Topic · azure-government

Azure Government

Microsoft Azure Government — the dedicated US-sovereign Azure region.

RSS feed ↗

trade-press
Microsoft puts MDASH vulnerability-hunting AI into Azure Government
The limited preview names no agencies, provides zero vulnerability counts, and offers no benchmarks, an announcement in search of evidence.
Microsoft placed MDASH, an AI vulnerability-hunting system that deploys more than 100 AI agents to find exploitable software flaws, into limited preview on Azure Government. Both defense and civilian agencies are testing it, though Microsoft named none. The company's CTO said the tool is "uncovering previously unknown vulnerabilities and significantly improving the quality of the underlying code", then provided zero examples and zero counts to back the claim.
TUE
trade-press
DISA pegs Aug. 24 release for JWCC Unified Cloud Marketplace
The three-tier structure opens beyond the four incumbent hyperscalers, but DISA hasn't posted a ceiling value, and current JWCC spending sits overwhelmingly with one vendor.
DISA's August acquisition schedule sets an expected Aug. 24 final solicitation release for JWCC Unified Cloud Marketplace, the follow-on to the $9 billion Joint Warfighting Cloud Capability contract. The new vehicle splits into three tiers: hyperscalers (AWS, Microsoft, Google, Oracle) at Tier 1, everything-as-a-service at Tier 2, and emerging companies and small businesses at Tier 3. DISA hasn't posted an estimated ceiling value. Task-order data from Deltek shows the current JWCC is heavily lopsided: AWS holds $526.5 million in obligations against a $9 billion ceiling, followed by Microsoft at $221 million, Oracle at $76.9 million, and Google at $35.9 million.
AUG 16
trade-press
VA OIG raises PATS-R risk after low-risk cloud review
A medical-records access path does not become low impact because most users say they do not need it.
FedScoop reports that the VA Office of Inspector General found the Patient Advocate Tracking System-Replacement was wrongly categorized as low risk after its November 2023 cloud transfer, despite access to veteran medical records. VA’s IT office raised PATS-R to moderate after March 2025 preliminary findings. Assessors and agency CISOs should notice the harder point: access controls and user reviews, not the label, are where the audit found the real exposure.
JUL 7

Azure Government

Microsoft puts MDASH vulnerability-hunting AI into Azure Government

DISA pegs Aug. 24 release for JWCC Unified Cloud Marketplace

VA OIG raises PATS-R risk after low-risk cloud review