At Intelequia, as Microsoft Azure partners, we bring you a monthly roundup of the platform’s top updates. June was a month of consolidation following the flurry of activity at BUILD, featuring new models in Microsoft Foundry, increasingly agent-based cloud operations, advancements in containers, and a strong focus on security and identity. Here are the updates we consider most relevant for technical decision-makers.
AI and Machine Learning:
Cohere Command A+ on Microsoft Foundry: Cohere’s 218B-parameter mixture-of-experts model is now available on Foundry, with reasoning in 48 languages, multimodal inputs, and multi-step workflow orchestration with sub-second latency.
Mistral Document AI (OCR 4) and Mistral Medium 3.5 on Foundry: These expand the Foundry catalog with structured document understanding for business workflows and a general-purpose open-weight model for reasoning, coding, and agent-based tasks.
Defense Against Memory Poisoning in Foundry Agent Service: Microsoft details how agents’ long-term memory works and what controls to apply to prevent an attacker from influencing or deleting persistent memories.
Foundry Agent Service Memory: Closing the Decision Loop: Decisions are recorded in a dedicated store and retrieved by subsequent agents as binding directives, with a visible and deterministic impact on artifacts.
Development tools:
PostgreSQL extension for VS Code on Azure: Integrates performance diagnostics, metrics dashboards, and AI-powered recommendations to optimize databases without leaving the development environment.
Microsoft Planner MCP Server: The new Work IQ APIs integrate Planner into agent-based workflows, enabling automated work management with secure enterprise permissions.
Azure Verified Modules + GitHub Copilot: A library of supported modules and Copilot assistance make it easier to build secure, well-architected Azure workloads using infrastructure as code.
Agent 365 Skills: Simplifies agent onboarding at the enterprise level by transforming complex manual steps into a natural language-guided experience within code assistants.
Analytics and Fabric:
Lakehouse Table Health Diagnostics with T-SQL (GA): The sp_get_table_health_metric procedure allows you to detect suboptimal file layouts and reduce compute costs with a single command.
Multi-cloud patterns with Fabric Data Factory (GA): Standardizes data architectures across clouds, reducing integration complexity by up to 40%.
Integrated data protection in Fabric for AI: Combines Fabric capabilities with Azure Purview to classify, control access to, and monitor data, making it ready for generative AI applications.
On-premises data gateway, June 2026 release: Version 3000.322 adds authentication with Windows Web Account Manager, updates Log4j to 2.25.4, and improves consent-based diagnostics.
Containers and Kubernetes:
Dual-stack IPv6 in Azure Container Registry (Public Preview): ACR can serve both IPv4 and IPv6 clients simultaneously, requiring a Premium SKU and dedicated data endpoints.
Application Gateway for Containers – Inference Gateway (Public Preview): Integrates the Kubernetes Gateway API Inference Extension to serve AI models directly within containerized environments.
AI Landing Zones for agent architecture: The framework enables secure governance, unified control, and flexible runtime options for building and scaling enterprise AI agents.
Databases:
Self-service maintenance in Azure Database for PostgreSQL: The flexible server allows you to view, reschedule, and apply maintenance from the portal, reducing downtime during critical periods.
Bulk Copy API in Fabric Data Warehouse (Preview): Accelerates customer ingestion by 5 to 10× compared to T-SQL INSERT statements to write data directly to warehouse tables.
Microsoft.Data.SqlClient 7.0.2 and 6.1.6: Adds WAM support for authentication with Entra ID on Windows and strengthens TDS token parsing against protocol attacks.
SQL Server 2016 Extended Security Updates: Up to three years of additional security patches (through July 2029) to enable modernization with continuous protection.
DevOps:
Plan mode in Azure Bicep: The new mode allows you to preview changes before deploying, reducing risks and detecting errors in production early on.
Best Practices for IaC CI/CD in Azure: Using Azure Verified Modules, one folder per environment, and Workload Identity Federation eliminates secret leaks and ensures consistent deployments.
ALZ IaC Accelerator: Deploys an Azure Landing Zone in about twelve minutes, automating management groups, policies, networks, and pipelines in Bicep or Terraform.
Hybrid and Multicloud:
Windows Admin Center 2606 (GA): Significant improvements in reliability and accessibility, now exclusively in Admin mode and with plans for more frequent releases.
Azure Local Small Form Factor (SFF): Enables Azure services to run directly on edge devices, reducing latency and enabling real-time processing at the source.
Build a sovereign private cloud with Azure Local: Meets data residency requirements, supports sovereign AI, and operates in offline environments with a control plane consistent with the cloud.
Management and Governance:
Azure Copilot Observability Agent (GA): Transforms alert noise into investigated incidents by integrating AI-driven reasoning based on telemetry and context, with autonomous operations currently in preview.
Azure Deployment Agent: Guides workload design, grounds it in the Well-Architected Framework, and generates reviewable Terraform or Bicep code from natural language.
Agent-driven cloud operations: the next phase: AI-powered agents convert real-time information into governed actions, continuously optimizing hybrid infrastructure management.
Identity:
Secret-free cross-tenant authentication: A single Managed Identity can authenticate across multiple Entra tenants using Federated Identity Credentials, without managing secrets.
Entra Connect Sync with passwordless authentication: Users can sign in without traditional passwords, improving both security and the user experience.
Security:
Rowhammer on Azure Cobalt 200: Rowhammer protection integrated into the memory controller, with a hybrid design that balances performance and security without measurable overhead.
MCP Security Status in 2026: Risk analysis of issues such as prompt injection, confused deputy, and excessive access, along with new protocol identity checks.
Azure Confidential Computing for Digital Sovereignty: Extends hardware-rooted security to more processors, regions, and services for regulated workloads and AI privacy.
Vulnerability Remediation Agent in Intune: A new agent that prioritizes CVEs on Windows devices, along with automatic updates for enterprise apps to reduce exposure.
Storage:
Azure NetApp Files Migration Assistant (GA): With SnapMirror, it simplifies and reduces the cost of data transfer by leveraging ONTAP's native replication to Azure NetApp Files.
NFS nconnect in Azure NetApp Files for AVS: Allows a single NFS mount to use multiple TCP connections, increasing throughput and reducing latency under concurrent loads.
Virtual Desktop:
Point-in-time restore for Windows 11 (GA): Allows you to roll back devices to a previous stable state in minutes by capturing the system, apps, settings, and files every 24 hours.
Web:
New log view in Kudu for App Service Linux: Live log stream with filtering by instance, container, and level; keyword search; and a historical view for faster diagnostics.
Stateless and scalable MCP in App Service: The MCP 2026 specification eliminates handshakes and session IDs, allowing any instance to handle requests and simplifying scaling.
At Intelequia, we’re here to help
Want to take advantage of these new features in your organization? As Microsoft Azure partners, we at Intelequia will guide you through adopting agentic AI, modernizing your data and applications, and strengthening your cloud security. Contact our team, and let’s work together to design your next evolution on Azure.