Browse Security News (254)

Allison announces public preview support for server-to-server authentication in GitHub Copilot. GitHub Apps can use short-lived installation tokens to make SDK requests on behalf of an organization without user credentials. Usage is billed to the organization, with its model policies, budgets, spending controls, and app access controls applied.

Allison announces general availability of assisted permissions in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code. A language model evaluates command, file-path, and URL requests, automatically allowing those classified as clearly safe. Enterprise administrators can control available permission modes and set defaults for new sessions.

sbaynes describes how Microsoft combines AI agents, testing, static analysis, and formal verification to transform large codebases. The article covers Windows toolchain migration, C/C++ modernization into Rust, and specification-driven validation, explaining how small expert teams review shared knowledge and system properties rather than every generated change.

Sverre Brandsberg Dahl describes how SLB agile reservoir modeling connects with Azure Data Manager for Energy to run reservoir ensembles at cloud scale. The architecture combines parallel simulation, shared Azure Files storage, OSDU-aligned data services, and Microsoft Entra ID access controls to keep modeling workflows connected to governed corporate data.

Cynthia Zanoni and Pooja Yarabothu explain how Microsoft’s PostgreSQL extension brings database exploration, SQL editing, and troubleshooting into VS Code. They show how GitHub Copilot can help interpret schemas and query plans, while emphasizing result verification and careful review of performance recommendations before making changes.

Josef Sin explains what Azure DevOps users should check following the PHP2Shell disclosures. Azure DevOps Services and Server do not use PHP to handle customer requests, but pipeline workloads, agent hosts, containers, and deployed applications may require runtime patches. The guidance distinguishes Microsoft-managed updates from fixes customers must apply themselves.

Rahul Bhandari (MSFT) announces out-of-band security updates for .NET 8, 9, and 10, plus .NET 11 RC3. The release fixes Brotli decompression and Linux tarball ownership vulnerabilities, completes two earlier fixes, and explains how to update framework-dependent applications, self-contained deployments, containers, and source-build packages.

Allison explains a GitHub Enterprise Managed Users (EMU) incident where SCIM deprovisioning incorrectly deleted accounts instead of suspending and obfuscating them, how to confirm impact via audit logs, and what GitHub changed to restore records and prevent recurrence.

Microsoft Security Research, Mahesh Mandava, Srinivasan Govindarajan, Sagar Patil and Suriyaraj Natarajan break down the LiteLLM 1.107.0 supply-chain compromise, showing how Python startup hooks enabled credential theft without importing LiteLLM, what data was targeted, and how to investigate and recover using Microsoft Defender detections and hunting queries.

Allison announces new GitHub public monitoring capabilities for handling leaked secrets at enterprise scale, including alert triage workflows, continuous token validity checks, and integrations via a REST API and enterprise webhooks for incident response pipelines.

Allison announces general availability of enterprise-level installations for GitHub Apps, expanding API and permission coverage so enterprises can migrate more automation away from classic PATs and manage governance, security, and admin settings through GitHub Apps.

Allison summarizes the September 2026 update for GitHub Copilot in Visual Studio 2026, including PR exploration via the Git agent, preview BYOM support (with a breaking change to the new Agent harness), and a new flow to fix NuGet Audit vulnerabilities directly from the Error List.

Allison announces new GitHub Actions blob storage hosts that are now included in the GitHub meta API, with guidance for organizations that use network allowlists to avoid interruptions to job summaries and logs.

Allison announces a public preview feature for GitHub Enterprise Cloud with data residency that expands secret scanning to public commits on github.com, while keeping alert delivery and data handling within the customer’s residency region via verified domain matching.

Microsoft Security Research and Microsoft Threat Intelligence detail how Storm-0940 used the ARTEX agentic AI framework to accelerate a ConnectWise supply chain compromise, then abused OAuth application identities to access Microsoft 365 tenants via app-only authentication and Microsoft Graph, with concrete mitigation steps, detections, IOCs, and hunting queries.

Allison announces a public preview in GitHub CLI v2.103.0 that lets you opt in to expiring, auto-refreshing OAuth credentials, reducing the risk of long-lived leaked tokens. The post explains how to enable the feature, how it behaves with Git over HTTPS, and what to watch for in scripts that cache tokens.

Laura Jiang announces Agentic Autofix for GitHub Advanced Security in Azure DevOps, which generates proposed fixes for both code scanning alerts and vulnerable dependencies. The update uses repository context plus custom instructions/skills to better match team standards, and adds triage signals like EPSS and dependency scope to help prioritize what to fix first.

Alicia Li summarizes Q3 2026 updates to Microsoft Fabric Eventstreams, focusing on new managed and custom connectors, CDC ingestion from operational databases, schema registry and schema-aware processing for mixed event types, in-flight enrichment with Delta tables, improved monitoring and diagnostics, and stronger deployment and networking controls.

Allison summarizes recent improvements and bug fixes in GitHub secret scanning, including an upcoming audit log field change that may affect integrations, plus updates to token revocation support, webhook payloads, and several API and push-protection edge cases.

Allison announces an update to the Dependabot alerts REST API that adds a new version_requirement field, making it easier to retrieve the dependency version (or constraint) recorded for an alert without parsing lockfiles or issuing separate GraphQL queries.

Allison announces GitHub package firewall in public preview for GitHub Enterprise Cloud, a supply-chain security feature that inspects package metadata and downloads to block malicious dependencies before they reach CI/CD hosts or developer workstations.

Allison announces expanded Dependabot support for newer package manager versions (npm 12, pnpm 11/12, and Bun 1.4), so teams can upgrade and continue receiving automated dependency update PRs across GitHub.com and GitHub Enterprise Server.

jovanpop-msft introduces preview support for calling Fabric User Data Functions from T-SQL in Fabric Data Warehouse. The integration extends warehouse queries with custom Python logic for data enrichment, external API calls, and secret retrieval, with an example that calculates and stores IPv6 network prefixes for downstream analytics.

Satya Nadella shares Microsoft’s view that AI models and agents should be treated as insider risks, with security controls enforced outside the model. He highlights expanded Project Perception capabilities aimed at continuously assessing agent risk, adapting permissions, and containing threats across enterprise security layers.

Alistair Speirs outlines how to design “sovereign AI” architectures that keep sensitive workloads under the right operational, regulatory, and security controls, while still enabling AI capabilities from edge to cloud. The post connects Azure Local, confidential computing, and Microsoft Foundry/Foundry Local into a single, verifiable foundation.

Bruno Capuano shows how to use Bring Your Own Model (BYOK) with the GitHub Copilot SDK in a small .NET 10 console app, routing inference to Microsoft Foundry or Azure OpenAI while keeping the Copilot runtime. The walkthrough covers ProviderConfig, endpoint normalization, and Entra ID vs API-key authentication.

Hayete Gallot outlines why enterprise AI agents should be treated as “agentic insiders” and argues for continuous, real-time supervision using “Guardian Agents” and layered controls across identity, permissions, data, endpoints, network, cloud, and runtime.

Nadim Abdo outlines how organizations can treat AI agents as “agentic insiders” and reduce insider-risk-style failures using identity, least privilege, containment boundaries, and continuously updated risk signals across Microsoft’s security stack.

Allison explains a GitHub availability protection that can temporarily require authentication for some public-repo clones and fetches over HTTPS during unusual traffic, and outlines practical ways to make CI and automation more reliable using GitHub Actions tokens or GitHub App/PAT-based auth.

Nandini Muralidharan announces the general availability of the Browser Automation Tool in Microsoft Foundry, explaining how agents can use managed cloud browsers (via Playwright Workspaces) to automate multi-step web workflows across public sites and private apps behind an Azure virtual network, with governance and human-in-the-loop controls.

Allison explains how changes in macOS 27 and Xcode 27 break CodeQL’s traced extraction, which impacts CodeQL scanning for multiple compiled languages and blocks Swift 6.4 analysis. The post outlines what’s affected and the practical workflow changes needed to keep GitHub Actions scans running.

Michael Scovetta summarizes Microsoft and NVIDIA’s guidance on managing risk when deploying open-weight AI models, focusing on how risk depends on the model, use case, deployment architecture, and safeguards, and how to connect risk categories to evaluations and controls.

Allison announces general availability of GitHub’s open source license compliance for GitHub Enterprise Cloud, adding enterprise-wide license policies and PR checks to help teams prevent non-compliant dependencies from being merged.

Allison announces a new GitHub Code Quality billing feature that lets organizations download a CSV report of license usage, including which active committers consumed licenses, which repositories they contributed to in the last 90 days, and whether committers are unique to a repo or org.

t-dmarcovich1 introduces Fabric Policies (preview), a governance feature for Microsoft Fabric that lets tenant and capacity admins control which actions are allowed for specific users and workspaces, with centralized management and auditing.

Greg Mohler explains how GitHub built “Evergreen”, a GitHub App that automates quarterly outside-collaborator access reviews and stale-repo archival using native GitHub features like Actions, issues, webhooks, and custom properties, with a fail-secure approach and an audit trail stored directly in git history.

Allison announces general availability of GitHub’s AI Scan for pull requests, an AI-powered code scanning capability that complements CodeQL by detecting vulnerabilities in PR changes (including languages and file types CodeQL may not cover) and surfacing advisory findings with explanations and suggested fixes.

Allison announces general availability of agentic autofix for GitHub code scanning alerts, where Copilot explores the codebase, proposes and validates fixes with CodeQL, and opens a draft pull request. The post also covers where it can be used, required policies and permissions, and how billing works with AI Credits and Actions minutes.

Sandeep Sen announces the stable Azure MCP Server 3.0 release and explains what’s new for bringing Azure operational tooling into MCP-compatible AI agent workflows, including Terraform and Advisor tooling, more predictable client integration, and security-focused defaults for resource creation.

Taylor Cuilty explains how GitHub redesigned repository star history to return trends (daily counts) without exposing stargazer identities, while also cutting database load dramatically by filtering by time range before aggregating.