Azure updates

New Azure RTOS Collaborations with Semiconductor Industry Leaders

Embedded developers can now access reliable, real-time performance for resource-constrained devices and seamless integration to Azure IoT. STMicroelectronics, Renesas, Qualcomm, NXP and Microchip will offer development kits featuring Azure RTOS.

• Azure Sphere
• Security Center
• Operating System
• SDK and Tools
• Security

Action Required—Log Analytics agent for Windows will enforce SHA-2 signing on May 18, 2020

Target availability: Q2 2020

The Log Analytics agent for Windows, sometimes known as the OMS Windows agent or Microsoft Monitoring agent, will begin to enforce SHA-2 signing on May 18, 2020. This change only requires action if you are running the agent on a legacy OS version (Windows 7, Windows Server 2008 R2, or Windows Server 2008).

• Log Analytics
• Azure Monitor
• Automation
• Security Center
• Azure Sentinel
• Microsoft Build
• Operating System
• Security

Onboard on-prem servers to Security Center from Windows Admin Center

Windows Admin Center is a management portal for Windows Servers who are not deployed in Azure offering them several Azure management capabilities such as backup and system updates. We have recently added an ability to onboard these non-Azure servers to be protected by ASC directly from the Windows Admin Center experience.

• Security Center
• Security

Azure Security Center—Improved just-in-time experience

Target availability: Q1 2020

The features, operation, and UI for Azure Security Center’s just-in-time tools that secure your management ports have been enhanced.

• Security Center
• Security

Fileless attack detection for Linux is now in preview

Azure Security Center is extending fileless attack detection for Linux, in addition to Windows.

• Security Center
• Security

Azure Disk Encryption in more places, and more services offering customer-managed keys

Azure Disk Encryption enables you to encrypt your Azure Virtual Machine disks with your keys safeguarded in Azure Key Vault.

• Security Center
• Security

Release of Microsoft Secure Code Analysis toolkit to help you build secure code

With the Microsoft Security Code Analysis extension, you can infuse security analysis tools including Credential Scanner, BinSkim, and others into your Azure DevOps continuous integration and delivery (CI/CD) pipelines.

• Security Center
• Security

Threat Protection for Azure Key Vault in Public Preview in North America Regions

Azure Key Vault is an essential service for protecting data and improving performance of cloud applications by offering the ability to centrally manage keys, secrets, cryptographic keys and policies in the cloud.

• Security Center
• Security

Threat Protection for Azure Storage includes Malware Reputation Screening

You can now view detected malware across storage accounts using Azure Security Center.

• Security Center
• Security

Workflow automation with Logic Apps

Today we are introducing a new capability in Security Center that allows customers to create automation configurations leveraging Azure Logic Apps and to create policies that will automatically trigger them based on specific ASC findings such as Recommendations or Alerts.

• Security Center
• Microsoft Ignite
• Security

Azure Security Center Quick Fix for bulk resources generally available

With the many tasks that a user is given as part of Secure Score, the ability to effectively remediate issues across a large fleet can become challenging. In order to simplify remediation of security misconfigurations and to be able to quickly remediate recommendations on a bulk of resources and improve your secure score you can use Quick Fix.

• Security Center
• Microsoft Ignite
• Security

Additional regulatory compliance standards in Azure Security Center

The Regulatory Compliance dashboard provides insights into your compliance posture based on Security Center assessments. The dashboard shows how your environment complies with controls and requirements designated by specific regulatory standards and industry benchmarks and provides prescriptive recommendations for how to address these requirements.

• Security Center
• Features
• Microsoft Ignite
• Security

Scan container images for vulnerabilities in Azure Security Center

Azure Security Center can now scan container images in Azure Container Registry for vulnerabilities. The image scanning works by parsing the container image file, then checking to see whether there are any known vulnerabilities (powered by Qualys).

• Security Center
• Microsoft Ignite
• Security

Threat Protection for Azure Kubernetes Service (AKS) Support in Security Center

Security Center is expanding its support in the container space to one of the fastest growing services in Azure - Azure Kubernetes Service.

• Security Center
• Microsoft Ignite
• Security