Microsoft Rolls Out Metadata Security Protocol (MSP) to Enhance Security for Azure VMs
Microsoft has introduced the Metadata Security Protocol (MSP) for Azure virtual machines. MSP elevates access control for the Azure Instance Metadata Service (IMDS) and WireServer endpoints—long-used in bootstrapping and management but frequently targeted in attacks such as confused-deputy or internal privilege escalation. By deploying a Guest Proxy Agent in-guest and intercepting metadata requests via eBPF, MSP ensures only authorized processes can access metadata and securely endorses calls using HMAC signatures.
The security upgrade arrives amid growing concern over metadata-service vulnerabilities in cloud environments. Other industry-first protections feature improved isolation, fine-grained access control and default locked down IMDS access for a default-closed model. This provides defense against metadata-related attacks, granular control within VMs and industry-leading protection.
Posted by Redmondmag.com Editors on 11/20/2025