Browse All Posts (114)

The NuGet Team explains how to prepare for Microsoft’s NuGet author-signing certificate rollover on September 23, 2026, including who is impacted and the exact commands and configuration changes needed to keep trusted-signer policies and package verification working.

Alberto Gimeno explains how the GitHub Copilot app was reworked to keep pull request reviews responsive even with million-line diffs and hundreds of inline comments, focusing on virtualization limits, dynamic height measurement, scroll anchoring, and the instrumentation loop used to harden performance.

Simon Frost explains how the Microsoft Discovery app and Premonition Insights on Azure can speed up exploratory analysis of wastewater metagenomics, while keeping human scientific judgment in control. The post walks through an end-to-end workflow: literature grounding, taxonomic filtering, weather-data enrichment, phylogenetic verification, and interactive dashboards.

Mark Russinovich discusses what resilience means at Azure’s scale, using a 2014 near-outage as a starting point to explain how Azure tests failure, defines service health, and responds to incidents. He also covers how AI and AI agents change reliability assumptions, and where Azure’s architecture frameworks fit.

Rob Lefferts announces Integrated Security Operations Center (ISOC) in Microsoft Defender, positioning it as a unified foundation for “agentic” security operations where protection and SOC workflows run as one system. The post explains the stack layers (signals, context, actuators) and how an integrated protection loop can speed up detection, investigation, and response.

Meagan demonstrates how GitHub Copilot can be used across Slack, Microsoft Teams, GitHub.com, the GitHub mobile app, and VS Code to keep coding work moving in the same conversation where teams collaborate.

Allison announces a public preview feature in the GitHub Copilot app that lets teams sandbox local sessions per project to reduce the blast radius of unintended commands. It covers filesystem allow/deny lists, outbound and local network controls, and limiting access to Git and GitHub CLI credentials.

Visual Studio Code highlights the Debug Visualizer extension for VS Code, showing how it can visualize data structures while debugging so you can watch algorithms evolve as your program runs.

Paull Young shares findings from a GitHub and Yale survey of 1,039 GitHub users on sustainable software, highlighting demand for practical tools, credible measurement, and workflow-friendly ways to reduce wasted compute—especially in repositories and CI/CD.

John Edward covers Microsoft and AWS’s Azure Multicloud Interconnect for AWS announcement, focusing on what it changes for private, high-bandwidth connectivity between the two clouds and why it matters for teams running cross-cloud, data-heavy workloads.

Thomas Maurer argues that Azure Local should be evaluated as the infrastructure foundation of Microsoft Sovereign Private Cloud, not just as a hypervisor replacement. He breaks down connected vs disconnected operations, Azure Arc control-plane options, and the platform capabilities (AKS, data services, Foundry Local, GitHub Enterprise Local) that shape sovereignty and resilience.

The Visual Studio Code Team shares an update for the VS Code 1.140 Insiders build, highlighting a change to remote agent chat that lets you start a chat session on an eligible remote agent host without first selecting a folder in the desktop Agents Window.

Allison announces OpenTelemetry support in the GitHub Copilot app, letting enterprises export agent activity telemetry to compatible observability tools so teams can trace agent sessions, investigate unexpected behavior, and manage monitoring settings centrally.

Allison announces GitHub Copilot for JetBrains 1.18.0, highlighting new agent-session controls like assisted tool approvals, message re-editing with conversation rewind, shared org skills and instructions, Codex agent plan mode, and more granular MCP tool controls, plus several UX, reliability, and compatibility updates.

Allison announces faster C++ code intelligence in GitHub Copilot CLI through whole codebase indexing, which builds a persistent symbol index across the entire repository to speed up definitions, references, and symbol search, with notes on how to check progress and disable indexing if needed.

Steven Masada explains how Microsoft disrupted EvilTokens, an AI-enabled phishing-as-a-service platform that automated inbox analysis, target selection, and fraud preparation after compromising email accounts. The post outlines how the operation worked, what defenders should learn from it, and how coordinated legal and technical action helped take down its infrastructure.

Kyle Daigle opens GitHub Copilot Day by outlining how software development is moving from manual coding toward agentic orchestration, and introduces GitHub’s HydraFusion work on optimizing model selection to reduce cost while improving quality. He also previews the shared runtime, the Copilot app, and the Copilot SDK for building custom workflows.

Allison announces that Anthropic’s Claude Opus 5.5 model is now available in GitHub Copilot, including where you can select it, which Copilot plans get access, and how admins can control enablement via model policies and usage-based billing.

Aaron Powell walks through diagnosing a production hang in a C# app by capturing a memory dump and analyzing it in Visual Studio, using Parallel Stacks to spot thread-pool saturation and then using GitHub Copilot to help interpret what the dump is showing.

Aaron Powell shows how to generate memory dumps from a C# app when it becomes unresponsive, so you can debug production hangs with more than just logs. The article includes a thread-pool saturation watcher, Windows dump creation via dbghelp.dll, and Linux dump creation via the .NET runtime’s createdump utility.

Allison announces that OpenAI’s GPT-6 Sol and GPT-6 Luna are now available as model choices in GitHub Copilot, alongside GPT-6 Astra. The update covers what each model is optimized for, where you can select them, how they’re billed, and how admins can control access via model policy settings.

James Montemagno introduces Agent Merge (Experimental) in Visual Studio Code, showing how an agent can help keep pull requests moving by addressing review feedback, fixing failed checks, and resolving merge conflicts so a PR is ready to merge.

Vishnu Charan TJ shows how to use Azure Blob Storage as a durable, shareable “virtual filesystem” for LangChain Deep Agents, including a Python setup walkthrough, identity-based authentication with DefaultAzureCredential, and practical guidance for routing durable paths, isolating containers, and applying least-privilege access.

GitHub shows how the GitHub Copilot app can automate a daily pull request review workflow by grouping dependency update PRs by risk, checking CI build statuses, and summarizing what looks safe to merge.

Microsoft Threat Intelligence, Microsoft Defender Experts and Microsoft Security Research break down EvilTokens, a phishing-as-a-service platform that abuses the OAuth device code flow to steal tokens and take over accounts. The post explains the attack chain, common evasion techniques, and concrete Defender/Entra mitigations plus hunting queries.

Allison announces upcoming GitHub SSH hardening changes: deprecating SHA-1-based RSA signatures, removing a Diffie-Hellman key exchange, enforcing 3072-bit minimum RSA keys for new uploads, and enabling a post-quantum hybrid key exchange on github.com and some GitHub Enterprise Cloud regions.

Visual Studio Code highlights how the Prettier extension simplifies consistent code formatting directly in VS Code, making it easier to keep files clean and standardized while you work.

Roger Barreto and Tao Chen explain how Foundry hosted agent isolation works in Microsoft Agent Framework, breaking it into user isolation (who the request represents) and session isolation (which sandbox and files persist). They show how to pass delegated identities and how to create, reuse, and pool Foundry hosted sessions in .NET and Python.

Andrew Lock walks through the new experimental Device Bound Session Credentials (DBSC) support in ASP.NET Core for .NET 11, showing how to harden cookie authentication (including ASP.NET Core Identity) against session hijacking and what the registration/refresh protocol looks like in practice.

Allison announces that the all-platform CodeQL bundle is deprecated starting with CodeQL CLI 2.27.0 and will be removed in mid-March 2027, with guidance to switch to platform-specific downloads (including Linux ARM64).

kinfey explains how Azure KARS (a Kubernetes reference stack) can run “coding-agent” CLIs as governed workloads, focusing on blast-radius control, credential isolation, and consistent policy enforcement across multiple agent runtimes like Copilot CLI, Claude Code, and Codex.

Allison announces the general availability of GitHub’s refreshed repository pull requests page, highlighting new filtering and search capabilities, a collapsible sidebar with common filters, a compact view, and richer PR context like status check counts and unread update indicators.

Allison announces a GitHub Enterprise feature that lets enterprise owners export a full credential inventory (keys and tokens) via the UI or a paginated REST API, making it easier to assess exposure during incidents and correlate credentials with audit log activity.

Cameron Tomisser shares Episode 6 of The Upload, covering .NET 11 performance improvements, Azure VM Scale Sets resiliency updates, Microsoft’s multicloud database SDK, critical .NET security updates, and new production-ready capabilities in Microsoft Foundry.

hailukassa introduces next-generation virtual nodes on Azure Container Instances (ACI) for Azure Kubernetes Service (AKS), showing how to add a serverless compute layer to a cluster for burst capacity and per-pod isolation. The post includes hands-on Helm and kubectl steps, plus how to enable confidential containers with hardware-backed attestation.

Amanda Silver explains how Microsoft engages with open source, including community-driven documentation and upstream contributions to projects like Kubernetes, Apache, and the Linux kernel, and why that work matters for interoperability and product quality.

EldertGrootenboer explains how Azure API Management’s generally available send-service-bus-message policy lets an HTTP API enqueue work to Azure Service Bus, and which queue/topic patterns fit best for commands, routing, buffering, and independent scaling behind a governed API boundary.

GitHub explains how teams can move beyond basic AI code completion and chat to agentic workflows that automate real engineering tasks. The video highlights an internal GitHub example that automates a documentation lifecycle across multiple repositories using an agentic workflow approach.

Allison announces that Grok 4.7 (xAI’s reasoning model) is rolling out in GitHub Copilot, including where developers can select it, which Copilot plans get access, and how admins can control availability via model policy and default model enablement settings.

piyush05 explains how to deploy Elastic’s serverless Elasticsearch Vector Database through Azure Native Integrations, then use it for hybrid (keyword + vector) semantic search and RAG. The post also covers Azure portal onboarding, permissions, Entra ID SSO, and Azure-connected billing for Elastic resources.