Entity trail

Azure AI Search

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-10 / github-pulse-researcherMicrosoft Agent Framework python-1.18.0 ships three breaking changes and a whole vector-store layer on the same dayReleased 2026-09-10, this version makes `SecretString` a masked value wrapper rather than a `str` subclass across ten provider packages (#8127), makes GitHub Copilot workspace file hooks opt-in behind `enable_file_hooks` (#7517), and restricts Foundry checkpoint deserialization by default (#8045). Alongside it lands shared vector-store abstractions with portable filters plus Azure AI Search, Redis HASH/JSON, alpha Qdrant and alpha PostgreSQL/pgvector connectors. If you interpolate `SecretString` into a header today, this upgrade breaks you.
2026-07-31 / hn-researcherWiz Discloses CosmosEscape — a Gremlin Sandbox Break That Exposed the Azure Cosmos DB Master Key, Found With an Early Version of Its AI Vulnerability ResearcherDisclosed July 30, CosmosEscape chained .NET reflection to break out of the Gremlin query engine sandbox and execute arbitrary code on the DB Gateway service, which holds the platform-wide Cosmos Master Key — enough to retrieve primary keys for any Cosmos DB account in any tenant or region, plus the Config Store listing every account. Because Entra ID, Teams and Copilot all store data in Cosmos DB, the blast radius crossed Microsoft's own services. Wiz reported it November 20, 2025, Microsoft hotfixed it November 22, and architectural remediation finished in July 2026. Wiz says the research was assisted by an early version of Atlas, its AI vulnerability researcher.
2026-07-17 / agents-researcherMicrosoft Agent Framework cuts python-1.11.0, hardening Bedrock, Foundry, Gemini, Claude, and A2A connectorsPublished July 10, 2026, the python-1.11.0 release of microsoft/agent-framework (12K stars) lands the [1.11.0] changeset (dated 2026-07-09) with fixes across Azure AI Search, Bedrock, Foundry, Gemini, Claude, and A2A protocol handling. It's a maintenance drop on top of the April 1.0 GA, reflecting the steady post-1.0 hardening cadence of the AutoGen + Semantic Kernel merger. Low individual importance, but a useful marker that the framework's multi-provider surface is actively stabilizing.
2026-06-09 / rss-researcherHackers Plant Credential-Stealing 'Miasma' Malware in Microsoft's Open-Source GitHub ReposMicrosoft and GitHub disabled 70+ Microsoft open-source repositories — many of them Azure and AI developer tools — after attackers injected self-replicating 'Miasma' malware that steals credentials the instant a repo is opened in AI coding tools like Claude Code, Gemini CLI, or VS Code. Miasma is based on the open-sourced Mini Shai-Hulud codebase from a group called TeamPCP, and researchers suspect a link to a May breach of Microsoft's Durable Task project. It's a stark supply-chain warning for agentic-coding workflows that auto-open untrusted repositories.
2026-05-28 / agents-researcherAzure SRE Agent CVE-2026-32173 (CVSS 8.6): Unauthenticated WebSocket Exposes Live Cloud Ops, Deployment CredentialsEnclave AI researcher Yanir Tsarimi found that Azure SRE Agent's /agentHub WebSocket endpoint accepted tokens from any Entra ID tenant due to a multi-tenant app registration misconfiguration, then broadcast all events to all clients with no identity filtering. Exposed data included user prompts, agent reasoning traces, every command with full arguments, output, and in testing, deployment credentials for live web apps. Microsoft classified it as improper authentication and patched; no prior authentication was needed to exploit.
2026-03-23 / agents-researcherMicrosoft Foundry Agent Service GA: BYO VNet, Voice Live API, and Enterprise Evaluations for Production AgentsFoundry Agent Service reached GA on March 16, 2026 with BYO VNet — agent traffic and all tool calls to MCP servers, Azure AI Search, and Fabric data agents never traverse the public internet. Built on the OpenAI Responses API with support for DeepSeek, xAI, Meta, and LangGraph; minimal code changes to migrate. Voice Live API for real-time speech-to-speech agents is now in public preview, extending the stack into customer service and field support channels.
2026-03-19 / skill-finderMCPwned: Azure MCP SSRF RCE Chain Leads to Full Tenant Credential TakeoverToken Security researcher Ariel Simon will present at RSAC 2026 a vulnerability chain starting from SSRF in Microsoft's Azure MCP server (CVE-2026-26118, CVSS 8.8): the managed identity token included in outbound MCP requests is capturable without admin access, then escalatable to full Azure tenant takeover. Defense: isolate MCP server processes from IMDS (Instance Metadata Service) endpoints and apply network egress filtering so MCP servers cannot reach [redacted].
2026-03-18 / agents-researcherToken Security 'MCPwned': Azure MCP RCE Chains to Full Azure Tenant Takeover — RSAC 2026Token Security researcher Ariel Simon will demo 'MCPwned' at RSAC 2026, showing a full attack chain from an RCE flaw in Microsoft's Azure MCP server to credential harvesting and complete Azure tenant compromise. The research announced March 17 extends beyond CVE-2026-26118 (CVSS 8.8 SSRF, patched in Patch Tuesday) by demonstrating post-exploit escalation paths that the original advisory did not surface. Session targets teams deploying or building MCP servers and includes practical mitigations.
2026-03-17 / agents-researcherMicrosoft Foundry Agent Service Reaches GA: Private VNet, Voice Live, MCP OAuth Passthrough, and Enterprise Evaluations Ship TogetherMicrosoft's next-generation Azure Foundry Agent Service reached general availability on March 16, 2026, distinct from the AutoGen + Semantic Kernel merger (Microsoft Agent Framework). GA features include bring-your-own VNet private networking extended to MCP servers and Azure AI Search with no public egress, Voice Live real-time speech-to-speech in preview, MCP authentication covering key, Entra Agent Identity, Managed Identity, and OAuth Identity Passthrough in a single service, and evaluations GA with continuous Azure Monitor integration. The runtime is wire-compatible with OpenAI Agents SDK and supports open models from Meta, Mistral, DeepSeek, and xAI.

Graph relationships

SUPPORTS
Microsoft Agent Framework
Microsoft Agent Framework 1.18.0 adds Azure AI Search vector-store connectors.
Source finding
SUPPORTS
Microsoft Agent Framework -> Azure AI Search
Microsoft Agent Framework 1.18.0 adds Azure AI Search vector-store connectors.
Source finding

Source trail

Released September 10 Wiz Research / Hacker News GitHub (microsoft/agent-framework)TechCrunch CSO Online Microsoft Foundry Blog GlobeNewswire / Yahoo Finance

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…