Browse All Posts (131)

John Edward explains why organizations should shorten the gap between Windows security update release and deployment as AI accelerates vulnerability analysis. He outlines how Windows Autopatch and hotpatching can help, alongside supported operating systems, security baselines, endpoint monitoring, and tested recovery procedures.

Qianqian Ye and John Maeda explore why sketching with code still matters when AI can generate functional output. Drawing on creative coding with p5.js and teaching at USC, they discuss how iteration builds the intuition to understand generated systems and exercise creative judgment rather than rely only on prompts.

Nick Chapsas introduces closed hierarchies, a new feature described as coming to C# 15 and .NET 11. He discusses how it addresses problems with inheritance in C# and why it can help developers and coding agents write safer code.

WSilveira explains the new .NET 10 custom-code support in Azure Logic Apps Standard and walks through migrating existing .NET 8 projects. The guide covers project dependencies, runtime settings, coordinated debugging, deployment verification, and an optional GitHub Copilot skill that assists with migration without rewriting workflows.

Allison outlines new GitHub Copilot usage metrics API fields that show whether developers act on code review feedback. Repository reports now include addressed rates, comment breakdowns, and merged pull requests without subsequent human change requests, with important distinctions around merge-day counting, bot pull requests, and report access.

Allison details new GitHub Copilot usage metrics API fields that identify missing client telemetry and IDE or extension version gaps. Enterprise and organization reports now show affected users and daily counts, with guidance on access permissions, overlapping counts, and interpreting unavailable data.

Microsoft Threat Intelligence and Microsoft Security Research detail how attackers use ARTEX agents to find exposed GitHub secrets and compromise cloud resources, sometimes within five minutes. The analysis covers application credential abuse, adaptive API requests, and practical steps for credential rotation, workload identity protection, secret scanning, and threat hunting.

puneetguptams explains how to prepare an IIS virtual machine for Reader-only Azure SRE Agent investigations. The guide covers collecting request logs, Windows events, performance counters and configuration audits in Log Analytics, then adding investigation skills and alerts while keeping server changes under your team's control.

conxu-ms outlines expanded Fabric Actions and Business Actions activities in Microsoft Fabric Data Factory pipelines. The update adds more supported Fabric operations and 25 third-party connectors, with built-in connection handling and structured configuration to link data processing, semantic model refreshes, and downstream application workflows without custom API integrations.

Jesse Houwing shows how to remove unaffiliated GitHub Enterprise Cloud members using the GitHub CLI, GraphQL, and PowerShell 7. The walkthrough includes dry runs, protected accounts, batched mutations, and error handling, while explaining why organization-level SCIM does not clean up enterprise membership and where identity-provider management is required.

sbaynes describes how Microsoft uses AI to discover, remediate, and validate Windows security vulnerabilities while retaining human review. The article explains why faster update deployment matters, how security teams can use machine-readable vulnerability information, and where Windows and Azure hotpatching can help shorten exposure windows.

Karthik Raman and Brian Celenza explain how GitHub’s new Git storage architecture separates durable storage, request handling, and repository maintenance. The design combines Azure Blob Storage with a dedicated reference consensus service, supporting thousands of concurrent writers while keeping reads fast and preserving existing Git workflows.

jovanpop-msft introduces preview regular expression functions in Microsoft Fabric Data Warehouse and the SQL analytics endpoint. The update enables T-SQL queries to extract structured values from free text, validate contact formats, standardize strings, and mask sensitive values without a separate processing step.

John Miller announces general availability of the Microsoft Foundry extension for Azure Developer CLI and walks through creating, testing, evaluating, and deploying hosted agents. The guide keeps agent and resource configuration alongside application code, explains remote builds, and shows how to reuse deployment and evaluation settings in CI/CD pipelines.

zoeyli introduces the private preview of managed identity authentication for Azure Container Registry Connected Registry synchronization. The article explains workload identity federation, repository-level RBAC and ABAC permissions, deployment prerequisites, and migration constraints, including one-way migration and an offline maintenance window.

shilmenon announces general availability of OneLake external-location support for Azure Databricks Unity Catalog on the Microsoft Fabric side. Supported managed data can reside directly in OneLake, with OneLake Security enabled by default. The article outlines setup, platform responsibilities, and the separate permissions required in Fabric and Databricks.

stevenbucher explains how Azure Policy can evaluate caller identity alongside resource configuration. The walkthrough covers blocking manual deletions, requiring stronger authentication, restricting deployment applications, and granting identity-based exemptions, followed by practical controls for rolling policies out progressively and reversing enforcement without changing policy definitions.

Mika Dumont explains how the GitHub Copilot upgrade agent helps migrate .NET applications from Windows x64 or x86 to Windows Arm64. It identifies compatibility blockers, proposes a migration plan, and updates code and project settings, while developers review changes and validate runtime behavior on matching hardware.

Ravinder Singh and Anna Hoffman discuss a Principled Technologies benchmark comparing Azure SQL Database Hyperscale with Amazon Aurora PostgreSQL I/O-Optimized. The study tests an I/O-intensive HammerDB workload across two vCore counts and multiple concurrency loads, reporting up to 52 percent higher performance and 51 percent better performance per dollar at 16 vCores.

Alym Rayani outlines Microsoft Security’s November updates, including task-scoped AI agent permissions, operating system-enforced containment, and local agent discovery. The roundup also covers SQL Server protection in Azure Government, improved visibility into Defender Experts investigations, and threat-informed initiatives for reducing security exposure.

Microsoft Threat Intelligence and Microsoft Defender Security Research Team analyze Q3 2026 email threats, including rising phishing volume, spoofed business-service domains, and changing attachment tactics. Their findings highlight risks from security overrides and detail two credential-theft campaigns, with Microsoft Defender mitigations, detections, and hunting queries for security teams.

Jan Maarten explains how GitHub now surfaces accessibility statements on repository overview pages. Maintainers can use these files to document supported environments, known barriers, contributor expectations, and reporting processes, with examples showing practical workarounds and guidance for keeping accessibility information accurate and useful.

Selim Bilgin and Silvian Goldenberg share early benchmarks for electronic design automation workloads on Azure Cobalt 200 VMs. Their analysis covers simulation, verification, and static timing performance, explains the processor and platform characteristics behind the results, and notes that the gains apply to specific internal workloads and test configurations.

Allison outlines GitHub secret scanning updates that add SpaceX as a partner and detect Starlink API secrets. The update also reduces false positives across six providers, with changes to companion-secret filtering, token context matching, and validation of token lengths and character sets.

Waldek Mastykarz examines five GitHub Copilot runs that produced working Dev Proxy CI scripts but concealed fragile workarounds and unintended network changes. He shows how reading agent trajectories reveals gaps in documentation, CLI help, defaults, and product capabilities that evaluation scores miss, and how to validate fixes.

Josef Sin explains how October 2026 Node.js vulnerabilities affect Azure Pipelines task runners, pipeline-selected tools and application runtimes. The guidance separates their update paths, describes how to verify patched executables, and covers the additional runtime updates and redeployment steps needed for .NET applications exposed to vulnerable Brotli decompression.

Mario Rodriguez and Evan Boyle explore how GitHub Copilot agents can carry software tasks beyond code generation through planning, review, security, and deployment. This GitHub Universe 2026 session examines how developers define outcomes and standards, connect context and workflows, and retain accountability while delegating work to autonomous agents.

Visual Studio Code demonstrates how to explore an unfamiliar database using the PostgreSQL extension and GitHub Copilot Chat. The video covers inspecting schemas, mapping table relationships, and finding the data an application needs, bringing database exploration into the editor.

Baiju Meswani, Emma Ning, and Tianlei Wu explain how to run Qwen3.8-27B through Foundry Local and connect it to GitHub Copilot. They cover NVIDIA hardware requirements, inference optimizations, setup steps, and the trade-offs between private, offline coding assistance and the stronger reasoning capabilities of advanced cloud models.

GitHub recounts how AI-assisted security researchers linked two unconfirmed PHP bugs to remote code execution, prompting an urgent FBI advisory. The video follows the response to leaked exploit details, including an emergency pull request for the official PHP Docker image and a discussion drawing more than 500 comments.

Emanuele Bartolesi shares technical takeaways from GitHub Universe 2026, covering Copilot model orchestration, persistent agent sessions, stacked pull requests, Azure-backed Git storage, and security previews. His recap includes CLI examples, enterprise deployment lessons, and practical limitations around billing, verification, permissions, and reported performance results.

Nick Brady reviews October’s Microsoft Foundry updates, including the managed Copilot harness preview, browser automation and hosted-agent resilience, and typed decisions with GPT-6 Luna. Alongside a Python routing example, he explains deployment constraints, checkpointing, browser safety, and SDK compatibility checks to make before upgrading.

Allison introduces GitHub’s opt-in pull request Overview preview, which brings merge readiness and available actions to the top of the page. The redesigned view also adds conversation filters, newest-first comment sorting, and an activity summary, while letting users switch back to the classic overview during the preview.

sapanpatel outlines a supervisor-and-worker architecture for multi-agent systems in Microsoft Copilot Studio. The guide covers delegation patterns, structured context passing, asynchronous orchestration, and human escalation, alongside Power Platform environment isolation and audit logging to keep specialized agents bounded and preserve context during handoffs.

Fabrizio-Ferri demonstrates how Azure Route Server route maps summarize 100 spoke network prefixes into three aggregate routes for ExpressRoute. The walkthrough covers outbound policy configuration and route verification, while explaining how independent inbound and outbound policies support filtering, path selection, and network isolation across hybrid connections.

aonelakeuser announces general availability of OneLake security support for Eventhouse external tables in Microsoft Fabric. KQL queries now enforce centrally defined table, column, and row access controls automatically, allowing users to analyze Lakehouse data through Eventhouse without copying it or creating a separate path around existing permissions.

Yassine El Ouardi and Rafia Aqil demonstrate how to bill eligible Fabric Copilot usage to a separate capacity without moving the underlying workspace. Their lab assigns users to an F2 Copilot capacity while retaining analytics workloads on F16, then checks model assistance and capacity consumption.

Allison details CodeQL 2.27.4, which improves security query accuracy, reduces false positives, and corrects CWE metadata across several languages. The release also strengthens pack publishing checks and keeps JVM diagnostics separate from machine-readable CLI output, with automatic deployment to GitHub code scanning and inclusion in GitHub Enterprise Server 3.24.

Mariyaali explains how Microsoft Fabric’s Monitor in warehouse action connects capacity spikes to warehouse query history. The generally available capability carries the selected time window into Warehouse Monitor, where CPU time, data scanned, caching indicators, and workload metadata help identify expensive queries. Skills for Fabric offers an AI-assisted correlation option.

MattH_OneLake introduces Iceberg writes through OneLake table APIs and a preview API for table and column descriptions and tags. Compatible engines can create tables, commit snapshots, and obtain short-lived storage credentials, while shared metadata gives readers consistent context across tables and internal OneLake shortcuts.