Browse All Security Content (468)

Allison announces general availability of assisted permissions in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code. A language model evaluates command, file-path, and URL requests, automatically allowing those classified as clearly safe. Enterprise administrators can control available permission modes and set defaults for new sessions.

sbaynes describes how Microsoft combines AI agents, testing, static analysis, and formal verification to transform large codebases. The article covers Windows toolchain migration, C/C++ modernization into Rust, and specification-driven validation, explaining how small expert teams review shared knowledge and system properties rather than every generated change.

Cynthia Zanoni and Pooja Yarabothu explain how Microsoft’s PostgreSQL extension brings database exploration, SQL editing, and troubleshooting into VS Code. They show how GitHub Copilot can help interpret schemas and query plans, while emphasizing result verification and careful review of performance recommendations before making changes.

Visual Studio Code demonstrates how to bring PostgreSQL workflows into the editor using Microsoft’s PostgreSQL extension. Learn to install the extension, connect to a PostgreSQL database on Azure with Microsoft Entra ID, save connection profiles, and explore database objects without switching tools.

Josef Sin explains what Azure DevOps users should check following the PHP2Shell disclosures. Azure DevOps Services and Server do not use PHP to handle customer requests, but pipeline workloads, agent hosts, containers, and deployed applications may require runtime patches. The guidance distinguishes Microsoft-managed updates from fixes customers must apply themselves.

Welcome to this week's Security roundup, where .NET out-of-band patches and the LiteLLM and ConnectWise supply chain investigations put deployment checks, environment rebuilding, and application identity reviews first. GitHub adds package filtering, credential lifecycle options, and secret exposure response tools, while upcoming agent-assisted fixes and CodeQL compatibility changes require planning. We then look at Microsoft's AI agent containment controls and Azure's sovereign and confidential computing updates, distinguishing available protections from preview capabilities.

Microsoft Developer demonstrates how to protect an AI agent from malicious user input and instructions hidden in tool responses. The walkthrough configures Microsoft Foundry guardrails and Prompt Shields, replays both attacks, and uses traces to show where protections intervene before the agent acts.

Rahul Bhandari (MSFT) announces out-of-band security updates for .NET 8, 9, and 10, plus .NET 11 RC3. The release fixes Brotli decompression and Linux tarball ownership vulnerabilities, completes two earlier fixes, and explains how to update framework-dependent applications, self-contained deployments, containers, and source-build packages.

John Savill reviews this week's Azure and AI updates, including networking, backup, monitoring, storage, and identity changes. Topics include Traffic Manager integration with Azure DNS, keyless TLS, Cosmos DB key rotation, Azure Databricks private networking, and Copilot Studio agent identity.

Madhura Amlekar explains how to assess Azure managed services before refreshing virtual machines. The guidance covers component-by-component migration, application compatibility, deployment and recovery checks, shared security responsibilities, and reservation commitments, while recognizing that some workloads still need VM-level control and that PaaS is not always cheaper.

Allison explains a GitHub Enterprise Managed Users (EMU) incident where SCIM deprovisioning incorrectly deleted accounts instead of suspending and obfuscating them, how to confirm impact via audit logs, and what GitHub changed to restore records and prevent recurrence.

Microsoft Security Research, Mahesh Mandava, Srinivasan Govindarajan, Sagar Patil and Suriyaraj Natarajan break down the LiteLLM 1.107.0 supply-chain compromise, showing how Python startup hooks enabled credential theft without importing LiteLLM, what data was targeted, and how to investigate and recover using Microsoft Defender detections and hunting queries.

Allison announces new GitHub public monitoring capabilities for handling leaked secrets at enterprise scale, including alert triage workflows, continuous token validity checks, and integrations via a REST API and enterprise webhooks for incident response pipelines.

Allison announces general availability of enterprise-level installations for GitHub Apps, expanding API and permission coverage so enterprises can migrate more automation away from classic PATs and manage governance, security, and admin settings through GitHub Apps.

Allison summarizes the September 2026 update for GitHub Copilot in Visual Studio 2026, including PR exploration via the Git agent, preview BYOM support (with a breaking change to the new Agent harness), and a new flow to fix NuGet Audit vulnerabilities directly from the Error List.

Shivani_Tripathi explains how Private Network Gateway connects Azure Databricks serverless workloads to private resources through one managed, encrypted connection. The overview covers subnet delegation, workspace connectivity configuration, and routing options, while showing how existing Azure network controls continue to govern access and outbound traffic.

Allison announces new GitHub Actions blob storage hosts that are now included in the GitHub meta API, with guidance for organizations that use network allowlists to avoid interruptions to job summaries and logs.

Allison announces a public preview feature for GitHub Enterprise Cloud with data residency that expands secret scanning to public commits on github.com, while keeping alert delivery and data handling within the customer’s residency region via verified domain matching.

mukta introduces Enhanced Feature Flags (public preview) in Azure App Configuration, explaining how a dedicated resource model and API surface improve governance of feature rollouts. The post focuses on separating feature-flag permissions from general configuration, adding server-side validation, and keeping existing key-value feature flags supported.

poorvinarang explains how Azure Linux evolved from CBL-Mariner into Azure Linux 4.0, and what Microsoft changed to make it a supported, general-purpose Linux option for Azure VMs, VM Scale Sets, and container images, with a focus on upstream alignment, lifecycle predictability, and security servicing.

Microsoft Security Research and Microsoft Threat Intelligence detail how Storm-0940 used the ARTEX agentic AI framework to accelerate a ConnectWise supply chain compromise, then abused OAuth application identities to access Microsoft 365 tenants via app-only authentication and Microsoft Graph, with concrete mitigation steps, detections, IOCs, and hunting queries.

GitHub shares a September platform update roundup covering Project HydraFusion’s expansion to VS Code and the GitHub Copilot app, plus new workflow features like local sandboxing GA, automated PR approvals that can satisfy merge gates, and bulk autofix for CodeQL findings.

Allison announces a public preview in GitHub CLI v2.103.0 that lets you opt in to expiring, auto-refreshing OAuth credentials, reducing the risk of long-lived leaked tokens. The post explains how to enable the feature, how it behaves with Git over HTTPS, and what to watch for in scripts that cache tokens.

Laura Jiang announces Agentic Autofix for GitHub Advanced Security in Azure DevOps, which generates proposed fixes for both code scanning alerts and vulnerable dependencies. The update uses repository context plus custom instructions/skills to better match team standards, and adds triage signals like EPSS and dependency scope to help prioritize what to fix first.

Ben Sickle outlines Microsoft’s announcements at NVIDIA GTC Berlin 2026 focused on running AI across Azure and customer-controlled environments, including Azure Local sovereign deployments, Foundry Local for on-prem model inference, confidential VMs, open-model endpoints for NVIDIA Nemotron via Fireworks AI on Azure, and GPU-accelerated analytics in Microsoft Fabric.

David Pless explains how Azure SQL Database Hyperscale’s cloud-native architecture lets teams scale compute, storage, and read capacity independently, and how features like serverless compute, elastic pools, named replicas, and snapshot-based backups map to different workload and availability needs.

Alicia Li summarizes Q3 2026 updates to Microsoft Fabric Eventstreams, focusing on new managed and custom connectors, CDC ingestion from operational databases, schema registry and schema-aware processing for mixed event types, in-flight enrichment with Delta tables, improved monitoring and diagnostics, and stronger deployment and networking controls.

Allison summarizes recent improvements and bug fixes in GitHub secret scanning, including an upcoming audit log field change that may affect integrations, plus updates to token revocation support, webhook payloads, and several API and push-protection edge cases.

Allison announces an update to the Dependabot alerts REST API that adds a new version_requirement field, making it easier to retrieve the dependency version (or constraint) recorded for an alert without parsing lockfiles or issuing separate GraphQL queries.

Allison announces GitHub package firewall in public preview for GitHub Enterprise Cloud, a supply-chain security feature that inspects package metadata and downloads to block malicious dependencies before they reach CI/CD hosts or developer workstations.

sonjagu rounds up the October updates for Azure SRE Agent, including new security and data residency guidance, enterprise deployment resources, GitHub Copilot Canvas collaboration, and new extension patterns like private Splunk MCP samples, Azure DevOps repo-backed plugin distribution, and ServiceNow response plans.

Stuart Russell outlines new and upcoming controls for Microsoft Sovereign Public Cloud and how they map to real Azure workload stages (data, indexing, inference, telemetry). The post covers Sovereign Control Panel, operator-access evidence features, key custody options with Managed HSM, confidential computing, and updated Sovereign Landing Zone implementations with Bicep and Terraform.

Allison announces expanded Dependabot support for newer package manager versions (npm 12, pnpm 11/12, and Bun 1.4), so teams can upgrade and continue receiving automated dependency update PRs across GitHub.com and GitHub Enterprise Server.

insagiv outlines how Foundry Local (GA on Azure Local) targets “sovereign AI” scenarios by running supported models in customer-controlled environments, including disconnected setups. The post covers local inference, model management, OpenAI-compatible APIs, retrieval with citations, early agent/connector capabilities via MCP, and how GitHub Enterprise Local supports SDLC sovereignty.

sushil_jarwal announces GitHub Enterprise Local and explains how it brings GitHub Enterprise Server-style source control and workflows to customer-controlled Azure Local environments. The post highlights a guided Azure deployment flow using Workload Orchestration, storing deployment secrets in Azure Key Vault, and AI options ranging from GitHub Copilot (connected) to Foundry Local models (restricted/disconnected).

meenagowdar outlines new capabilities for Microsoft Sovereign Private Cloud built on Azure Local, including Foundry Local for running AI models on-premises, options for connected vs disconnected operations, confidential VMs for sensitive workloads, and GitHub Enterprise Local to keep repos and CI/CD inside a sovereign boundary.

John Edward explains how to monitor Copilot Studio agents in production by combining conversation analytics with application telemetry, security controls, and outcome-based metrics. The guide focuses on catching failures early (tool-call errors, latency, unsafe access), setting baselines and alerts, and tying cost and performance back to successful task completion.

Bruno Borges outlines Microsoft’s Java support milestones through 2027 and what they mean for teams running Java on Azure. It highlights end-of-support timelines for Java versions on Azure App Service and Azure Functions, and points to tooling (Modernize CLI) to help plan and execute upgrades to newer Java releases.

jovanpop-msft introduces preview support for calling Fabric User Data Functions from T-SQL in Fabric Data Warehouse. The integration extends warehouse queries with custom Python logic for data enrichment, external API calls, and secret retrieval, with an example that calculates and stores IPv6 network prefixes for downstream analytics.

Krishnaprasad Hande explains a reference architecture for running sensitive AI inference on shared Azure GPU capacity using Azure Confidential Computing, NVIDIA H100 confidential GPUs, and Protopia’s Stained Glass Transform, with attestation and key-release controls to reduce data exposure across the inference path.