Browse Security Videos (61)

John Savill recaps a small set of Azure updates for the week of 24th July 2026, covering new capabilities across AKS, Azure Functions runtimes, networking, DDoS protection, Defender security assessments for PostgreSQL Flexible Server, and a new Log Analytics table aimed at generative AI workloads.

John Savill gives a quick, practical introduction to Windows Sandbox, showing how to install it, what the underlying architecture looks like, and how to customize a sandbox session for safely running apps or processes in an isolated Windows environment.

Microsoft Developer introduces SQL MCP Server 2.0 and explains how it helps agentic apps work with production SQL data more safely, including new OBO authentication, MCP tool improvements, and security guardrails, with demos covering configuration and controlling access across Graph, REST, and MCP.

GitHub introduces GitHub Code Quality (now generally available) and shows how CodeQL analysis plus AI-assisted findings and Copilot Autofix can surface and fix issues directly in pull requests, with rulesets to enforce quality gates at merge time.

John Savill gives an overview of Microsoft IQ and how it’s meant to bring the right intelligence (enterprise data, web data, and model capabilities) to AI agents, including the different “IQ” surfaces (Work, Fabric, Foundry, Web) and the security/identity considerations around least privilege and protection.

Microsoft Developer walks through what’s new in Data API builder (DAB) 2.0, focusing on how it sits between an app and a database to expose APIs without writing custom CRUD endpoints. The overview highlights new secrets management, broader authentication options, improved authorization controls, and integration points.

GitHub compiles its GitHub for Beginners Season 3 into a single crash course covering core GitHub workflows: planning work with Issues and Projects, automating CI/CD with GitHub Actions, using built-in security features, publishing with GitHub Pages, writing Markdown, and making first open source contributions.

John Savill runs through a quick set of Azure updates from 10th July 2026, covering Azure Front Door Edge Actions, Azure Databricks SQL Serverless regional expansion, Azure Arc-enabled SQL scenarios, VS Code SQL tooling updates, new platform metrics, and Microsoft Entra ID passkey changes.

Microsoft Developer recaps the 2026 updates shipped across SQL Server, Azure SQL, and SQL database in Fabric, highlighting security, tooling, and developer workflow changes announced around SQLCon/FabCon and Microsoft Build 2026.

GitHub introduces GitHub Copilot code review “medium depth” reviews (public preview), showing how the higher-reasoning review mode can produce longer, more thorough pull request feedback for complex logic and security-sensitive changes, and how admins can enable it at the repository or organization level.

John Savill shares a short weekly roundup of Azure changes and announcements from 3rd July 2026, including VM restore point improvements, new blob integrity capabilities, storage migration updates, PostgreSQL tooling, Azure AI Foundry news (including Claude models), GitHub Copilot model updates, and quantum-safe security items.

Microsoft Developer walks through setting up Azure DevOps Pipelines for SQL projects created from SSMS Database DevOps or the VS Code SQL database projects extension, including build, code analysis, and iterative deployments to Azure SQL Database with security basics like firewall rules and passwordless auth.

Priyanka Vergadia hosts David Sanchez to demo “agentic DevOps” using GitHub and Azure, showing how AI and GitHub Copilot can support planning, coding, reviews, CI/CD, testing, security checks, and monitoring across an end-to-end delivery pipeline.

Rohan Malpani explains how AI features in Visual Studio and VS Code can help teams ship safer, more accessible code by combining reusable “skills” with agent-based workflows that fit real development practices.

John Savill gives a quick walkthrough of Microsoft’s Security Adoption Model resource, explaining how it’s structured and how to use it to plan and track a security adoption journey.

Sakshi Nasha explains how to secure PostgreSQL by addressing common blind spots that show up when moving from development to production, including role design, schema isolation, SQL injection risks, and safer use of functions and extensions.

Microsoft Developer shares a 5-minute trailer previewing Livestream 4 of POSETTE 2026, highlighting 11 PostgreSQL talks including partitioning, SQL/PGQ property graphs, performance work, analytics with pg_duckdb on Azure Database for PostgreSQL, replication and logical decoding, security practices, PostgreSQL 18 vacuum improvements, Citus scaling, and LISTEN/NOTIFY pitfalls.

John Savill walks through recent identity and authentication changes for Azure Files, focusing on Microsoft Entra ID–integrated authentication scenarios including managed identity access, cloud-only identity access, and macOS Platform SSO (PSSO) access.

Murat Tuncer walks through how PostgreSQL authentication evolved from early trust-based local setups to modern certificate and token-based approaches, explaining why each method exists, what trade-offs it made, and the common mistakes teams still run into when choosing auth for production deployments.

Adam Wolk explains how fuzzing can uncover edge-case bugs in PostgreSQL, focusing on the libpq client library and the networking protocol surface. He covers why fuzzing works, what makes a good target in Postgres, and practical steps for building harnesses and mutating protocol inputs.

Andrew Ruffin explains how to choose Azure infrastructure for PostgreSQL workloads, focusing on VM family selection, benchmarking results, and cost/performance trade-offs. The talk compares IaaS vs PaaS deployment choices and highlights hardware features and security options that can improve Postgres performance while controlling cloud spend.

Taiob Ali compares PostgreSQL and SQL Server security models, focusing on how each platform handles authentication vs. authorization, roles, and permissions, and what those differences mean for building secure, maintainable database access patterns.

Microsoft Developer shares a 4-minute trailer previewing Livestream 1 of POSETTE 2026, highlighting 11 PostgreSQL-focused talks that include Microsoft’s Postgres roadmap, performance tuning, AI tooling, Azure infrastructure choices, and a comparison of PostgreSQL vs. SQL Server security models.

John Savill rounds up a week of Azure platform changes and retirements, spanning compute/storage updates, database and identity improvements, monitoring changes, and several developer-facing AI items including GitHub Copilot Agent Mode in SSMS and Azure AI Foundry agent licensing and model availability.

John Savill gives a fast-paced rundown of key announcements from Microsoft Build 2026, highlighting notable platform updates across Azure, AI, and identity/security topics such as Entra and passkeys.

John Savill explains how Microsoft Entra ID’s passkey registration campaign works, why passkeys are useful, and how the campaign “nudges” users to register. He also covers the policy prerequisites and the key behaviors that determine when users see registration prompts.

John Savill's Technical Training gives a quick overview of a passkey registration campaign in Microsoft Entra ID, focusing on driving user enrollment for passwordless, phishing-resistant authentication.

Authorised Territory demonstrates how to build a .NET Model Context Protocol (MCP) server over HTTP that scans for unsafe tools on startup, using the Microsoft.AgentGovernance.Extensions.ModelContextProtocol NuGet package, and pairs it with a simple .NET console client that connects to the server.

John Savill runs through a Build-special weekly Azure update, covering a wide set of platform announcements across compute, containers, integration, monitoring, databases, Fabric/Databricks, and Azure AI Foundry—plus security-focused items like confidential computing and Purview agent integrations.

Jeff Hollan and Lee Stott explain how hosted agents in Microsoft Foundry help teams move from local agent prototypes to production-grade AI systems, with a focus on identity, isolation, evaluation, and lifecycle management so developers can deploy secure, scalable agents with clearer operational boundaries.

Amanda Silver and Marco Casalaina explain how to build context-aware AI agents by connecting them to enterprise knowledge, business data, and work signals using Foundry IQ, Fabric IQ, and Work IQ, with an emphasis on orchestration, governance, and operating within trusted boundaries.

Mark Russinovich and Ion Stoica discuss how AI platforms need to evolve for agentic, multimodal, globally distributed workloads, covering infrastructure fundamentals, training and real-time serving architectures, and why open source, security, and governance are becoming core platform requirements.

Mark Russinovich tours recent Azure infrastructure and architecture innovations, covering high-performance networking, serverless building blocks, and security capabilities aimed at running modern AI workloads across cloud, on-premises, and edge environments.

swyx (Shawn Wang) argues that as AI agents start shipping code, “agent supervision” becomes a core senior engineering skill: scoping agent work, setting constraints, designing checkpoints, and reviewing outputs for correctness and security.

Pablo Castro presents a Microsoft Build 2026 deep dive into Foundry IQ, Microsoft’s context engineering platform for building agents that can retrieve enterprise knowledge using agentic RAG. The session covers Foundry IQ’s architecture, connecting new knowledge sources, ingestion pipeline customization, retrieval APIs, and performance/evaluation improvements.

Neta Haiby explains how to take AI agents to production with security, governance, and observability using the Agent 365 SDK and Microsoft Purview SDK, including practical examples for runtime visibility, identity-aware access control, and policy-based lifecycle governance.

Sarah Young introduces MDASH from Microsoft Build 2026 and focuses on how developers can build security into their code from the start, framing secure-by-design practices and developer-centric security workflows.

Microsoft Developer introduces Project Lobster and the early Microsoft Scout desktop experience, focusing on always-on AI agents that can coordinate work, surface risks earlier, and keep tasks moving with less prompting. The video also outlines how Frontier customers can access the experimental release and what enrollment and policy prerequisites are required.

Tina Schuchman and Jeff Hollan walk through the end-to-end lifecycle for building production-grade AI agents using Foundry Agent Service and Microsoft Agent Framework, covering local prototyping through hosted deployment, with identity, secure networking, evaluations, and operational lifecycle management, plus how GitHub Copilot fits into the workflow.

Erika Heidi shares a practical checklist for hardening GitHub Actions workflows against software supply chain attacks, focusing on secrets exposure, token scope, protected branches/tags, dependency risk reduction, and concrete steps like pinning by digest and avoiding long-lived credentials.