August 1, 2026
In this article The CaptiveCrunch campaign Storm-2945 and Midnight Blizzard CaptiveCrunch tradecraft and tooling How to protect against CaptiveCrunch activity Microsoft Defender detections and hunting guidance […]
- Filter by
- Categories
- Tags
- Authors
- Show all
- All
- Azure App Service
- Azure Architecture
- Azure Updates
- Command Line
- Community
- Microsoft Security
- Tech Community
- All
- .NET
- #ai-tools
- A…Microsoft Azure
- AAD
- acns
- ACP
- ACR
- Active Directory
- Administering Windows Server
- Advanced container networking service
- Adversary-in-the-middle (AiTM)
- agent
- Agent Builder
- Agent Builder and Copilot Studio and Foundry explained
- Agent Builder vs Copilot Studio vs Microsoft Foundry
- agent builder vs Microsoft Foundry
- Agent ID
- Agent Package Manager
- agent service
- Agent Skills
- Agentic
- Agentic AI
- Agentic Workflows
- Agents
- AGENTS.md
- agentskill
- AI
- AI + Machine Learning
- ai agent
- AI agents
- AI Coding Agents
- AI Engineering
- ai gateway
- AI Governance
- AI Measurement
- AI Metrics
- AI Observability
- AI Security
- AI SRE
- AI troubleshooting
- AI-500
- AI-500 Study Guide
- AI-901
- AI-assisted coding
- AI-assisted development
- AI-Assisted Engineering
- AI-powered automation
- AIOps
- Air-gapped
- AKS
- AKS Bare metal
- ALDO
- AllocationFailed
- ALZ
- analytics
- Android
- Announcement
- Anthropic
- anycast
- api inventory
- API Management
- API Management (APIM)
- APIC
- apim
- APIs
- APM
- App
- App Configuration
- app gateway
- app service
- Application Gateway
- Application Landing Zones
- Arc
- Arc Onboarding
- architecture
- architecture diagrams
- Architecture Review
- ars
- Artificial Intelligence
- ASP.NET Core
- aspire
- Astro
- asymmetric routing
- attributes
- Audio Notes
- Authenticaiton
- authentication
- authorization
- automation
- Availability
- Availability Sets
- Availability Zones
- AVD
- aws
- AZ-802
- AZ-900
- Azure
- Azure Active Directory
- Azure AD
- Azure AI
- Azure AI Document Intelligence
- Azure AI Foundry
- Azure AI Fundamentals
- Azure AI Language
- Azure AI Search
- Azure API Center
- Azure API Management
- azure architecture
- Azure Backup
- Azure Bastion
- Azure Bicep
- Azure Bicep Snapshots
- Azure Blob Storage
- Azure Blueprints
- Azure capacity
- Azure Chaos Studio
- Azure CLI
- Azure Cloud Adoption Framework
- Azure Communication Services
- Azure Compute Fleet
- Azure confidential ledger
- Azure Container Apps
- Azure Container lInux
- Azure Container Registry
- Azure Container Storage
- Azure Cosmos DB
- Azure Data Box
- Azure Data Factory
- Azure Data Lake Storage
- Azure Database for MySQL
- Azure Database for PostgreSQL
- Azure Databricks
- Azure DDos Protection
- azure deployment stacks
- Azure DevOps
- Azure Disk Storage
- Azure DNS
- Azure DocumentDB
- Azure Elastic SAN
- Azure EU
- Azure ExpressRoute
- Azure Files
- Azure Firewall
- Azure Firewall Manager
- Azure Front Door
- Azure Functions
- Azure HorizonDB
- azure hybrid
- Azure Hybrid Networking
- Azure Kubernetes Fleet Manager
- Azure Kubernetes Service
- Azure Kubernetes Service (AKS)
- Azure Landing Zone
- Azure Linux
- Azure Local
- Azure Local Disconnected Operations
- Azure Local LENS
- Azure Local SFF
- Azure Machine Learning
- Azure Managed Grafana
- Azure Managed Redis
- Azure Migrate
- Azure Monitor
- Azure MySQL Flexible Server
- Azure MySQL Flexible Server Replica
- Azure NAT Gateway
- Azure NetApp Files
- Azure Networking
- azure openai
- Azure Policy
- Azure Pricing
- Azure Private Link
- azure rbac
- Azure Red Hat OpenShift
- azure regions
- azure route server
- Azure Sentinel
- Azure Service Fabric
- Azure Site Recovery
- Azure Sphere
- Azure SQL Database
- Azure SQL Managed Instance
- Azure Storage Actions
- Azure Storage Mover
- Azure Synapse Analytics
- azure traffic flows
- Azure Virtual
- Azure Virtual Desktop
- azure virtual network manager
- Azure Virtual Network Routing Appliance
- Azure VMware Solution
- azure-ad-b2c
- azure-arc
- azure-b2c
- azure-communication
- AzureAD
- azurebicep
- azuredevops
- backstage
- backup
- backups vs DR vs HA
- banned
- Batch
- bgp
- Bicep
- bicep-console
- biceplang
- bicepparam
- Blizzard
- Book
- bot service
- boundary
- Buzz
- Bypass Microsoft Account
- C#
- CA
- career
- careerdevelopment
- cert-manager
- Certifications
- Chrome
- Chromium
- CI/CD
- CI/CD automation
- Claude
- claude-ai
- ClickFix
- Cloud
- Cloud Adoption Framework
- Cloud Architecture
- cloud capacity
- Cloud Infrastructure
- Cloud Native
- cloud networking
- cloud security
- cloud-computing
- cloud-engineering
- cluster operations
- cluster-health
- CNAPP
- CNCF
- code
- Code Review
- code-as-documentation
- codegeneration
- comma separate the tags13:53Claude responded: Microsoft Azure
- Command Line
- Commcault
- Compliance
- compute
- Computer use in Copilot Studio explained
- Conditional Access
- Confidential Compute
- connection monitor
- containers
- copilot
- Copilot CLI
- Copilot cowork
- Copilot in Outlook demos
- Copilot in Outlook demos step by step
- Copilot in Outlook examples
- Copilot in Outlook step by step
- Copilot in Outlook use cases
- Copilot Studio vs Microsoft Foundry
- Copilot under the hood
- copilot-studio
- Cost Optimisation
- credential theft
- csharp
- custom connector copilot studio
- Custom Copilot agents
- custom-auth-extension
- custom-extension
- custom-policies
- Cyberespionage
- Cybersecurity
- Dapr
- data factory
- data lake
- Databases
- datacenter
- DataStream
- DDoS Protection
- Decentralized Identity
- Default Outbound Access
- deployment
- dev
- dev-containers
- Developer Life
- Developer productivity
- Developer Tools
- developer-experience
- developers
- device-code-flow
- devops
- DevOps automation
- DevOps workflows
- devops-practice
- DevSecOps
- diagram automation
- Diagram Generation
- difference between backup and DR?
- Digital Identity
- disaster recovery
- Disconnected
- discuss
- dns
- Domain compromise
- dotnet
- DR
- Draw.io
- ECMA2
- ECMA2Host
- Edge Computing
- EF Core
- egress
- Elevation of privilege
- emulate
- Engineering Effectiveness
- Engineering Productivity
- entra
- Entra ID
- entra-external-id
- entra-local
- Envoy
- Envoy Gateway
- error-message
- EU cloud
- Event
- Event Grid
- Event Hubs
- event-listener
- Exam AI-500
- Exam SC-500
- Exam SC-730
- Excalidraw
- Excel Copilot demos
- Excel Copilot tasks
- Express Route
- ExpressRoute
- Extortion
- fabric
- fabric capacity
- failover
- fault tolerance vs high availability
- Feature
- feature-flags
- Features
- federation
- FIM
- finops
- Firewall
- flatcar
- fluent
- Forest Blizzard (STRONTIUM)
- Forrester Waves
- foundry
- foundry agent service
- Foundry Local
- France Central
- Front Door
- Frontier AI models
- Gallery
- game-design
- game-development
- Gartner Magic Quadrant
- gateway
- gateway api
- genai
- General Development
- Generative AI
- generative ai gateway
- Germany West Central
- GitHub
- GitHub Actions
- GitHub Agentic Workflows
- GitHub CLI
- github copilot
- GitHub Copilot Agent Mode
- GitHub Copilot CLI
- GitHub Copilot SDK
- GitHub Pages
- githubcopilot
- githubcopilotcli
- GitOps
- Global Network
- governance
- granfeldt
- guest
- guid
- Hardware
- headlamp
- headlamp-plugin
- Health
- HolmesGPT
- homelab
- How-to
- HPA
- hrp
- hub routing preference
- hub vnet
- hub-and-spoke
- human-operated ransomware
- Hybrid
- Hybrid + Multicloud
- Hybrid Cloud
- hybrid networking
- Hyper-V
- IaC
- IaC Best Practices
- Idempotence
- identity
- Identity and access management
- image
- In development
- In preview
- In the Loop
- Incident response
- InfoSec
- infra
- infrastructure
- Infrastructure As Code
- Inspektor Gadget
- Integration
- Intelligent Terminal
- Intenet
- Internal Developer Platform
- Internet of Things
- Intune
- IoT
- iperf
- istio
- Italy North
- Jack Tracy
- Jumpstart
- jwt
- Keda
- Key Vault
- kind
- kubebuddy
- kubectl
- kubernetes
- Kubernetes troubleshooting
- Landing Zones
- langchain
- Lateral movement
- Launched
- Learn Azure
- LENS
- libraries
- Lighthouse
- LINUX
- Linux Virtual Machines
- LLM
- LLMOps
- Local AI Deployment
- LocalBox
- Log Alerts
- Log Alerts Dyanmic threshold
- Log Analytics
- Logic Apps
- M365 Local
- macOS
- Madrid
- maf
- malware
- managed private endpoint
- Management
- management agent
- Management and Governance
- Management Groups
- maximum public websites I can add to copilot studio
- MCP
- MCP integration
- mcp simplified
- mcp-server
- MCT
- megaport
- mfa
- micro deployments
- MicroHack
- Microservices
- Microsoft
- Microsoft 365
- Microsoft Agent 365
- Microsoft Agent Framework
- Microsoft Azure
- Microsoft Build
- Microsoft Certification
- microsoft certifications
- Microsoft Certified
- Microsoft Certified Trainer
- Microsoft Defender
- Microsoft Defender for Cloud
- Microsoft Entra
- Microsoft Fabric
- Microsoft Foundry
- Microsoft Graph
- Microsoft Ignite
- Microsoft Intune
- Microsoft Learn
- Microsoft Learning
- Microsoft Purview
- Microsoft Security
- Microsoft Security Insights
- Microsoft Sentinel
- Microsoft Sentinel Data Lake
- Microsoft SQL Server
- microsoftazure
- microsoftfoundry
- Midnight Blizzard (NOBELIUM)
- Migration
- MIM
- Misc
- Mobile
- Model Context Protocol
- MongoDB
- Monitoring
- ms-4022
- msal-react
- Multi-Agent AI Solutions
- Multi-cloud
- multi-cluster
- Multi-Rack
- multicloud
- multiplayer-game
- Musings
- mvp
- native-authentication
- Natural language programming
- network performance
- Network security
- network security group
- network security perimeter
- Network Watcher
- networking
- new
- News
- node disruption policy
- node reimage
- North Europe
- npm
- npm-package
- NSG
- NSP
- nva
- NVIDIA SkillSpector
- OAuth
- oauth 2.0
- oauth 2.1
- oauth2.0
- observability
- oidc
- On-premises
- onelake
- OOBE bypass
- open authorization
- open source
- OpenClaw
- opencode
- opencode-go
- openid
- openid connect
- opensource
- openweight
- Operating System
- Outlook
- PaaS
- Packet Capture
- passwords
- patterns
- pdb
- Pester
- Phishing
- planned maintenance
- Platform Engineering
- Platform Landing Zones
- Platform Operations
- pls
- plsdc
- Pluralsight
- pnpm
- Pod Disruption Budget
- Poland Central
- Policies
- policy
- powershell
- powertoys
- Pricing & Offerings
- Private Endpoint
- private link
- private link service direct connect
- private-key-jwt
- Process Improvement
- Productivity
- programming
- project radius
- Prompt Engineering
- protocols
- Prototyping
- ProvisioningDisabled
- Pull request management
- Pull Requests
- pyspark
- python
- qperf
- Queue Storage
- rag
- ransomware
- ransomware-as-a-service
- RBAC
- RDP
- react
- Recovery point Objective vs Recovery Time Objective (RTO)
- Regions & Datacenters
- register
- Reliability
- remotion
- Repository management
- Resiliency
- resource-owner-password
- Retirements
- Review
- Role assignments
- Role Definitions
- roleDefinitions()
- ropc
- route server
- route table
- RPO vs RTO
- Run
- SAML
- Sapphire Sleet
- sarif
- SC-500 Exam
- SC-730
- SC-730 Exam
- sd-wan
- SDK and Tools
- sdn
- sdn appliance
- search
- Secret Blizzard
- secured hub
- security
- Security strategies
- Semantic Kernel
- Sentinel
- Sentinel data lake
- service bus
- service mesh
- Services
- SharePoint Online
- SIEM
- sign-up
- signalr
- Simple Log Search Alerts
- sirius appiance
- Sleet
- SLZ
- Small Form Factor
- social
- Social Engineering
- softare-development
- Software-Defined Networking
- software-development
- software-engineering
- Sovereign Clod
- Sovereign Cloud
- Sovereign Landing Zone
- Sovereign Private Cloud
- Sovereign Public Cloud
- Spain
- Spark
- speaking
- spoke-to-spoke
- sql
- SQL Server
- SQL Server on Azure Virtual Machines
- sqlcmd
- SRE
- State-sponsored threat actor
- storage
- Storage Accounts
- Storm
- subnet
- Supply chain attack
- Supply Chain Security
- Sweden Central
- synapse
- Sysprep
- Table Storage
- Tags
- Tasks to perform in Copilot Excel
- teams
- Technology
- Tempest
- Terminal
- Terraform
- theme-builder
- Thomas Maurer
- Token
- Token theft
- Token Usage
- token-issuance
- Tooling
- traffic engineering
- Traffic Manager
- Troubleshoot
- troubleshooting
- tutorial
- udr
- ui
- ui-design
- unattend xml
- Uncategorized
- updated
- Updates
- user-defined route
- ux
- ux-design
- V2
- VDI
- verifiable-credentials
- Verified ID
- vibe-coding
- Video
- videogames
- virtual haub
- virtual hub
- virtual machine
- Virtual Machine Scale Sets
- Virtual Machines
- virtual network
- virtual network appliance
- virtual network flow logs
- Virtual Network Gateway
- Virtual Network Peering
- virtual network routing appliance
- Virtual Networks
- Virtual WAN
- Virtualization
- VirtualMetric
- VirtualMetric DataStream
- Vishing
- Visual Studio Code
- VNet
- voice-models
- VPA
- vpn
- VPN Gateway
- vrna
- VS Code
- vscode extensions
- vulnerability
- vwan
- Web
- web application firewall
- WEC
- WEF
- West Europe
- what can I do in Copilot Excel
- what can i do in excel using Microsoft 365 Copilot
- What is a backup?
- What is a declarative agent?
- what is Bing Custom Search
- what is disaster recovery?
- what is fault tolerance?
- what is high availability?
- what is model context protocol for beginners
- What is Prompt Copilot Studio
- What is replication?
- what is the difference between DR and HA?
- What is the Microsoft 365 Frontier programme?
- what is workIQ
- what-if
- Windows
- Windows 10
- Windows 11
- Windows deployment
- Windows imaging
- Windows Package Manager
- Windows Server
- Windows Store
- Windows Subsystem for Linux (WSL)
- Windows Terminal
- windows11
- winget
- winui
- wordpress
- WorkIQ vs Microsoft Graph
- XDR
- XML Graph Model
- YAML workflow automation
- Zero Trust
- zero trust workshop AI
- Zurich
- All
- Aidan Finn
- Alan Kinane
- Az Advertizer
- Azure Community Enthusiasts
- azurefeeds
- Azure Tar
- Carlos Mendible
- Charbel Nemnom
- Dan Rios
- Daniel Bradley
- Darren Robinson
- Dieter Gobeyn
- Freek Berson
- Gijs Reijn
- Gregor Suttie
- Imran Rashid
- Jaliya Udagedara
- James Cook
- Jamie Maguire
- John Kilmister
- John Lokerse
- John Savill
- Jose Moreno
- Josh King
- Leo Visser
- Luke Murray
- Maik van der Gaag
- Marc Duiker
- Mark Tinderholt
- Matt Felton
- Nicholas Chang
- Olivier Miossec
- Peter De Tender
- Pixel Roberts
- Rory Braybrook
- Roy Kim
- Sarah Lean
- Scott Hanselman
- Stanislav Zhelyazkov
- Tao Yang
- Thomas Maurer
- Thomas Thornton
- Tobias Zimmergren
- Travis Roberts
- Vukašin Terzić
- Will Velida
April 8, 2026
Published by azurefeeds on April 8, 2026
Categories
In this article DNS hijacking attack chain: From compromised devices to AiTM and other follow-on activity Mitigation and protection guidance Microsoft Defender detection and hunting guidance […]