backbone of modern cloud-native apps — and increasingly, the infrastructure powering AI, from AI assistants to a new wave of intelligent agents. They also blur the line between build , deploy , and runtime : a single code change…https://azure.microsoft.com/updates?id=565171https://azure.microsoft.com/updates?id=565171Mon, 08 Jun 2026 17:15:43 +0000Azure UpdatesStarting July 1, 2026, Microsoft Foundry agent security capabilities previously available through Microsoft Defender for Cloud will transition to a Microsoft Agent 365 license. Agent protection in Defender will be powered by Agent 365 observability logs and the Microsoft 365 agent registry…https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/the-end-of-patching-era-for-containers-microsoft-defender-for/ba-p/4524798https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/the-end-of-patching-era-for-containers-microsoft-defender-for/ba-p/4524798Tue, 02 Jun 2026 22:53:19 +0000Microsoft Defender for Cloud BlogWhy hardened images are becoming the new baseline for container image security Container security is evolving beyond vulnerability scanning alone. Across the ecosystem - spanning container platforms, registries, and software supply chain tooling - customers are increasingly adopting hardened container images -…https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/start-secure-stay-secure-how-microsoft-is-closing-the-gap-from/ba-p/4524580https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/start-secure-stay-secure-how-microsoft-is-closing-the-gap-from/ba-p/4524580Tue, 02 Jun 2026 21:22:01 +0000Microsoft Defender for Cloud BlogModern software applications composed of hundreds of artifacts, multiple programing languages, and cloud infrastructure provide an extensive attack surface that only continues to expand in the era of AI. According to Microsoft Threat Intelligence and industry research, threat actors are also increasingly…https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/now-generally-available-microsoft-defender-for-open-source/ba-p/4514651https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/now-generally-available-microsoft-defender-for-open-source/ba-p/4514651Mon, 01 Jun 2026 17:11:16 +0000Microsoft Defender for Cloud BlogSecuring multicloud databases to help reduce risks Open‐source (OSS) relational databases are becoming increasingly critical and increasingly targeted in organization of all sizes. As organizations adopt multicloud architectures, these databases often run across Azure and Amazon Web Services (AWS), while security…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#vulnerability-assessment-extended-to-runtime-discovered-container-images-on-eks-and-gke-previewhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#vulnerability-assessment-extended-to-runtime-discovered-container-images-on-eks-and-gke-previewMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 4, 2026 Defender for Cloud now extends vulnerability assessment to runtime-discovered container images on Amazon Elastic Kubernetes Service (EKS) and Google Kubernetes Engine (GKE). Previously, vulnerability assessment covered registry-based images. With this update, images discovered at runtime that weren't…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#support-for-additional-azure-regions-in-the-uae-geography-for-defender-for-apis-and-api-security-posture-management-with-defender-cspmhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#support-for-additional-azure-regions-in-the-uae-geography-for-defender-for-apis-and-api-security-posture-management-with-defender-cspmMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 30, 2026 Microsoft Defender for APIs and API security posture management with Defender CSPM has expanded to provide its capabilities in the following Azure regions: UAE North UAE Central Customers who have Azure API Management services in these regions…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#serverless-protection-for-azure-and-aws-is-now-generally-availablehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#serverless-protection-for-azure-and-aws-is-now-generally-availableMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 1, 2026 Serverless protection for Azure and Amazon Web Services (AWS) is now generally available in Defender for Cloud. This capability helps you discover serverless resources and assess them for misconfigurations, vulnerabilities, and insecure dependencies across Azure Web Apps…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#sql-vulnerability-assessment-express-configuration-is-now-generally-available-for-azure-sql-managed-instance-and-azure-synapse-analytics-workspaceshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#sql-vulnerability-assessment-express-configuration-is-now-generally-available-for-azure-sql-managed-instance-and-azure-synapse-analytics-workspacesMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 8, 2026 Defender for SQL Vulnerability Assessment (SQL VA) Express Configuration is now generally available for Azure SQL Managed Instance and Azure Synapse Analytics workspaces. Express Configuration is already generally available for Azure SQL Database, and is now available…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#new-multicloud-security-recommendations-now-in-public-previewhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#new-multicloud-security-recommendations-now-in-public-previewMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 9, 2026 More than 60 multicloud security recommendations are now available in public preview. These recommendations add coverage across AWS services including AppFlow, AppStream, AppSync, Athena, Auto Scaling, CodeBuild, Cognito, Comprehend, DMS, DataSync, FSx, Kendra, Keyspaces, Kinesis, MQ, Neptune…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#new-actionable-recommendation-to-upgrade-aks-for-system-pod-vulnerabilities-previewhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#new-actionable-recommendation-to-upgrade-aks-for-system-pod-vulnerabilities-previewMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 01, 2026 Defender for Cloud now provides a new, actionable recommendation, Upgrade Azure Kubernetes Service Version (preview) that helps you remediate vulnerabilities in AKS-managed system pods. This replaces the previous non-actionable recommendation with a resolvable remediation path, helping teams…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#kubernetes-node-vulnerability-assessment-extended-to-eks-and-gke-previewhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#kubernetes-node-vulnerability-assessment-extended-to-eks-and-gke-previewMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 2, 2026 Defender for Cloud now extends Kubernetes node (host) vulnerability assessment to Amazon Elastic Kubernetes Service (EKS) and Google Kubernetes Engine (GKE), bringing parity with the existing Azure Kubernetes Service (AKS) capability. This feature detects OS-level vulnerabilities in…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#kubernetes-misconfiguration-enforcement-in-defender-for-containers-previewhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#kubernetes-misconfiguration-enforcement-in-defender-for-containers-previewMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 3, 2026 Kubernetes misconfiguration enforcement is now available in public preview in Microsoft Defender for Containers. This feature extends Kubernetes security from audit to audit or block mode at deployment time, preventing risky Kubernetes deployments before they reach production…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#general-availability-of-microsoft-defender-for-open-source-relational-databases-on-aws-rdshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#general-availability-of-microsoft-defender-for-open-source-relational-databases-on-aws-rdsMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 1, 2026 Microsoft Defender for Open-Source Relational Databases is now generally available for Amazon Web Services Relational Database Service (AWS RDS) instances. As of June 1, 2026, the plan bills for AWS RDS instances that were previously onboarded to…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#general-availability-of-defender-for-key-vault-in-azure-government-cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#general-availability-of-defender-for-key-vault-in-azure-government-cloudMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 30, 2026 With this general availability announcement, the Defender for Key Vault plan in Azure Government cloud now aligns with the commercial cloud offering in feature coverage and runtime protection capabilities. For more information about Microsoft Defender for Key…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#expanded-multicloud-security-coverage-is-now-generally-availablehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#expanded-multicloud-security-coverage-is-now-generally-availableMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 30, 2026 Microsoft Defender for Cloud's expanded multicloud security coverage is now generally available. This release significantly broadens posture assessment for AWS and GCP environments, adding support for about 90 new resource types and over 200 new security recommendations…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#expanded-container-support-for-cloud-scopeshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#expanded-container-support-for-cloud-scopesMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 17, 2026 Microsoft Defender for Cloud has expanded the supported environment primitives for cloud scopes to include additional container-related resources. Cloud scopes now support the following new environment types: K8s namespace : Organize resources by Kubernetes namespace for granular…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#discovery-and-posture-for-serverless-container-workloads-previewhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#discovery-and-posture-for-serverless-container-workloads-previewMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 4, 2026 Microsoft Defender for Cloud now includes discovery and posture coverage for supported serverless container workloads in preview. This capability adds inventory visibility, security recommendations for misconfigurations and vulnerability assessment findings, and attack path analysis for Azure Container…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#container-level-misconfiguration-recommendations-for-kubernetes-previewhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#container-level-misconfiguration-recommendations-for-kubernetes-previewMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 1, 2026 Defender for Cloud now introduces agentless, container-level Kubernetes Security Posture Management (KSPM) misconfiguration recommendations, replacing the previous cluster-level findings with more granular, actionable insights integrated into Defender CSPM. The new recommendations assess individual containers rather than entire…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#cloud-security-reporting-is-now-generally-availablehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#cloud-security-reporting-is-now-generally-availableMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 30, 2026 Cloud security reporting in Microsoft Defender portal is now generally available. You can create, customize, and share cloud security insights across your organization using built-in and custom reports. With this release, you can also customize cards when…https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#api-security-posture-management-for-function-apps-and-logic-apps-is-now-generally-availablehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#api-security-posture-management-for-function-apps-and-logic-apps-is-now-generally-availableMon, 01 Jun 2026 00:00:00 +0000Defender for Cloud · Microsoft LearnJune 18, 2026 API discovery and security posture management in the Defender cloud security posture management (Defender CSPM) plan for APIs hosted in Azure Function Apps and Azure Logic Apps is now generally available. This capability extends API security posture…