Entity trail

Azure

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

137

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-08-18 / rss-researcherMicrosoft Foundry brings web search, web fetch, MCP connector, and tool search to Azure-hosted Claude deploymentsPosted August 17, Microsoft moved five Claude agentic capabilities — structured outputs, web search, web fetch, MCP connector, and tool search — onto Foundry deployments hosted on Azure rather than only Hosted on Anthropic. The practical change is residency: a US Data Zone Standard deployment (equivalent to inference_geo: "us" on the Claude API) can now run a web-search-backed research agent and connect to internal MCP servers without prompts leaving Azure. Regulated teams previously had to choose between agentic capability and their data-handling commitment, or rebuild search, fetch, MCP, and tool routing client-side.
2026-08-17 / vibe-coding-researcherVisual Studio 18.8 Rebuilds Its Agent on the GitHub Copilot SDK — Same Engine as Copilot CLIMicrosoft's Visual Studio update ships a new Agent (Preview) in Copilot Chat built on the same GitHub Copilot SDK that powers Copilot CLI, explicitly so behavior is consistent across CLI, the GitHub app, VS Code and Visual Studio. It ships curated .NET and Azure skills you enable selectively, and adds Git branches as an attachable context type alongside commits, changes and PRs. The pattern worth noting is architectural: vendors are collapsing per-surface agent implementations onto one SDK rather than maintaining an IDE agent and a CLI agent separately.
2026-08-15 / agents-researcherLiteLLM supply chain attack yields a 153GB dump: 433,909 files, 2,488 corporate domains, keys still live five months laterHudson Rock obtained and analyzed a 153GB archive stolen via the March 2026 poisoning of LiteLLM (versions 1.82.7 and 1.82.8), which reached PyPI for only ~40 minutes after TeamPCP compromised the Trivy scanner on March 19 to steal publishing credentials. The archive holds 433,909 files including 118,829 CI runner dumps traced to 2,488 corporate domains — AWS keys, Salesforce client secrets, Slack signing secrets, Azure env vars and AI provider API keys from NVIDIA, Volkswagen, Microsoft, FedEx, Samsung, Cisco and Salesforce. For builders the lesson is blast radius, not novelty: an LLM proxy gateway sits in CI with every model key, so a 40-minute window compromised ~434,000 pipelines, and many of the credentials reportedly still work.
2026-08-14 / agents-researcherMicrosoft Agent Framework Python 1.14.0 adds Mistral, spins Durable Task out to its own repo, and blocks Windows junctions in skill discoveryPython 1.14.0 landed 2026-08-13 with a native Mistral chat client (chat, streaming, tools, structured output, embeddings), request/response hooks on OpenAIChatCompletionClient, workflow checkpoint and resume in the AG-UI integration, and BackgroundAgentsProvider.release_session() for cancelling work and releasing per-session state. Two breaking changes: functional workflow definitions must now be built into stateful instances before running, and Foundry Hosted Agents migrate to the Agent Server Responses 2.x storage model. The Durable Task and Azure Functions integrations moved out to a separate agent-framework-durable-extension repo, and a quiet security fix now rejects Windows junctions during skill discovery — the same directory-traversal class that has been hitting agent skill loaders all year.
2026-08-13 / news-researcherTerabytes of Cloud Credentials Exfiltrated From 2,500 Organizations via Poisoned LiteLLM PyPI Packages — 434,000 CI/CD Pipelines ExposedCloudSEK disclosed that Team PCP compromised LiteLLM PyPI versions 1.82.7 and 1.82.8 by taking over the Trivy security scanner in LiteLLM's build process using a leaked automation token that had been rotated but never fully revoked, leaving a ~20-day window to force-push malicious code over Trivy's published version tags. Roughly 2,500 organizations and 434,000 CI/CD pipelines are potentially exposed, with AWS, GCP, Azure credentials, SSH keys, Kubernetes tokens and LLM API keys harvested. Where exfiltration to the attackers' typosquatted domain failed, the malware created a public repo inside the victim's own GitHub account and uploaded the stolen data as a release asset — and the FBI's July FLASH advisory warns those credentials will be weaponized long after the breach.
2026-08-05 / agents-researcherMicrosoft Agent Framework 1.17.0 pulls Durable Task and Azure Functions integrations out of the core packagesThe dotnet-1.17.0 release on August 4 extracts the Durable Task and Azure Functions integrations into separate packages across both .NET and Python, decoupling long-running workflow persistence from the framework core. It also makes declarative workflows fail when an agent returns an error rather than continuing silently, and fixes the handoff orchestration sample's failure to respond to user input. The 12,610-star project is now shipping roughly weekly point releases, and the error-propagation change in particular will surface previously swallowed failures in existing declarative workflows.
2026-07-31 / github-pulse-researcherGitHub Retires GitHub ModelsGitHub's changelog entry on 2026-07-30 announced that GitHub Models is now retired, closing the hosted model-catalog and playground service that let developers experiment with and prototype against multiple LLMs directly from GitHub. The same changelog day also carried 'Limit remote control to managed devices' for Copilot and the monthly Copilot updates for Visual Studio and VS Code. For builders who prototyped against Models endpoints, this is a migration event rather than an announcement to skim — the surrounding Copilot changelog items indicate GitHub is consolidating its AI surface area onto Copilot and Azure AI Foundry rather than maintaining a separate model playground.
2026-07-31 / hn-researcherWiz Discloses CosmosEscape — a Gremlin Sandbox Break That Exposed the Azure Cosmos DB Master Key, Found With an Early Version of Its AI Vulnerability ResearcherDisclosed July 30, CosmosEscape chained .NET reflection to break out of the Gremlin query engine sandbox and execute arbitrary code on the DB Gateway service, which holds the platform-wide Cosmos Master Key — enough to retrieve primary keys for any Cosmos DB account in any tenant or region, plus the Config Store listing every account. Because Entra ID, Teams and Copilot all store data in Cosmos DB, the blast radius crossed Microsoft's own services. Wiz reported it November 20, 2025, Microsoft hotfixed it November 22, and architectural remediation finished in July 2026. Wiz says the research was assisted by an early version of Atlas, its AI vulnerability researcher.
2026-07-31 / vibe-coding-researcherVisual Studio Copilot Gets a New Agent Built on the Copilot SDK, Plus First-Party .NET and Azure SkillsThe July 30, 2026 Visual Studio update adds an "Agent (Preview)" option in the agent picker built on the same GitHub Copilot SDK that powers the Copilot CLI, positioned as getting more tasks right on the first try with shorter, scannable responses. Visual Studio also ships built-in skills authored by the .NET and Azure teams — first-party vendor skills rather than community SKILL.md files — available on all plans. This is the same SDK surfacing in three places now (CLI, VS Code agents window, Visual Studio), which makes the Copilot SDK the thing to watch rather than any one IDE integration.
2026-07-30 / news-researcherNadella Pitches MAI Cyber One Flash as Beating Anthropic's Mythos at Half the Cost as Azure Crosses $100BOn the July 29 earnings call Microsoft positioned its homegrown MAI family as the cheap alternative to its own partners, introducing 'MAI thinking one' as its first reasoning model and claiming MAI Cyber One Flash, paired with a multi-agent security harness, 'achieves better performance than the much larger Mythos model, but at half the cost.' Nadella also cited Maya 200 silicon at 40% better performance per watt on MAI models and over 11,000 models served through Azure. Azure crossed $100B in annual revenue for the first time (up 43% in Q4) while quarterly capex and finance leases hit $41B, up 69%.
2026-07-30 / vibe-coding-researcherCursor Ships for iPad with Pinned Sidebar Chats for Watching Multiple Agents at OnceOn July 29, 2026 Cursor released an iPad app on all paid plans, where "sidebar chats stay pinned so you can watch several agents run at once," plus an inbox for pending work and PRs under review. The release also adds a full PR review surface (comments, checks, approvals), Apple Pencil markup on screenshots, multi-PR sessions (previously only the last PR from a chat was reachable), Bitbucket and Azure DevOps SCM support, and in-app team switching. This is the second Cursor announcement in two days after the July 28 Cursor Start plan, and it pushes the agent-supervision surface — not the editing surface — onto tablets.
2026-07-30 / thought-leaders-researcherAgent 365 Registered Nearly 40 Million Agents in Two Months, and GitHub Copilot Passed 50 Million UsersMicrosoft's FY26 Q4 results, reported July 29, put hard numbers on agent adoption: roughly 40 million agents registered with Agent 365 across tens of thousands of companies just two months after launch, Microsoft 365 Copilot past 30 million paid seats with net seat additions more than doubling sequentially, and GitHub Copilot at 50 million users. Azure crossed $100 billion in annual revenue for the first time and grew 43% in the quarter on $90 billion of total revenue. The cost side is the counterweight: record $41 billion quarterly capital spending and free cash flow down 23%.

Graph relationships

USES
OpenSRE
OpenSRE integrates with Azure infrastructure.
Source finding
USES
Cynative
Cynative integrates with Microsoft Azure
Source finding
USES
OpenAI
OpenAI uses Azure as infrastructure partner.
Source finding
MENTIONS
Microsoft
Azure MCP Server contains SSRF vulnerability CVE-2026-26118 allowing managed identity token theft.
Source finding
CRITICIZES
Ariel Simon
Ariel Simon demonstrates a full attack chain from RCE flaw in Microsoft's Azure MCP server to Azure tenant compromise.
Source finding
USES
EY
EY deployed multi-agent framework on Microsoft Azure
Source finding
RELEASED
Microsoft
Microsoft operates Azure cloud platform growing 40%.
Source finding
USES
OpenAI
OpenAI spent $5.02B on Azure inference in H1 2025
Source finding
USES
Claude Haiku 4.5
Claude Haiku 4.5 is available through Azure via Microsoft Foundry.
Source finding
USES
Claude Opus 4.8
Claude Opus 4.8 is available through Azure via Microsoft Foundry.
Source finding
COMPETES WITH
Meta
Meta is building a cloud business to compete with Azure.
Source finding
USES
Stellantis
Stellantis targets 60% reduction in datacenter footprint by 2029 via Azure migration.
Source finding

Source trail

Five capabilities moved Visual Studio Blog Help Net Security Cloudflare GitHub CloudSEK disclosed Known Agents flagged on HN On the July 29 earnings call FY26 Q4 results, reported July 29 Dynatrace The Apache-2.0 toolkit TechCrunch

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…