Cyber Security Shots

Azure

• Private Application Gateway deployment released in August 2025. Following enhancement has been made as a part of this release
  • Private IP address only frontend IP configuration
  • Elimination of inbound traffic from GatewayManager service tag via Network Security Group
  • Ability to define a Deny All outbound Network Security Group (NSG) rule to restrict egress traffic to the Internet
  • Ability to override the default route to the Internet (0.0.0.0/0)
  • DNS resolution via defined resolvers on the virtual network Learn more, including private link private DNS zones.

• Public preview of Azure Web Application Firewall on Application Gateway for Containers available from July

Security News

• Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543
• The Echo Chamber attack context-poisoning jailbreak that bypasses the safety restrictions of advanced LLMs (such as GPT-4 and Gemini models)
• Zero day vulnerability in On-Prem SharePoint