Azure Archives

Winsage

May 3, 2026

This $10 upgrade transforms your PC — but it’s only on sale until midnight

Microsoft Windows 11 Pro is available for .97, significantly reduced from its regular price of 9. This offer is valid only until midnight tonight. Windows 11 Pro includes features such as Snap layouts, seamless redocking, enhanced search functionality, and improved voice typing. It also offers tools like Azure AD, Hyper-V, Windows Sandbox, and BitLocker device encryption for security and productivity. For gaming, it features DirectX 12 Ultimate graphics and integrates Microsoft's AI-powered assistant, Copilot. Security enhancements include biometric logins, encrypted authentication, and robust antivirus protection.

Winsage

May 2, 2026

Upgrade your OS to Windows 11 Pro for only $10

Windows 11 Pro is typically priced at 9, but is available for .97 until May 3.

Winsage

May 2, 2026

Microsoft tests modern Windows Run, says it’s faster than legacy dialog

Microsoft has introduced a modernized Run dialog in the latest preview build of Windows 11, version 26300.8346. This updated Run dialog features a sleek design, dark mode support, and improved performance, achieving a median response time of 94 milliseconds compared to the legacy version's 103 milliseconds. The Browse button has been removed due to low usage statistics, with less than 0.0038% of users engaging with it. New functionalities include support for the ~ command for quick access to the home directory and the addition of icons in the command list. Users can enable or disable the modern Run feature through the Advanced Settings menu. The update also includes improvements to the Windows Share UI for Azure Active Directory users and enhancements to the Magnifier tool, which now offers zoom levels ranging from 5% to 400%. The Windows 11 Build 26300.8346 is available for download from the Experimental Channel.

Winsage

April 30, 2026

If you held off upgrading your PC because of the price, it’s now only $10 to get Windows 11 Pro

Windows 11 Pro is currently available for a promotional price of .97, a significant reduction from the standard price of 9. It includes security enhancements such as TPM 2.0, secure boot, built-in antivirus protection, Smart App Control, and Windows Hello for biometric security. BitLocker provides hard drive encryption, while Snap layouts and virtual desktops enhance multitasking. Unique features include Windows Sandbox for safely opening untrusted files, Hyper-V for managing virtual machines, and Azure AD support for workplace accounts. The integrated Copilot feature assists with various tasks. This promotional offer ends on May 3 at 11:59 p.m. PT.

Winsage

April 27, 2026

“The work we’re doing together remains ambitious”: OpenAI ends Microsoft exclusivity in a tone that doesn’t match last week’s leaked memo

Microsoft and OpenAI have redefined their partnership, ending Microsoft's exclusivity with OpenAI. Microsoft will continue as OpenAI's primary cloud partner, with products launching on Azure first, but OpenAI can now collaborate with other cloud providers if necessary. Key points include: - Microsoft retains its primary cloud partner status, with OpenAI products debuting on Azure unless Microsoft cannot meet capabilities. - OpenAI can distribute products across any cloud platform. - Microsoft's license to OpenAI's intellectual property is non-exclusive and extends through 2032. - Microsoft will no longer share revenue with OpenAI, while OpenAI will continue payments to Microsoft until 2030, capped at a predetermined total. - Microsoft remains a major shareholder in OpenAI. The partnership has faced challenges, including CEO Sam Altman's brief dismissal in late 2023, which displeased Microsoft CEO Satya Nadella. OpenAI's revenue chief acknowledged Microsoft's foundational support while indicating constraints on OpenAI's engagement with enterprise demands. Both companies are committed to ongoing collaboration amidst growing competition in the AI landscape.

Tech Optimizer

April 26, 2026

CanisterSprawl: pgserve Compromised on npm: Malicious Versions Harvest Credentials and Exfiltrate to a Decentralized ICP Canister

On April 21, 2026, compromised versions of pgserve (1.1.11, 1.1.12, and 1.1.13) were published on npm, containing a 1,143-line credential-harvesting script that executes during the postinstall phase of npm install. The malware functions as a supply-chain worm, reinjecting itself into other packages if it finds an npm publish token. Stolen credentials are encrypted using RSA-4096 and AES-256 and exfiltrated to a decentralized Internet Computer Protocol (ICP) canister. The last legitimate release was v1.1.10, published on April 17, 2026. The malware was detected by StepSecurity AI Package Analyst and Harden Runner, which flagged the compromised versions as Critical / Rejected and confirmed live exfiltration during analysis. The injected script performs operations such as harvesting environment variables, collecting filesystem secrets, encrypting payloads, and propagating to other npm packages and Python packages if a PyPI token is detected. The exfiltration domains have been added to a global block list.

Tech Optimizer

April 23, 2026

Take Control: Customer-Managed Keys for Lakebase Postgres

Encryption at rest is essential for cloud environments, especially in regulated sectors. Lakebase offers Customer Managed Keys (CMK), allowing organizations to control their encryption keys from preferred Key Management Services (KMS) like AWS KMS, Azure Key Vault, or Google Cloud KMS. Lakebase CMK manages both persistent storage and ephemeral compute, ensuring data security. Lakebase's architecture separates storage and compute layers, enabling elastic scaling and serverless operations. The storage layer maintains persistent data, while the compute layer consists of dynamic Postgres instances. This separation poses encryption challenges, addressed by Lakebase CMK through a hierarchical Envelope Encryption model. The key hierarchy includes: 1. Customer Managed Key (CMK): The Root of Trust in the cloud KMS, never accessed in plaintext by Databricks. 2. Key Encryption Key (KEK): A transient key for wrapping data keys. 3. Data Encryption Keys (DEKs): Unique keys for each data segment, stored in an encrypted state. When data access is needed, Lakebase retrieves DEKs by unwrapping keys from the KMS. If a key is revoked, access to the data is denied, and ephemeral compute instances are terminated. In practice, CMK applies to: 1. Persistence Layer (Storage): All data segments are encrypted with keys controlled by the CMK. 2. Ephemeral Layer (Compute): Each compute instance generates a unique ephemeral key, and upon revocation, the instance is terminated, destroying in-memory keys. CMK implementation follows a delegation model, allowing Security Admins to manage keys without accessing data. The process includes key configuration, workspace binding, and lifecycle management. Key rotation is seamless, requiring no data re-encryption. All cryptographic operations involving the CMK are logged by the cloud provider's audit service. Lakebase CMK is available for Enterprise tier customers, allowing organizations to manage their encryption keys effectively.

Winsage

April 23, 2026

Engineering secure passkey sync in Microsoft Password Manager

Passkeys are a new form of authentication that replace traditional passwords, providing a phishing-resistant and streamlined sign-in process. Microsoft Password Manager allows users to save and synchronize passkeys across devices linked to their Microsoft accounts, enhancing accessibility. The architecture for passkey syncing includes confidential computing for sensitive operations, hardware-rooted key protection for encryption keys, tamper-evident recovery storage, and encrypted synchronization across devices. Sensitive passkey operations are executed in Azure's confidential computing environments, ensuring cryptographic materials are processed securely. The encryption keys are protected using Azure Managed HSM, with access governed by attestation-based mechanisms. Registration and recovery processes require user authentication and enforce security measures within confidential computing boundaries, including a lockout state after consecutive incorrect PIN attempts. The system aims to provide a secure and user-friendly experience as part of a transition to a passwordless future.

Winsage

April 23, 2026

Microsoft faces court battle in £2bn Windows Server class action

The Competition Appeal Tribunal (CAT) has approved a £2 billion class action against Microsoft, aimed at compensating approximately 59,000 businesses using the Windows Server operating system in non-Microsoft public clouds. The collective action, led by Maria Luisa Stasi, alleges that Microsoft has overcharged UK entities for Windows Server on competing cloud services. The tribunal dismissed Microsoft's objections and granted a Collective Proceedings Order on an opt-out basis. The class action addresses two main issues: pricing abuse related to the Microsoft Service Provider License Agreement (SPLA) and re-licensing abuse concerning the deployment of Windows Server on Azure versus other cloud providers. The UK Competition and Markets Authority is also investigating Microsoft's software licensing practices within the cloud market. James Hain-Cole from law firm Scott+Scott expressed satisfaction with the tribunal's decision, emphasizing its significance for securing compensation for affected businesses.

Winsage

April 22, 2026

“For years, Microsoft’s practices have had real financial impact on both public and private organizations” – Microsoft faces new legal challenge over licensing practices

Microsoft is facing a £2 billion lawsuit in the UK, led by competition lawyer Maria Luisa Stasi, representing nearly 60,000 businesses that claim the company imposes excessive charges for using Windows Server on competing cloud platforms. The allegations focus on higher licensing fees for organizations using services like Amazon Web Services, Google Cloud Platform, and Alibaba Cloud compared to those using Microsoft’s Azure. The lawsuit has been allowed to proceed on an opt-out basis by the Tribunal. Microsoft plans to appeal the decision and asserts that its business model promotes competition. The case is part of broader scrutiny of Microsoft's licensing practices, with investigations also initiated by the UK Competition and Markets Authority and the European Commission, as well as inquiries in Brazil, Switzerland, the United States, and Japan.