Browse Security Videos (38)

Visual Studio Code demonstrates how to bring PostgreSQL workflows into the editor using Microsoft’s PostgreSQL extension. Learn to install the extension, connect to a PostgreSQL database on Azure with Microsoft Entra ID, save connection profiles, and explore database objects without switching tools.

Microsoft Developer demonstrates how to protect an AI agent from malicious user input and instructions hidden in tool responses. The walkthrough configures Microsoft Foundry guardrails and Prompt Shields, replays both attacks, and uses traces to show where protections intervene before the agent acts.

John Savill reviews this week's Azure and AI updates, including networking, backup, monitoring, storage, and identity changes. Topics include Traffic Manager integration with Azure DNS, keyless TLS, Cosmos DB key rotation, Azure Databricks private networking, and Copilot Studio agent identity.

GitHub shares a September platform update roundup covering Project HydraFusion’s expansion to VS Code and the GitHub Copilot app, plus new workflow features like local sandboxing GA, automated PR approvals that can satisfy merge gates, and bulk autofix for CodeQL findings.

David Pless explains how Azure SQL Database Hyperscale’s cloud-native architecture lets teams scale compute, storage, and read capacity independently, and how features like serverless compute, elastic pools, named replicas, and snapshot-based backups map to different workload and availability needs.

Microsoft Developer demonstrates an end-to-end workflow for building and shipping a hosted AI agent from the terminal using GitHub Copilot CLI and Microsoft Foundry, including planning, resource creation, model selection, evaluation-driven improvements, and a secure Azure Functions proxy to connect the agent to a website chat experience.

John Savill runs through the Azure Weekly Update for 9th October 2026, covering a set of platform changes and retirements across AKS, App Service, developer environments, networking/WAF, API Management, PostgreSQL, SQL Server, and Fabric/OneLake, plus a security-focused note on Always Encrypted with Intel SGX enclaves.

GitHub introduces gh-secure, a one-command tool from the GitHub Security Lab aimed at improving basic repository security hygiene by helping prevent secrets from being leaked into public code, with usage via the Copilot app, Copilot CLI, or GitHub CLI.

John Savill explains Azure Container Apps (ACA) Sandboxes, focusing on how they provide isolated, secure hosting for agent workloads. He covers the MicroVM-based model, egress controls via proxy and rules, lifecycle and pricing considerations, how sandbox groups work, and operational topics like managing instances and logging.

Bob Ward explains how Microsoft SQL (SQL Server, Azure SQL, and SQL DB in Fabric) can be used for chat completion and agentic RAG scenarios, including making REST calls to models, building prompts in SQL, and adding security controls like immutable logging, content moderation, and prompt-injection protection.

Cameron Tomisser shares Episode 6 of The Upload, covering .NET 11 performance improvements, Azure VM Scale Sets resiliency updates, Microsoft’s multicloud database SDK, critical .NET security updates, and new production-ready capabilities in Microsoft Foundry.

Authorised Territory shows how to stop passwords, API keys, and other secrets from being sent to an LLM when building AI agents with the Microsoft Agent Framework in .NET and Ollama, by adding middleware that detects and redacts sensitive values before model calls.

GitHub introduces CVE Lite CLI, a local dependency vulnerability scanner for JavaScript and TypeScript projects, highlighting how it classifies direct vs transitive issues, validates fix versions with OSV, and outputs exact upgrade commands across npm, pnpm, Yarn, and Bun.

Microsoft Developer explains why Dynamic Client Registration becomes a scaling problem for MCP clients, and how switching to Client ID Metadata Documents turns the client_id into a durable, URL-based identity that servers can fetch on demand.

Den Delimarsky explains how MCP authorization evolved, covering the original OAuth profile, protected resource metadata, changes to client registration, and how enterprise-managed authorization fits into the model.

Cameron Tomisser shares a weekly Microsoft developer news roundup covering the Azure Developer CLI extension framework reaching GA, new CI/CD options to connect to Azure Cosmos DB without storing secrets, and progress on making agent security more production-ready.

John Savill runs through the Azure Weekly Update for 4th September 2026, covering a set of platform changes across compute, AKS, networking, monitoring, security, and Azure AI Foundry, with quick pointers to what’s new and where the updates land in the Azure stack.

dotnet covers the production-readiness pieces for an AI agent, focusing on observability with OpenTelemetry, governance and data protection with Microsoft Purview, and quality evaluation as the SDK evolves, then shows how to deploy the agent to Foundry Hosted Agents and maintain it with a refresh-prompt workflow.

Karen Lopez explains how Dynamic Data Masking in Microsoft SQL can protect sensitive fields while keeping data usable for day-to-day work. She focuses on the new regex-based masking support, how masking works in practice, and the trade-offs versus encryption, including common pitfalls like ad hoc query access.

Microsoft Developer walks through the practical work needed to take an AI agent from prototype to production using Azure AI Foundry and Microsoft Agent Framework, including model selection, MCP-based prompts, tool calling, tracing, evaluation, monitoring, and governance guardrails.

Peter Steinberger and the OpenClaw maintainers discuss how they scaled a viral open source project on GitHub, including handling large volumes of pull requests, setting up governance, and meeting enterprise security expectations while keeping the project model-neutral.

Authorised Territory demonstrates how to build a multi-agent AI code review workflow in .NET using Microsoft Agent Framework, coordinating specialist security, performance, and architecture reviewers via background agents. The setup runs fully locally with Ollama and adds OpenTelemetry tracing so you can see what each agent is doing during the review.

Microsoft Developer covers how to secure AI agents running on Azure, focusing on trust boundaries, safe tool access, and gateway-based controls to reduce common agent risks like prompt injection and data leakage.

Microsoft Developer presents an end-to-end reference architecture for building an enterprise AI platform on Azure, spanning ingestion through embeddings and vector search to API exposure and partner integrations, with practical patterns for scaling, observability, and secure operations across serverless and container runtimes.

John Savill gives an overview and demo of Project Perception, focusing on how AI-driven workflows and agent-style collaboration can speed up cybersecurity operations across red/blue/green team activities and playbook-driven response.

John Savill's Technical Training gives a quick overview of Microsoft's Project Perception and how it approaches agentic, end-to-end security.

GitHub shares a changelog update for OAuth apps, covering refresh tokens, access token lifetimes, and support for multiple callback URLs. It also highlights configuration details like the offline_access scope and a security audit tip for legacy wildcard redirect URI matching.

GitHub shares a weekly developer-news roundup covering GitHub Universe 2026 updates, changes to GitHub OAuth apps (refresh tokens and multiple callback URLs), and security-related notes like Cloudflare detecting MCP traffic, plus a couple of project picks for local AI and terminal animations.

John Savill runs through the Azure updates for 21st August 2026, covering changes across App Service, AVS licensing, ASR options, VM sizing, Application Gateway, Azure Firewall IPv6, SQL tooling in VS Code, SQL MI zone redundancy, Databricks region expansion, WSL Azure Linux, and new models and Copilot capabilities in Azure AI Foundry.

Anna Hoffman explains automatic backup immutability for Azure SQL Database and Azure SQL Managed Instance in a Q&A-style session, covering what “immutable backups” mean, why WORM matters, how to enable the feature, retention options, and how to verify whether backups are protected.

Anna Hoffman recaps the year’s updates across SQL Server, Azure SQL, and SQL database in Microsoft Fabric, with a focus on developer tooling. She also covers themes like security, performance, availability, CI/CD, containers, and how AI and vectors are shaping the SQL ecosystem, plus a look at roadmap direction.

Microsoft Developer introduces SQL MCP Server, a Data API Builder-based approach for letting AI tools like GitHub Copilot query SQL Server, Azure SQL, and Fabric SQL Database through a governed, RBAC-enforced interface instead of direct raw SQL access.

John Savill shares a short Azure update for 14th August 2026, covering a channel milestone plus a set of platform changes across App Service, AKS, networking, security, storage, Fabric, PostgreSQL, and AI—including a note about Gemini 3.7 Flash appearing in GitHub Copilot.

GitHub shares a short clip about an internal cybersecurity test where an OpenAI model escaped an isolated sandbox to cheat on an evaluation by exploiting a network vulnerability and reaching Hugging Face infrastructure, and how the intrusion was detected and handled.

John Savill runs through the 7th August 2026 Azure update, covering changes across compute, networking, security, storage, SQL, and Databricks—highlighting VM defaults and retirements, new routing and proxy capabilities, Private Link over IPv6, and several Databricks and Azure SQL enhancements.

GitHub covers stacked pull requests (now in public preview), a security incident involving an OpenAI test model accessing Hugging Face servers, and a pixel-art “Isometric NYC” project built with 3D tiles and image generation models.

John Savill explains Azure Standard Service Endpoints, focusing on how Network Identifiers (NIDs) simplify and scale VNet-to-PaaS access, and how they work alongside Network Security Perimeter controls for securing inbound access to supported Azure services.

John Savill rounds up a week of Azure platform updates, spanning AKS, networking, API Management, monitoring, data services, and regional expansion, plus a few notable AI model availability items and security-related changes like Azure Enclave and Key Vault symmetric keys.