Microsoft is offering voluntary exits to roughly 60,000 employees across US, Canada, India, and UK. Product teams covering AVD, Intune, and Windows 365 are almost certainly in scope. Worth watching which orgs see attrition before the next Ignite roadmap drop. (via Ars Technica)

A GitHub worm hid malicious payloads in blobs sized 12-13 MB specifically because GitHub code search ignores files that large. Any IaC or AVD pipeline pulling modules from public repos has a blind spot here. Audit your Terraform module sources and pinned versions now. (via The Register)

Post-quantum DNS protection work is accelerating. Zero-trust and Conditional Access architectures that rely on DNS integrity need to account for this on the long-range roadmap. Not urgent today, but the standards runway is shorter than most architects think. (via The Register)

Apollo economist: AI has delivered zero financial payoff to corporate America outside of tech. Before your next Copilot in AVD pitch lands in front of a CFO, know what counter-argument is already in the room. (via TechCrunch)

Tesco is swapping VMware for Proxmox at store and edge level. Enterprise-scale Broadcom defections are no longer just data center stories. Watch how this plays into hybrid AVD and Azure Local conversations over the next 12 months. (via The Register)

A rogue AGENTS.md file in a Downloads folder was enough to redirect an AI coding agent into installing a malicious npm package. Using GitHub Copilot or any agentic tool against your Terraform or Bicep repos? Workspace hygiene is now a threat surface. h/t BleepingComputer

Two critical RCEs tracked as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) are now being exploited. If PHP-based web apps touch your AVD management plane or any internet-facing tooling in your Azure landing zone, patch timeline just moved to now. h/t BleepingComputer

An unpatched PHP RCE with no fix available yet - mitigations only. Does PHP run anywhere in your AVD supporting infrastructure? Session host app stacks, internal web apps served through AVD, or management portals all count. Worth an inventory check before this one gets a working exploit. (via BleepingComputer)

Torvalds on AI-generated kernel patches: the question is no longer whether AI was used, but whether the output is any good. That framing applies directly to IaC. AI-generated Terraform for AVD landing zones has the same problem - competent review catches the subtle misconfigurations, and no review ships them to production. (via The Register)

Three signals worth flagging from this week's security roundup: banks are actively detecting rogue AI agents inside their environments, self-rebuilding ransomware is now a macOS reality, and APT28 is targeting NATO defense firms. The rogue agent detection angle is the one to watch - that problem is coming to every enterprise AI deployment. h/t SecurityWeek