Browse All News (658)
Allison announces general availability of assisted permissions in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code. A language model evaluates command, file-path, and URL requests, automatically allowing those classified as clearly safe. Enterprise administrators can control available permission modes and set defaults for new sessions.
Alper explains how Microsoft Fabric’s preview React visualization libraries support analytics apps built with AI coding agents. Using Vega-Lite specifications and shared data, theming, and interaction contracts, the components provide reusable charts and grids with formatting, scrolling, tooltips, and consistent styling rather than requiring each app to recreate these behaviors.
Allison announces GPT-6.1 Terra’s general availability in GitHub Copilot for everyday agentic coding and terminal tasks. The model uses provider list pricing under usage-based billing, with gradual rollout across supported clients. Business and Enterprise administrators can control access through model policies and default enablement settings.
sbaynes describes how Microsoft combines AI agents, testing, static analysis, and formal verification to transform large codebases. The article covers Windows toolchain migration, C/C++ modernization into Rust, and specification-driven validation, explaining how small expert teams review shared knowledge and system properties rather than every generated change.
sbaynes describes using the Microsoft Discovery app to adapt insect-monitoring systems for the Asian citrus psyllid, a pest that spreads citrus greening disease. The case study covers grounded AI agents, experimental design, permitting, and synthetic biometric data for preliminary edge classifiers, with scientists reviewing decisions throughout the workflow.
Rena Liu introduces Azure AI Speech LLM 09-2026, adding 25 languages and faster multilingual transcription. The announcement covers recognition improvements, locale selection, phrase lists, and REST API configuration, with automatic service-side deployment requiring no customer action.
Mariyaali introduces preview support for Fabric Data Warehouse in workspace monitoring. Completed distributed queries flow into a workspace-scoped KQL database, where administrators can compare performance, investigate failures, and build dashboards. Shared query identifiers connect workspace telemetry to Query Insights for deeper investigation within the affected warehouse.
Cynthia Zanoni and Pooja Yarabothu explain how Microsoft’s PostgreSQL extension brings database exploration, SQL editing, and troubleshooting into VS Code. They show how GitHub Copilot can help interpret schemas and query plans, while emphasizing result verification and careful review of performance recommendations before making changes.
Josef Sin explains what Azure DevOps users should check following the PHP2Shell disclosures. Azure DevOps Services and Server do not use PHP to handle customer requests, but pipeline workloads, agent hosts, containers, and deployed applications may require runtime patches. The guidance distinguishes Microsoft-managed updates from fixes customers must apply themselves.
Jason Chlus and Mads Kristensen explain how Visual Studio 2026 version 18.11 supports standalone Markdown investigation notes and restores unfinished work through the opt-in Hot Exit preview. The walkthrough covers creating notes without a project, enabling session preservation, and understanding why restored edits are not a substitute for saving files.
Ben Steenhoek and Ulugbek Abdullaev explain how configurable eagerness lets paid GitHub Copilot subscribers adjust inline suggestions in VS Code. They describe the low, medium, and high modes, the training approach behind them, reward-hacking mitigations, and experimental results showing how suggestion frequency and size change.
Rahul Bhandari (MSFT) announces out-of-band security updates for .NET 8, 9, and 10, plus .NET 11 RC3. The release fixes Brotli decompression and Linux tarball ownership vulnerabilities, completes two earlier fixes, and explains how to update framework-dependent applications, self-contained deployments, containers, and source-build packages.
Allison announces an update to the GitHub Copilot usage metrics API that adds a new totals_by_client breakdown, letting enterprises and organizations see request, session, and token usage coming from tools outside the IDE (like OpenCode, Copilot CLI, VS Code, and JetBrains).
Allison announces an updated GitHub app for Microsoft Teams that combines GitHub notifications with GitHub Copilot-powered actions, letting teams respond to issue and pull request updates by mentioning @GitHub to investigate, fix bugs, run tests, and open pull requests from within Teams.
Allison explains a GitHub Enterprise Managed Users (EMU) incident where SCIM deprovisioning incorrectly deleted accounts instead of suspending and obfuscating them, how to confirm impact via audit logs, and what GitHub changed to restore records and prevent recurrence.
Microsoft Security Research, Mahesh Mandava, Srinivasan Govindarajan, Sagar Patil and Suriyaraj Natarajan break down the LiteLLM 1.107.0 supply-chain compromise, showing how Python startup hooks enabled credential theft without importing LiteLLM, what data was targeted, and how to investigate and recover using Microsoft Defender detections and hunting queries.
Allison announces new GitHub public monitoring capabilities for handling leaked secrets at enterprise scale, including alert triage workflows, continuous token validity checks, and integrations via a REST API and enterprise webhooks for incident response pipelines.
sbaynes introduces Microsoft research on evaluating step-by-step clinical diagnostic reasoning with SDBench and the Microsoft AI Diagnostic Orchestrator (MAI-DxO), including accuracy and cost results across NEJM and MIMIC-IV-ED cases and plans to open-source parts of the benchmark for reproducible evaluation.
Allison announces general availability of enterprise-level installations for GitHub Apps, expanding API and permission coverage so enterprises can migrate more automation away from classic PATs and manage governance, security, and admin settings through GitHub Apps.
Allison summarizes the September 2026 update for GitHub Copilot in Visual Studio 2026, including PR exploration via the Git agent, preview BYOM support (with a breaking change to the new Agent harness), and a new flow to fix NuGet Audit vulnerabilities directly from the Error List.
Allison announces an update to the Copilot usage metrics API that reports configured names for custom skills, custom agents, MCP servers, slash commands, and plugins (instead of grouping them as “other/custom”), making it easier for admins to track adoption and usage trends across an organization.
sbaynes introduces Flint-interactive, a language that helps AI agents generate interactive data visualizations (not just static charts) using high-level semantic events and update operators, so users can click, filter, zoom, and link interactions across charts, text, tables, and app state.
Allison announces general availability of a global default policy for GitHub Copilot features on Copilot Business and Copilot Enterprise, explaining how unconfigured settings will be enforced during the rollout and where admins can review and override defaults.
arindamc introduces Schema-aware Fabric Eventstreams (Preview), which lets Microsoft Fabric Real-Time Intelligence streams preserve event “shape” so teams can explore, classify, and process multiple event types in a single live stream without forcing everything into one wide schema.
Allison announces new GitHub Actions blob storage hosts that are now included in the GitHub meta API, with guidance for organizations that use network allowlists to avoid interruptions to job summaries and logs.
Allison announces a public preview feature for GitHub Enterprise Cloud with data residency that expands secret scanning to public commits on github.com, while keeping alert delivery and data handling within the customer’s residency region via verified domain matching.
Allison announces two GitHub pull request review improvements: a saved whitespace visibility preference that persists across pull requests, and a split-view change where new and deleted files use the full width to reduce wrapping and improve readability.
MichalBar introduces a preview feature in Microsoft Fabric Real-Time Dashboards that uses Copilot to generate purpose-built custom visuals. By describing an operational question in natural language, dashboard authors can have Copilot create both the KQL query and an HTML-based visualization directly as a new dashboard tile.
Allison announces a new “Industry comparison” view in the GitHub Copilot impact dashboard, letting opted-in enterprises benchmark agentic adoption and leverage against aggregated peer data, with controls for policy-based participation, daily refresh, and data residency boundaries.
sbaynes reports on Microsoft Research work proving the KLS conjecture, a long-standing result in high-dimensional geometry with implications for sampling, optimization, and randomized algorithms. The post also describes a human-directed, agentic AI workflow used to explore candidate proof paths and support derivations and verification.
Microsoft Security Research and Microsoft Threat Intelligence detail how Storm-0940 used the ARTEX agentic AI framework to accelerate a ConnectWise supply chain compromise, then abused OAuth application identities to access Microsoft 365 tenants via app-only authentication and Microsoft Graph, with concrete mitigation steps, detections, IOCs, and hunting queries.
prl explains the preview incremental migration workflow in Migration Assistant for Microsoft Fabric Warehouse, focusing on migrating database object definitions in phases, re-running migrations without recreating the destination, and handling naming conflicts safely. The post also clarifies how object migration differs from data loading and where Data Factory copy jobs fit in.
Niels Laute announces PowerToys 0.102 and walks through the headline changes, including new mouse utilities, a quick-access shelf for Command Palette, ZoomIt snip dictation, and new command-line tools that make it easier to script and automate PowerToys features from the terminal.
prl introduces the preview of Fabric Migration Assistant for migrating Teradata workloads to Fabric Data Warehouse, focusing on translating metadata and SQL/BTEQ into Fabric-compatible T-SQL, reviewing exceptions, and choosing practical data-movement and validation approaches to reduce manual migration effort.
QixiaoWang introduces the Fabric Notebook Toolkit (FNTK) preview, a CLI that lets coding agents interact with live Microsoft Fabric notebooks—reading and editing cells, running code, and pulling outputs and Spark diagnostics—so iterative debugging and validation can happen directly from an agent-driven terminal workflow.
Allison announces a public preview in GitHub CLI v2.103.0 that lets you opt in to expiring, auto-refreshing OAuth credentials, reducing the risk of long-lived leaked tokens. The post explains how to enable the feature, how it behaves with Git over HTTPS, and what to watch for in scripts that cache tokens.
Eleanor White explains how GitHub is moving its Git storage to Azure, focusing on the last ultra-busy repositories blocked by cross-region latency. The post breaks down per-reference write quorums and a “virtual replica” design that makes Azure Blob Storage part of the durability path so reads and writes can scale independently.
Laura Jiang announces Agentic Autofix for GitHub Advanced Security in Azure DevOps, which generates proposed fixes for both code scanning alerts and vulnerable dependencies. The update uses repository context plus custom instructions/skills to better match team standards, and adds triage signals like EPSS and dependency scope to help prioritize what to fix first.
Leah Tran introduces a new Visual Studio 2026 (18.11) Git workflow feature that lets you compare a historical commit directly against your current working tree, without checking out the old commit or switching branches, making it easier to inspect diffs that include uncommitted changes.
The Visual Studio Code Team shares the 1.144 Insiders changelog, including updates to the experimental session composer, richer Mermaid diagram controls in the Markdown editor, improved OAuth token isolation for MCP servers, and an early feature for comparing multiple models without opening a folder.