Browse All Posts (137)

Mine Starks demonstrates the Quantum Development Kit (QDK) learning experience in VS Code, showing how guided lessons and hands-on Q# exercises are paired with GitHub Copilot assistance to help developers learn quantum computing fundamentals and progress into algorithms like Grover’s and Shor’s.

Ran Rosin summarizes why KuppingerCole named Microsoft a Leader in its 2026 CNAPP Leadership Compass, and what that says about where cloud security is heading: unified risk management across cloud infrastructure, identities, data, applications, and AI, with runtime-driven prioritization and SOC integration.

robece-msft explains how to choose between Business Events, Fabric Events, and Azure Events in Microsoft Fabric, focusing on how each “event pillar” fits different event-driven architecture needs and enterprise implementation patterns across the Fabric platform.

Microsoft Developer shares Shireesh Thota’s perspective on turning “data everywhere” into usable intelligence by bringing data together, adding context, and applying AI on top—framed as an architecture discussion rather than a single feature walkthrough.

Microsoft Security Research and Srinivasan Govindarajan break down how a macOS ClickFix infostealer campaign evolved from openly serving malicious lures to hiding them behind a server-side browser-fingerprinting gate, and they provide practical hunting pivots, IOCs, and Defender coverage to help defenders detect related activity.

GitHub shows how Dan, a senior corporate counsel, uses GitHub Copilot CLI to verify AI-generated analysis by grounding outputs in source documents. The video highlights a custom Copilot CLI skill (“Eyeball”) that embeds inline screenshots to help reviewers validate clauses and act on AI outputs with more confidence.

Dan Hellem announces the general availability of the Azure DevOps Remote MCP Server, explaining how AI assistants can securely connect to Azure DevOps via a hosted endpoint. The post covers the minimal mcp.json setup, Entra ID authentication requirements, current client support, and when to use the local MCP server instead.

The Visual Studio Code Team shares the 1.133 Insiders release notes, highlighting a change for extension authors: custom editor extensions can now set different default priorities for normal editing versus diff views, improving how custom editors behave when comparing files.

Lee Stott introduces Microsoft’s end-to-end agent platform (now GA) using the FibreOps reference implementation: build agents with the Microsoft Agent Framework and GitHub Copilot SDK, run them as hosted agents in Microsoft Foundry Agent Service, and distribute them to Teams and Microsoft 365 Copilot, with evaluation, routines, memory, and observability.

Authorised Territory demonstrates a .NET MCP server pattern where a tool call starts a background task and returns a task handle instead of an immediate result, while a .NET client polls the server every second until the final output is available.

Microsoft Security Research, Ravikant Tiwari, Sagar Patil and Suriyaraj Natarajan break down ChainDrop, a large-scale npm supply chain compromise that used a Bun-based, self-propagating worm to steal credentials from developer machines and CI/CD runners, then republish infected packages. The post includes mitigation steps, IOCs, and Defender XDR hunting queries.

WSilveira explains how the Logic Apps Standard extension for VS Code can use Managed Identity for connectors during local development, so the same connection setup works both on your machine and after deployment. The post covers required versions, the WORKFLOWS_AUTHENTICATION_METHOD setting, and connector-specific behavior and limitations.

GitHub introduces isomorphic-git on Open Source Friday, showing how a pure JavaScript implementation of Git can work with repositories in Node.js and in the browser without relying on the native Git CLI.

Bruno Capuano shows how to build a Windows-only C# console app that performs live speech-to-text locally using Foundry Local and a compact Nemotron streaming ASR model, including model lifecycle management (download/cache/load/unload) and real-time interim/final transcription via async streams.

Anshu Verma announces the general availability of Azure Virtual Network routing appliance and explains where it fits in large-scale Azure network designs, including hub-and-spoke growth, private connectivity patterns, IPv6/dual-stack adoption, and multi-region connectivity with Azure-native operations and monitoring.

Allison announces a new way to customize GitHub code scanning default setup using a repository property, enabling teams to apply a shared CodeQL configuration across one repo or an entire organization without maintaining per-repo GitHub Actions workflows.

MattH_OneLake announces preview mirroring features in Microsoft Fabric that let teams surface Azure Monitor (Log Analytics) tables and AWS Glue-cataloged Apache Iceberg tables in OneLake using a zero-copy, metadata-based approach for cross-domain and cross-cloud analytics.

Allison announces that the GitHub Copilot Billing Preview app has been retired and explains how to manage Copilot spend directly in GitHub billing settings, including viewing AI usage, setting budgets, and exporting or pulling raw usage data via reports and the billing API.

Victoria shares how she built an internal “Innovation Marketplace” for the GitHub legal team using GitHub Copilot CLI, from planning and tracking work in GitHub Issues to deploying with GitHub Actions and GitHub Pages.

Bria Ford shares how GitHub’s legal team used GitHub Copilot CLI to turn repetitive legal work into repeatable, repo-backed workflows—ranging from contract drafting style guides to DMCA code-analysis playbooks—while keeping human judgment central.

James Montemagno introduces VS Code 1.131’s built-in dictation feature, showing how developers can speak directly into chat, editors, and the terminal without installing extensions, with an emphasis on privacy via on-device transcription and an optional AI cleanup step for more readable output.

Ron Pessner announces updates to Microsoft’s Zero Trust for AI approach, including new AI-focused checks in the Zero Trust Assessment, a DevSecOps pillar in the Zero Trust Workshop, and a companion e-book with practical patterns for securing AI agents, AI memory, and the software supply chain.

Giles Odigwe announces the stable release of the GitHub Copilot Agent for Microsoft Agent Framework in .NET and Python, showing how to use Copilot’s coding harness (shell, file, URL, and MCP tools) with Agent Framework features like middleware, streaming, OpenTelemetry tracing, and human-in-the-loop approvals.

Microsoft Security Research (David Shiran and Ayelet Artzi) explains how Microsoft Defender’s Automatic Attack Disruption used a new device isolation action to contain a multi-stage ransomware attack at QNET in 128 seconds, including a detailed attack timeline and mapped MITRE ATT&CK techniques.

robece-msft continues the Microsoft Fabric Business Events series with guidance on designing business event schemas that downstream consumers can reliably interpret and act on in event-driven architectures.

Julia Muiruri explains how to turn a single, oversized AI-generated pull request into a clean stack of smaller PRs using GitHub stacked pull requests and the gh-stack CLI, with a practical example and reviewer-focused guidance for keeping CI and merge rules working across the whole stack.

Allison announces the retirement timeline for GitHub Spark on github.com, including key dates, what happens to existing deployed apps, and what builders need to do to keep editing their apps after shutdown. The post also explains the impact of the earlier GitHub Models retirement on Spark apps that call llm().

GitHub walks through the My work tab in the GitHub Copilot app, showing how to manage issues and pull requests across repositories with default and custom views, filters, and layout options, and how to start agent sessions directly from work items.

John Savill recaps major Microsoft AI updates from July 2026, including new and updated models, Azure AI Foundry changes, and GitHub Copilot feature additions such as new “harness” options, @-mentioning app agents, and browser tools for Copilot in VS Code.

Visual Studio Code shares a short tip on teaching GitHub Copilot your project-specific rules using custom instructions, as part of learning agentic development in VS Code.

sbaynes reports on PRISM2, a pathology foundation model from Microsoft Research and Paige (Tempus) that links tissue images with diagnostic language from real pathology reports, aiming to reduce the need to rebuild separate models for each cancer-detection task.

Allison announces new Dependabot configuration options that let you control the branch names created for dependency update pull requests, including prefixes, maximum length, separators, letter casing, and custom templates—useful for CI/CD naming constraints and for keeping monorepo branches easier to identify.

Allison announces a public preview feature in GitHub Code Quality that can generate a code coverage workflow with AI from repository settings, opening a pull request for review before you merge.

Allison summarizes the CodeQL 2.26.2 release for GitHub code scanning, including new language support (Swift 6.3.3 and Kotlin 2.4.10), query behavior changes that may surface more findings, and a breaking change affecting how query authors embed links in alert messages.

Andrew Lock explains the new CSRF protection in ASP.NET Core (.NET 11 preview 6) that uses Fetch Metadata HTTP headers instead of synchronizer tokens, including how the middleware decides to allow or deny requests and what changes (if any) app authors need to make.

kinfey explains how Kars (Agent Reference Stack for Kubernetes) runs long-lived, tool-using AI agents with a tight blast radius by making the pod the trust boundary, brokering identity and egress through an in-pod router, and enforcing content safety, token budgets, and tamper-evident auditing on AKS.

Allison announces that GitHub Copilot cloud agent now lets you choose a reasoning level (for supported models) when starting a task, trading off deeper reasoning against higher token and credit consumption across paid Copilot plans.

Allison announces a GitHub Copilot Enterprise governance update that lets enterprise admins target managed settings to specific enterprise teams using itemized configuration files, so large orgs can scale guardrails while still letting teams tailor Copilot within defined boundaries.

GitHub shares a first look at GitHub Universe 2026, outlining what to expect from the event and how developers can get involved in the community opportunity announced for this year.

larohra explains how Azure Functions Agents now includes built-in OpenTelemetry tracing, so each agent run automatically appears as a structured trace in Application Insights. The post shows how to enable export with a single runtime extra and an App Setting, then uses Foundry Model Router as an example of making model selection visible.