Cloud Security
The latest Cloud Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Private Connector Enables UK Government to Run Power Platform and Copilot on AWS Data Without Duplication
A proof-of-concept led by Hitachi Solutions Europe has demonstrated that UK government departments can securely operate Microsoft Power Platform, Dynamics 365, and Microsoft Copilot on live data...
CVE Confusion Hits Microsoft Dynamics 365 FastTrack: Urgent Patch Needed for Info-Disclosure Flaw
Microsoft's Dynamics 365 FastTrack Implementation Assets have been thrust into the security spotlight following an information disclosure vulnerability that lets attackers harvest private data over a...
Microsoft Confirms Two Azure Bot Service Elevation-of-Privilege Flaws, Urges Immediate Patching
Security teams responsible for Azure Bot Service deployments are grappling with a double-barreled set of improper authorization vulnerabilities that could let unauthenticated attackers hijack cloud...
Azure Networking EoP Flaw CVE-2025-54914: Immediate Hardening Steps for Hybrid Cloud Teams
Microsoft’s Security Response Center (MSRC) has published an advisory for CVE-2025-54914, an elevation-of-privilege vulnerability in Azure Networking that could allow attackers with minimal...
RedactXpert's 50% Redaction Gains for Police: Promising but Unverified
The claim is striking: an eight-week trial of AI-powered document redaction at Cleveland Police cut processing time by half. If true, it signals a transformative shift for overstretched public safety...
In-Place Trusted Launch Upgrades for Azure VMs Simplify Security Without Migrations
Microsoft has removed a major barrier to Linux and Windows server security in Azure by enabling in-place upgrades to Trusted Launch for existing Generation 2 virtual machines. The change, which...
Exposed appsettings.json Files Unleash 'Master Key' to Azure Tenants via OAuth Token Abuse
A single, publicly exposed appsettings.json file containing Azure Active Directory (now Entra ID) application credentials can act as a master key to an organization’s entire cloud estate, security...
Google Drive Exposes Files by Default — Here’s How to Stop the Leaks
A single “Anyone with the link” share is all it takes to turn a private Google Drive folder into a public repository. That blunt reality, and the little-known settings that can prevent it, have...
WinRAR, Azure OpenAI, and SharePoint Vulnerabilities Under Active Attack: August 2025 Patch Breakdown
A wave of critical vulnerabilities disclosed in August 2025 has left Windows administrators and cloud operators scrambling, with actively exploited flaws in WinRAR, Trend Micro Apex One, and Azure...
Microsoft Offers Free Copilot to Feds in $3B OneGov Deal—But Critics Cry Lock-In and Security Risks
The U.S. General Services Administration has struck a deal with Microsoft that makes Microsoft 365 Copilot free for eligible federal agencies for the first year—the latest in a string of...
Microsoft Inks $3 Billion AI Deal with U.S. Government: Free Copilot, Azure Discounts, and the Risks Agencies Can't Ignore
Microsoft and the U.S. General Services Administration have finalized a landmark OneGov agreement that arms federal agencies with deeply discounted—and in some cases, free—access to the...
Free Microsoft Copilot for Feds: Inside the $3.1 Billion Government AI Deal and Its Hidden Costs
The U.S. General Services Administration and Microsoft have struck a deal to provide millions of federal workers with one year of free access to Microsoft 365 Copilot, a move the agency says will...