Azure news and engineering summaries

A former Azure Core engineer details the internal mismanagement at Microsoft, focusing on the unrealistic plan to port complex Windows components to limited SoC hardware. The narrative highlights systemic bloat, poor architectural decision-making, and organizational disconnects, which the author argues have jeopardized trust in Azure’s mission-critical infrastructure and impacted key high-profile customer relationships.

The 2026 Cloud VM benchmarks evaluate 44 instance types across seven providers. AMD EPYC Turin emerges as the performance leader, while Intel Granite Rapids shows improved stability. For value, Oracle and Hetzner dominate on-demand charts, whereas Azure Cobalt 100 and Google Axion offer competitive ARM performance. Recommendations highlight upgrading to modern CPU generations to maximize efficiency and cost-savings.

Researcher 'Nyxgeek' discovered four Azure Entra ID sign-in log bypasses since 2023. These vulnerabilities allowed attackers to validate credentials or obtain active tokens without triggering security logs, potentially hiding malicious activity. The issues, caused by simple parameter manipulation, were reported to Microsoft and subsequently patched. Nyxgeek highlights concerns regarding Microsoft's inconsistent security bounty practices and notification standards.

Microsoft has released Azure Linux 4.0 in public preview, transitioning it from a specialized container host to a general-purpose Linux distribution. Now based on Fedora with declarative overlays, it features improved tooling like dnf5, enhanced security, and broad support across Azure VMs, AKS, and WSL, signaling Microsoft's evolution into a major Linux distribution contributor.

GitHub is resolving degraded availability for Actions Jobs on Hosted Runners in the East US region. While Standard Hosted Runners are showing signs of recovery following mitigation efforts, users with Private Networking remain impacted as Azure works to restore capacity. Users are advised to fail over to alternative regions to mitigate ongoing queue delays and job failures.