Browse All Posts (145)

Beatris Mendez Gandica demonstrates how GitHub Copilot CLI hooks can turn an Octolamp into a physical agent-status indicator. The session connects lifecycle events to the WLED API, covers network fallbacks and hook race conditions, and shows how to adapt the approach for other devices.

Visual Studio Code demonstrates how to investigate PostgreSQL performance issues using performance dashboards and Azure Advisor recommendations. The video covers identifying problems, reviewing possible fixes, and verifying results from a VS Code workflow.

John Savill explains Conditional Access policy plans as a way to avoid repeating common attributes across policies. The overview compares them with regular Conditional Access policies, then covers policy plans, rules, and migration for readers working with Microsoft Entra access controls.

Martin Woodward explains how the GitHub Universe conference badge becomes a handheld gaming system. The clip covers its capacitive touch buttons and how repository instructions help GitHub Copilot work with MicroPython and serial connections to generate, test, and deploy an app directly to the badge from a single prompt.

Learn Microsoft AI explains hooks in Microsoft Copilot Studio, focusing on how they extend agent capabilities and customize behavior. The video covers when to use hooks, practical scenarios, and tips for building more flexible AI agent experiences.

GPT-6.1 Terra is generally available in Microsoft Foundry with text and image inputs and up to one million input tokens, while MAI-Image-2.6 adds generally available multi-reference editing and fal begins rolling out video models in public preview. Foundry's Azure Developer CLI extension reaches general availability at version 1.0, letting developers reuse azure.yaml for local development and CI/CD and deploy source through remote builds without building containers locally. Microsoft Execution Containers and Defender's local AI-agent discovery are now generally available, alongside a report showing an AI agent move from searching GitHub for exposed secrets to exfiltrating Azure Key Vault data in five minutes. Multi-LoRA serving previews let compatible adapters share deployment capacity, and direct SIP support connects Foundry voice agents to existing telephony without a customer-managed audio bridge. The week's deployment and security guidance emphasizes controls outside the model, inc

@GitHub coding tasks are now generally available in Slack and Microsoft Teams, letting developers turn conversations into issues, code changes, and pull requests, with Teams Canvas providing shared task visibility. Copilot now supports local and isolated cloud tasks in JetBrains Air, while a public preview brings it into Xcode's built-in coding assistant starting with Xcode 27.3 beta. Code review gains REST and GraphQL configuration controls, multi-model balanced reviews, and outcome reporting, while usage reports add custom-model breakdowns, chat and agent adoption data, and indicators of missing telemetry. Together, these updates extend Copilot across team conversations and development tools while giving organizations more control over reviews and better visibility into usage and results.

Foundry expanded public-preview fine-tuning support to additional models, including reinforcement-only support for MAI-Code-1.1-Flash, and introduced Multi-LoRA Managed Compute so compatible adapters can share base-model weights and GPU capacity, with hourly hardware charges that include idle time. OneLake table APIs now support native Iceberg writes, while OneLake storage support for Azure Databricks and Eventhouse enforcement of OneLake permissions reached general availability, broadening interoperability without removing access controls. Fabric's preview IQ Share enables read-only cross-tenant sharing without copying data, and new endpoint discovery and remote Model Context Protocol tools help agents find and query Fabric data. Copilot can now generate editable Real-Time Dashboards in preview, though teams still need to validate generated queries and measures before operational use. Together, these updates connect model customization and agent workflows with governed data access, wh

Microsoft observed an AI agent progress from finding exposed GitHub secrets to exfiltrating Azure Key Vault data in five minutes, reinforcing the need to revoke compromised credentials and investigate their access across tenants. Microsoft Execution Containers reached general availability with least-privilege boundaries for agent processes, while Dynamic Permissions and Dynamic Conditional Access scope authority to tasks and can require human approval. GitHub postponed default blocking of public-repository pull_request_target workflows to December 2, and CodeQL updates expanded language support while introducing changes that custom-query maintainers should review. Runtime guidance warns that updating Azure Pipelines agents does not necessarily patch embedded runners, cached Node.js versions, containers, or deployed applications, while Windows telemetry exposes delays in security-update deployment. The week's recurring lesson is to verify enforcement across execution paths, identities,

Azure DevOps security guidance warns that patching Azure Pipelines requires checking embedded Node.js runners, cached versions, containers and deployed applications separately, and identifies .NET runtime fixes for the Brotli advisory. Microsoft added Agent Framework builder skills for .NET and Python, while NuGet-delivered skills let package authors bundle coding-agent instructions with dependencies, introducing package Markdown as another security consideration. C# 15 previews introduce closed hierarchies and union types, and Logic Apps Standard custom code now supports .NET 10, with existing .NET 8 projects requiring explicit configuration migration. Across these developments, installing an update or agent skill is only part of adoption: teams still need to verify deployed runtimes, assess instructions and test application behavior.

Microsoft observed an AI agent turn exposed application credentials into Azure Key Vault data exfiltration in five minutes, underscoring the need to revoke or rotate leaked credentials rather than merely remove their public disclosure. GPT-6.1 Terra reached general availability in Microsoft Foundry with text and image inputs and up to one million input tokens, while Foundry's Azure Developer CLI extension reached version 1.0 for shared local and CI/CD deployment definitions. Azure SQL Database watcher will retire on April 30, 2027, with resource creation and editing blocked starting November 9, 2026, making replacement monitoring and cleanup of chargeable resources immediate planning tasks. Azure SQL also gained agent-free migration for Arc-registered SQL Server instances and a generally available Modern Query Editor, while Service Bus Premium added generally available Geo-Replication for partitioned namespaces and Azure Files previewed additional recovery options. Across these updates

Microsoft Foundry's Azure Developer CLI extension is generally available at version 1.0, letting teams reuse azure.yaml deployment definitions locally and in continuous integration and delivery pipelines, with remote builds that need no local container build. GitHub postponed default blocking of public-repository pull_request_target events to December 2, with November 9 and 16 brownouts giving maintainers an immediate reason to review workflows that can expose secrets to untrusted code. Azure SQL database watcher will block resource creation and configuration edits on November 9 ahead of retirement, while Database Hub adds public-preview alerts against managed telemetry without adding database query load. Azure Pipelines security guidance requires separate patch checks for selected Node.js tools, embedded agent runners, containers, and deployed applications, while Microsoft observed an agent-assisted attack reach Azure Key Vault data within five minutes of searching for exposed credent

Jenny Patchen presents how Levi Strauss & Co. built a software development lifecycle around seventeen specialized GitHub Copilot agents. The session covers enterprise architecture, MCP connections, automated reviews and testing, security checks, and deployment, with human approval gates retained throughout the process.

Martin Woodward discusses how GitHub Copilot can help developers restart hobby projects when boilerplate feels like a barrier. His examples include running local models on a Raspberry Pi and tracking license plates in his driveway, with advice to timebox experiments and prioritize getting something working over perfection.

Jiri Binko proposes an illustrative Azure architecture that separates AI recommendations from authorized actions and governed measurement. Using housing repairs as the scenario, he explains tool boundaries, durable execution, privacy controls, Fabric analytics, and staged pilots, while stressing that the pattern is not a verified production reference architecture.

Pierce Boggan, Burke Holland, James Montemagno, Julia Kasper, and Katie Savage build a shared project with GitHub Copilot using different tools and workflows. This GitHub Universe 2026 session covers AI agents, carrying context between tasks, and working beyond the editor while balancing speed, cost, and control.

Carlin Cherry explains how to prioritize Dependabot vulnerability alerts beyond severity alone. The short covers whether a dependency is used, whether an application can reach vulnerable code, and whether that code is exposed in production, combining these signals with severity and EPSS to guide remediation decisions.

Microsoft Threat Intelligence examines how Storm-3358 uses ARTEX to attack financial organizations, exploit web applications, and deploy remote access trojans. The report outlines behavioral signals, deception techniques, identity protections, and hunting queries for Microsoft Defender XDR and Microsoft Sentinel to help defenders investigate related activity.

Allison outlines updates to GitHub Copilot code review, including API-based settings management across enterprises, organizations, and repositories. The changes also add attribution and source metadata, compact review overviews, AI credit visibility, and reliability fixes. Administrators should note differences in token and GitHub App support across settings endpoints.

Allison explains how the GitHub Copilot impact dashboard now tracks Copilot Chat and VS Code Agents window engagement across nine experiences. Enterprise and organization reports include the same additions, while the renamed Chat-first users cohort, unchanged adoption phases, and reporting rules clarify how to interpret the metrics.

Nick Liffen outlines how GitHub Copilot can support planning, implementation, verification, and production investigation beyond code generation. The guide covers shared project context, parallel tasks, focused pull requests, security checks, and operational evidence, while keeping developers responsible for approving plans, evaluating changes, and deciding what needs to happen next.

Allison summarizes this week’s GitHub Copilot updates, including availability in JetBrains Air and a public preview in Xcode’s built-in coding assistant. Other changes cover pull request merging, conversation context limits, CLI settings, session organization, and VS Code tools for reviewing agent work and scheduling local tasks.

JorgeGX walks through connecting Microsoft Foundry image and video models to ComfyUI with two custom Python nodes. The tutorial covers model deployment, keyless Microsoft Entra ID authentication, and a workflow that generates a keyframe and animates it into a five-second shot, with generation running remotely rather than on a local GPU.

Allison announces general availability of @GitHub in Slack and Teams, letting developers investigate bugs, create issues, implement changes, and open pull requests from conversations. Canvas in Teams supports collaborative review of plans, changes, and previews, while additional updates simplify repository selection and improve conversation reliability and attribution.

Microsoft Developer summarizes this week’s updates: a public preview of Microsoft’s Copilot harness in Foundry Agent Service, authentication improvements in the October Azure SDK release, and a stable Cosmos DB client for Rust. The video also covers PIX crash postmortems for Windows games and the upcoming .NET Conf.

Martin Woodward demonstrates a custom 3D-printed pumpkin that monitors GitHub Actions credits. Powered by a microcontroller and addressable LEDs, it changes color as the account quota drains and animates when credits renew. This GitHub Podcast clip shows a playful hardware alert, with open-source code available on GitHub.

geometry outlines a practical reliability checklist for AI agents built with Microsoft Foundry. The article covers agent instructions, external tool contracts, evaluation datasets, Azure Application Insights monitoring, and security controls, using an order-support example to explain how teams can test failures and review changes before production deployment.

John Savill reviews this week's Azure updates across disaster recovery, networking, storage, databases, and AI. Topics include Service Bus geo-replication, post-quantum TLS key exchange, Application Gateway for Containers capabilities, SQL backup immutability, PostgreSQL networking changes, and Kimi K3.1 Pro in Foundry.

kedikala explains how to improve production agents in Microsoft Foundry using continuous evaluation, reviewed trace datasets, and Agent Optimizer. The workflow separates optimization from release testing, gates candidates in GitHub Actions, and uses controlled canary sessions to verify quality, cost, and transaction safety before promotion.

John Edward outlines three planned read-only diagnostics in Microsoft Purview eDiscovery for troubleshooting case access, security filters, and hold-policy distribution. The update is scheduled to roll out from December 2026 into early 2027, with separate government cloud timelines and no required changes to existing configurations.

John Edward explains why organizations should shorten the gap between Windows security update release and deployment as AI accelerates vulnerability analysis. He outlines how Windows Autopatch and hotpatching can help, alongside supported operating systems, security baselines, endpoint monitoring, and tested recovery procedures.

Qianqian Ye and John Maeda explore why sketching with code still matters when AI can generate functional output. Drawing on creative coding with p5.js and teaching at USC, they discuss how iteration builds the intuition to understand generated systems and exercise creative judgment rather than rely only on prompts.

Nick Chapsas introduces closed hierarchies, a new feature described as coming to C# 15 and .NET 11. He discusses how it addresses problems with inheritance in C# and why it can help developers and coding agents write safer code.

WSilveira explains the new .NET 10 custom-code support in Azure Logic Apps Standard and walks through migrating existing .NET 8 projects. The guide covers project dependencies, runtime settings, coordinated debugging, deployment verification, and an optional GitHub Copilot skill that assists with migration without rewriting workflows.

Allison outlines new GitHub Copilot usage metrics API fields that show whether developers act on code review feedback. Repository reports now include addressed rates, comment breakdowns, and merged pull requests without subsequent human change requests, with important distinctions around merge-day counting, bot pull requests, and report access.

Allison details new GitHub Copilot usage metrics API fields that identify missing client telemetry and IDE or extension version gaps. Enterprise and organization reports now show affected users and daily counts, with guidance on access permissions, overlapping counts, and interpreting unavailable data.

Khalid Abuhakmeh compares Blazor’s four web render modes and Blazor Hybrid, explaining where components execute and how each option affects latency, initial loading, offline support, and server capacity. The guide shows how to configure modes per page or component and choose an approach for web, desktop, or mobile applications.

Microsoft Threat Intelligence and Microsoft Security Research detail how attackers use ARTEX agents to find exposed GitHub secrets and compromise cloud resources, sometimes within five minutes. The analysis covers application credential abuse, adaptive API requests, and practical steps for credential rotation, workload identity protection, secret scanning, and threat hunting.

puneetguptams explains how to prepare an IIS virtual machine for Reader-only Azure SRE Agent investigations. The guide covers collecting request logs, Windows events, performance counters and configuration audits in Log Analytics, then adding investigation skills and alerts while keeping server changes under your team's control.

conxu-ms outlines expanded Fabric Actions and Business Actions activities in Microsoft Fabric Data Factory pipelines. The update adds more supported Fabric operations and 25 third-party connectors, with built-in connection handling and structured configuration to link data processing, semantic model refreshes, and downstream application workflows without custom API integrations.