Browse All Posts (133)

sbaynes introduces run-assert-eval, a VS Code “skill” that threat-models an AI agent, turns discovered risks into measurable eval suites, generates runtime governance policy, and reruns the same evaluation to show whether the mitigation actually reduced failures (without sacrificing helpfulness).

Mark Russinovich recounts a 2014 incident where a developer’s code nearly caused a worldwide Azure outage, and explains the safe deployment policy that came out of it as part of a broader discussion on Azure resilience.

Tyler Leonhardt explains how to use different model “harnesses” in VS Code with GitHub Copilot, including Claude and Codex, and how bring-your-own-key (BYOK) changes the ways you can access models from your editor.

Tommi Gustafsson and Janne Gustafsson join the .NET MAUI Community Standup to explain how they built GnollHack, a cross-platform roguelike, using .NET MAUI to target Android, iOS, and Windows, and to share practical lessons from modernizing a classic NetHack-based codebase for mobile-friendly gameplay.

Allison explains a change to GitHub Actions workflow run queries in the API and UI: result counts are now capped at “2,500+” to avoid timeouts returning misleading totals, while pagination still returns up to 1,000 items per query.

Kayla Cinnamon explains how to use canvases in the GitHub Copilot app to generate a custom, shared UI (like a kanban board or release checklist) from a plain-English description, then iteratively refine it while the agent updates the same live surface.

Allison announces that GitHub’s agentic autofix can now use Copilot Memory to pull repository-specific context when resolving security alerts, and to store fix patterns as reusable memories for future fixes and other Copilot features.

Daniel Roth announces the new AG-UI .NET SDK and shows how to expose and consume interoperable agent endpoints from .NET using Microsoft.Extensions.AI. The post explains the AG-UI event model, includes an ASP.NET Core quickstart for streaming Server-Sent Events, and outlines how Microsoft Agent Framework now builds on the shared AGUI.* packages.

Microsoft Developer demonstrates how to use Azure AI Foundry’s model router so a single deployment can dynamically route requests to different models, balancing cost and quality while keeping the agent integration to a minimal code change.

Allison summarizes the September 21 weekly GitHub Copilot releases, including new model options, a local sandboxing preview in the Copilot app, and feature updates across Slack/Teams, JetBrains IDEs, and VS Code—especially around agent sessions, remote development, and observability.

Allison outlines updates to GitHub Copilot’s Slack and Microsoft Teams integrations, focusing on richer conversation context, better traceability when creating GitHub work, and more control over model selection and repository defaults. The post also summarizes reliability fixes and explains preview availability for Copilot Business and Enterprise.

goupadhy announces the September 2026 on-premises data gateway release (v3000.334), highlighting a new Soft Delete recovery window, security dependency updates (including Log4j 2.26.1 and a fix for CVE-2026-18401), and compatibility alignment with the September 2026 Power BI Desktop query runtime.

John Savill runs through the Azure Weekly Update for 25 September 2026, covering a grab bag of platform changes across compute, serverless, containers, PostgreSQL, and Azure AI Foundry, plus several GitHub Copilot and model availability updates and a retirement notice.

Microsoft Security Research, Yossi Weizman and Tushar Mudi detail Storm-3168 (JADEPUFFER) activity in Azure, showing how compromised service principals were used for reconnaissance, rapid resource deletion, and credential access. The post breaks down the observed sequence and provides concrete mitigations using Defender for Cloud, RBAC hardening, secret rotation, and recovery protections.

GitHub introduces Canvas in the GitHub Copilot app, showing how developers can describe a workspace UI in plain language and have Copilot generate interactive tools like dashboards and issue trackers without writing UI code.

Josh Black explains how GitHub’s Primer Design System migrated from CSS-in-JS to CSS Modules without breaking production, using feature flags, visual regression testing, and incremental rollouts. The post also covers the follow-on work to eliminate `sx` props and remove `styled-components`, including automation via codemods and Copilot coding agents.

Visual Studio Code shares five VS Code keyboard shortcuts focused on faster text selection, covering quick ways to select lines, words, matches, and columns while editing code.

Allison summarizes what’s new in CodeQL 2.27.1, including new and improved queries across multiple languages, Kotlin 2.4.20 support, and accuracy fixes that affect GitHub code scanning results for C#, ASP.NET Core, and GitHub Actions workflows.

Allison announces a new GitHub Copilot enterprise-wide default policy that controls whether generally available Copilot features and supported client capabilities are enabled, disabled, or delegated to organizations, with a 28-day configuration window before enforcement begins.

Allison announces a public preview security control for GitHub Enterprise Cloud that requires “proof of presence” (fresh re-authentication or MFA) before users can perform high-impact actions, using Microsoft Entra ID SSO policies to reduce risk from stolen sessions and long-lived tokens.

puneetguptams shares practical configuration guidance for Azure SRE Agent, based on patterns observed in production telemetry. The post focuses on connecting the right data sources, routing incidents to the right specialist via response plans, writing useful skills, deciding when to require approvals, and ensuring the agent has the permissions needed to complete the last step.

Burke Holland argues that chat is often the wrong interface for working with LLMs, and shows how GitHub Copilot app “canvases” provide a more task-oriented surface. He walks through examples like a Connect 4 canvas, a winget UI, and a SQLite UI, then connects the idea to automating agent-driven development workflows.

jaredfholgate introduces an experimental Bicep CLI feature, `bicep docs generate`, which creates and keeps module documentation in sync with your Bicep code. The post shows how the generator discovers parameters, outputs, types, and examples, how to customize output with Scriban templates, and how to enforce up-to-date docs in CI.

Allison announces a GitHub Actions change where expired artifacts are no longer shown in the workflow run summary UI or returned by the REST API, reducing confusion about whether deleted artifacts still incur storage billing.

Liam Conroy-Hampton explains how agent extensibility works in Visual Studio Code, including tools and tool sets, permissions and sandboxing, and how MCP (Model Context Protocol) can connect agents to external data sources. He also introduces Agent Plugins for packaging tools and shows how VS Code supports third-party agents like Claude and Codex.

Antonio Morales explains how the GitHub Security Lab’s Taskflow Agent framework can drive an autonomous fuzzing pipeline for C/C++ projects, from harness generation and AFL++ runs to coverage-guided iteration, crash triage, and draft vulnerability reports, with practical guidance on running it safely in disposable environments.

Tina Schuchman outlines new Microsoft Foundry capabilities for building and operating production AI agents, including broader model choice (GPT-6 and Claude Opus 5.5), voice agents, long-running hosted agent resilience, and an AgentOps-style loop that uses traces and evaluators to continuously improve quality, latency, and cost.

Muzz Imam walks through setting outbound network egress rules for Microsoft AI Foundry hosted agents, using an account-level RAI policy to allow specific FQDN destinations, observe real outbound calls in Audit mode, and then validate blocking behavior under Enforced mode with a controlled probe.

RajyaLaxmiYellajosyula explains how Oracle GoldenGate is now managed as a native Azure experience within Oracle AI Database@Azure, including Azure portal/API lifecycle operations, Azure control-plane governance (RBAC, tags, Activity Log), and generally available observability via Azure Monitor metrics and Azure Log Analytics events.

dotnet introduces a practical series on building AI-powered apps with .NET and Microsoft Foundry, highlighting new SDK capabilities, hands-on projects, and the latest Foundry features and services aimed at .NET developers.

Bob Ward explains how Microsoft SQL (SQL Server, Azure SQL, and SQL DB in Fabric) can be used for chat completion and agentic RAG scenarios, including making REST calls to models, building prompts in SQL, and adding security controls like immutable logging, content moderation, and prompt-injection protection.

Microsoft Threat Intelligence analyzes Storm-2570, a ransomware affiliate that reuses the same post-compromise tooling and techniques across multiple ransomware ecosystems, and provides concrete mitigation steps plus Microsoft Defender and Microsoft Sentinel hunting queries to detect and disrupt activity before ransomware deployment.

Alym Rayani rounds up September 2026 updates across Microsoft Security, focusing on securing AI-era workflows: richer investigations in Microsoft Defender with Microsoft Security Copilot, network controls to stop sensitive data reaching shadow AI using Purview and Entra, and new Purview compliance and lifecycle capabilities.

mshboul explains how to handle Azure Monitor Logs Ingestion API’s 1 MB payload limit when migrating from the deprecated Data Collector API, by chunking large array payloads and sending them in smaller batches using an HTTP action pattern.

Linda Li announces the general availability of Routines in Microsoft Foundry Agent Service, a managed way to run agents on schedules or in response to external events. The post explains trigger types, how agents can resume long-running work with reminders, and how unattended execution can use either creator identity or an agent identity in Entra ID.

GitHub shares a short clip from the GitHub Podcast discussing the idea that developers may be “mourning” the craft of manually writing software as AI coding tools become more common, and whether traditional coding skills are actually losing value in day-to-day engineering work.

Dan Taylor walks through recent Microsoft Agent Framework updates that make agents more usable in real apps: interactive UIs via AG-UI, longer-term memory via Foundry Agent Service (and Cosmos DB alternatives), CodeAct for multi-step execution, and resilient hosting for recoverable long-running workflows in both Python and .NET.

Fokko at Work demos the GitHub Copilot and VS Code 1.139 updates, focusing on running agent sessions in Dev Containers on remote hosts and several quality-of-life improvements for managing Copilot sessions and chats.

Lee Stott describes a developer demo that shows how to let an AI agent produce a decision brief while keeping real-world actions (like quarantining inventory) under deterministic, authenticated, auditable application control using MCP, Microsoft Foundry Hosted Agents, Entra auth, and Azure Blob Storage concurrency safeguards.

hcamposu explains how to confirm a BizTalk Server 2020 hotfix (KB5091379) has switched the SB-Messaging adapter from SBMP to AMQP before Azure Service Bus stops accepting SBMP on September 30, 2026, using connection checks, ETW tracing, and targeted validation tests.