Explore weekly curated summaries and expert analyses highlighting the latest trends in cloud technology.
-
Application Gateway WAF learns to inspect IPv6 traffic
Azure’s Application Gateway Web Application Firewall now supports inspection and enforcement for IPv6 traffic, in public preview. Before this, the WAF could sit in front of dual-stack applications but its rules only bit on IPv4. IPv6 traffic flowed through uninspected, which was a genuine gap for anyone running regulated workloads on a dual-stack frontend. The…
-
One parser, two bugs: the Broadcom WiFi flaw nobody issued a CVE for
Security researcher Quentin Kaiser presented new research on Broadcom’s WiFi WPS implementation at Hexacon in Paris on October 16, and the story behind the bug is almost as interesting as the bug itself. The short version: a memory corruption flaw in Broadcom’s proprietary 802.11 stack, present since at least 2010, exploitable over the air with…
-
AKS on bare metal now runs on Ubuntu hosts
Microsoft has expanded AKS on bare metal to support Ubuntu as a host operating system, and the new option is in public preview now. The original preview paired the service with Azure Linux 3.0 running on validated Azure Local small form factor hardware, which was a sensible but narrow starting point. If your racks were…
-
Microsoft Marketplace multiparty private offers expand to Hong Kong
Microsoft keeps quietly redrawing the map of who can sell what through its marketplace. The latest marker: multiparty private offers in Microsoft Marketplace now support Hong Kong, both for customers buying and for channel partners selling. Announced on October 8 with an October 2026 effective date, it is the third market-expansion wave this year, after…
-
DeepSeek ships V4.1-Flash-1017: open weights, better agentic scores, and a play for your agent stack
DeepSeek keeps shipping. One week after the September V4.1-Flash release, the company is back with DeepSeek-V4.1-Flash-1017, a point update that claims gains on all eleven benchmarks in its comparison table. The weights are open under the MIT license, the API price has not moved, and existing API users get the new model automatically. It is…
-
ConnectWise Cloud Backup breach: one vendor secret unlocked hundreds of Microsoft 365 tenants
Here is the part that should worry anyone running a Microsoft 365 tenant: the attackers never touched a user account. No phishing email, no stolen password, no MFA fatigue push. They authenticated straight into customer tenants as a vendor application, using a valid app secret that the vendor itself held. The vendor was ConnectWise Cloud…