Microsoft's advisory for CVE-2026-23651 describes a local elevation-of-privilege flaw in Azure Compute Gallery caused by a permissive regular expression used during input validation; an authenticated user with access to the affected component can craft input that bypasses intended checks and...
Microsoft has quietly made one of the most practical security upgrades for Azure virtual infrastructure far easier to adopt: Trusted Launch can now be enabled in-place for many existing VMs and scale sets, reducing the migration friction that has kept foundational boot security from reaching...