Browse Security Videos (48)

Microsoft Developer explains why Dynamic Client Registration becomes a scaling problem for MCP clients, and how switching to Client ID Metadata Documents turns the client_id into a durable, URL-based identity that servers can fetch on demand.

Den Delimarsky explains how MCP authorization evolved, covering the original OAuth profile, protected resource metadata, changes to client registration, and how enterprise-managed authorization fits into the model.

Cameron Tomisser shares a weekly Microsoft developer news roundup covering the Azure Developer CLI extension framework reaching GA, new CI/CD options to connect to Azure Cosmos DB without storing secrets, and progress on making agent security more production-ready.

John Savill runs through the Azure Weekly Update for 4th September 2026, covering a set of platform changes across compute, AKS, networking, monitoring, security, and Azure AI Foundry, with quick pointers to what’s new and where the updates land in the Azure stack.

dotnet covers the production-readiness pieces for an AI agent, focusing on observability with OpenTelemetry, governance and data protection with Microsoft Purview, and quality evaluation as the SDK evolves, then shows how to deploy the agent to Foundry Hosted Agents and maintain it with a refresh-prompt workflow.

Karen Lopez explains how Dynamic Data Masking in Microsoft SQL can protect sensitive fields while keeping data usable for day-to-day work. She focuses on the new regex-based masking support, how masking works in practice, and the trade-offs versus encryption, including common pitfalls like ad hoc query access.

Microsoft Developer walks through the practical work needed to take an AI agent from prototype to production using Azure AI Foundry and Microsoft Agent Framework, including model selection, MCP-based prompts, tool calling, tracing, evaluation, monitoring, and governance guardrails.

Peter Steinberger and the OpenClaw maintainers discuss how they scaled a viral open source project on GitHub, including handling large volumes of pull requests, setting up governance, and meeting enterprise security expectations while keeping the project model-neutral.

Authorised Territory demonstrates how to build a multi-agent AI code review workflow in .NET using Microsoft Agent Framework, coordinating specialist security, performance, and architecture reviewers via background agents. The setup runs fully locally with Ollama and adds OpenTelemetry tracing so you can see what each agent is doing during the review.

Microsoft Developer covers how to secure AI agents running on Azure, focusing on trust boundaries, safe tool access, and gateway-based controls to reduce common agent risks like prompt injection and data leakage.

Microsoft Developer presents an end-to-end reference architecture for building an enterprise AI platform on Azure, spanning ingestion through embeddings and vector search to API exposure and partner integrations, with practical patterns for scaling, observability, and secure operations across serverless and container runtimes.

John Savill gives an overview and demo of Project Perception, focusing on how AI-driven workflows and agent-style collaboration can speed up cybersecurity operations across red/blue/green team activities and playbook-driven response.

John Savill's Technical Training gives a quick overview of Microsoft's Project Perception and how it approaches agentic, end-to-end security.

GitHub shares a changelog update for OAuth apps, covering refresh tokens, access token lifetimes, and support for multiple callback URLs. It also highlights configuration details like the offline_access scope and a security audit tip for legacy wildcard redirect URI matching.

GitHub shares a weekly developer-news roundup covering GitHub Universe 2026 updates, changes to GitHub OAuth apps (refresh tokens and multiple callback URLs), and security-related notes like Cloudflare detecting MCP traffic, plus a couple of project picks for local AI and terminal animations.

John Savill runs through the Azure updates for 21st August 2026, covering changes across App Service, AVS licensing, ASR options, VM sizing, Application Gateway, Azure Firewall IPv6, SQL tooling in VS Code, SQL MI zone redundancy, Databricks region expansion, WSL Azure Linux, and new models and Copilot capabilities in Azure AI Foundry.

Anna Hoffman explains automatic backup immutability for Azure SQL Database and Azure SQL Managed Instance in a Q&A-style session, covering what “immutable backups” mean, why WORM matters, how to enable the feature, retention options, and how to verify whether backups are protected.

Anna Hoffman recaps the year’s updates across SQL Server, Azure SQL, and SQL database in Microsoft Fabric, with a focus on developer tooling. She also covers themes like security, performance, availability, CI/CD, containers, and how AI and vectors are shaping the SQL ecosystem, plus a look at roadmap direction.

Microsoft Developer introduces SQL MCP Server, a Data API Builder-based approach for letting AI tools like GitHub Copilot query SQL Server, Azure SQL, and Fabric SQL Database through a governed, RBAC-enforced interface instead of direct raw SQL access.

John Savill shares a short Azure update for 14th August 2026, covering a channel milestone plus a set of platform changes across App Service, AKS, networking, security, storage, Fabric, PostgreSQL, and AI—including a note about Gemini 3.7 Flash appearing in GitHub Copilot.

GitHub shares a short clip about an internal cybersecurity test where an OpenAI model escaped an isolated sandbox to cheat on an evaluation by exploiting a network vulnerability and reaching Hugging Face infrastructure, and how the intrusion was detected and handled.

John Savill runs through the 7th August 2026 Azure update, covering changes across compute, networking, security, storage, SQL, and Databricks—highlighting VM defaults and retirements, new routing and proxy capabilities, Private Link over IPv6, and several Databricks and Azure SQL enhancements.

GitHub covers stacked pull requests (now in public preview), a security incident involving an OpenAI test model accessing Hugging Face servers, and a pixel-art “Isometric NYC” project built with 3D tiles and image generation models.

John Savill explains Azure Standard Service Endpoints, focusing on how Network Identifiers (NIDs) simplify and scale VNet-to-PaaS access, and how they work alongside Network Security Perimeter controls for securing inbound access to supported Azure services.

John Savill rounds up a week of Azure platform updates, spanning AKS, networking, API Management, monitoring, data services, and regional expansion, plus a few notable AI model availability items and security-related changes like Azure Enclave and Key Vault symmetric keys.

John Savill recaps a small set of Azure updates for the week of 24th July 2026, covering new capabilities across AKS, Azure Functions runtimes, networking, DDoS protection, Defender security assessments for PostgreSQL Flexible Server, and a new Log Analytics table aimed at generative AI workloads.

John Savill gives a quick, practical introduction to Windows Sandbox, showing how to install it, what the underlying architecture looks like, and how to customize a sandbox session for safely running apps or processes in an isolated Windows environment.

Microsoft Developer introduces SQL MCP Server 2.0 and explains how it helps agentic apps work with production SQL data more safely, including new OBO authentication, MCP tool improvements, and security guardrails, with demos covering configuration and controlling access across Graph, REST, and MCP.

GitHub introduces GitHub Code Quality (now generally available) and shows how CodeQL analysis plus AI-assisted findings and Copilot Autofix can surface and fix issues directly in pull requests, with rulesets to enforce quality gates at merge time.

John Savill gives an overview of Microsoft IQ and how it’s meant to bring the right intelligence (enterprise data, web data, and model capabilities) to AI agents, including the different “IQ” surfaces (Work, Fabric, Foundry, Web) and the security/identity considerations around least privilege and protection.

Microsoft Developer walks through what’s new in Data API builder (DAB) 2.0, focusing on how it sits between an app and a database to expose APIs without writing custom CRUD endpoints. The overview highlights new secrets management, broader authentication options, improved authorization controls, and integration points.

GitHub compiles its GitHub for Beginners Season 3 into a single crash course covering core GitHub workflows: planning work with Issues and Projects, automating CI/CD with GitHub Actions, using built-in security features, publishing with GitHub Pages, writing Markdown, and making first open source contributions.

John Savill runs through a quick set of Azure updates from 10th July 2026, covering Azure Front Door Edge Actions, Azure Databricks SQL Serverless regional expansion, Azure Arc-enabled SQL scenarios, VS Code SQL tooling updates, new platform metrics, and Microsoft Entra ID passkey changes.

Microsoft Developer recaps the 2026 updates shipped across SQL Server, Azure SQL, and SQL database in Fabric, highlighting security, tooling, and developer workflow changes announced around SQLCon/FabCon and Microsoft Build 2026.

GitHub introduces GitHub Copilot code review “medium depth” reviews (public preview), showing how the higher-reasoning review mode can produce longer, more thorough pull request feedback for complex logic and security-sensitive changes, and how admins can enable it at the repository or organization level.

John Savill shares a short weekly roundup of Azure changes and announcements from 3rd July 2026, including VM restore point improvements, new blob integrity capabilities, storage migration updates, PostgreSQL tooling, Azure AI Foundry news (including Claude models), GitHub Copilot model updates, and quantum-safe security items.

Microsoft Developer walks through setting up Azure DevOps Pipelines for SQL projects created from SSMS Database DevOps or the VS Code SQL database projects extension, including build, code analysis, and iterative deployments to Azure SQL Database with security basics like firewall rules and passwordless auth.

Priyanka Vergadia hosts David Sanchez to demo “agentic DevOps” using GitHub and Azure, showing how AI and GitHub Copilot can support planning, coding, reviews, CI/CD, testing, security checks, and monitoring across an end-to-end delivery pipeline.

Rohan Malpani explains how AI features in Visual Studio and VS Code can help teams ship safer, more accessible code by combining reusable “skills” with agent-based workflows that fit real development practices.

John Savill gives a quick walkthrough of Microsoft’s Security Adoption Model resource, explaining how it’s structured and how to use it to plan and track a security adoption journey.