Browse Security News (264)

Microsoft Security Research analyzes a malicious Claude Code-branded extension distributed through Cursor’s marketplace, detailing its attempted SSH backdoor and cross-platform persistence. The article provides Microsoft Defender detections, hunting queries, and remediation steps, explaining why removing the extension alone does not eliminate unauthorized keys and startup artifacts.

Microsoft Security Research, Sagar Patil, Jesse Birch and Tal Tzhori examine two intrusions that escalated from help desk impersonation to AD CS certificate abuse. Their analysis explains ESC1 and ESC8 attack paths, contrasting containment outcomes, and practical Microsoft Defender hunting queries and hardening measures for certificate-backed identity compromise.

spurthikommajos explains how Microsoft Fabric Eventstream’s preview support for workspace-level private connectivity lets custom applications publish events without public internet access. The article covers Azure private endpoints, workspace-scoped network restrictions, setup prerequisites, and supported analytics destinations, including important capacity requirements and ingestion limitations.

yaelbiss explains how Microsoft Fabric’s preview Allow workspace settings editing policy restricts sensitive encryption and networking changes without removing workspace administrator responsibilities. The article covers security-group-based rules, development and production boundaries, audit logging, and allow-list behavior that administrators should test before activating policies across a tenant.

amitch and Shehab Amin explain how Sail connects Spark-compatible workloads to Microsoft OneLake without copying data. They demonstrate lakehouse transformations, Python-based embedding generation, and scoped access through LakeSail Cloud Sessions, while outlining compatibility checks and limitations of the reported performance and cost comparisons.

Allison details three additional IP ranges for GitHub webhook deliveries, now included in the Meta API. Teams using static network allowlists need to add the prefixes to avoid rejecting deliveries. Allowlists kept current through the Meta API require no changes, and the additions apply across all github.com plans.

Salim Chawro introduces Hardware Audit Logging for Azure Cloud HSM, which records supported management operations directly from the hardware. Signed audit data and certificates enable independent verification, while Azure Monitor Log Analytics delivery supports investigations and monitoring. The feature is rolling out across public regions and is automatically enabled on new resources where available.

Microsoft Threat Intelligence examines how North Korean threat actors use AI to accelerate reconnaissance, identity deception, malware development, and operational scaling. The report distinguishes observed activity from suspected AI use, explains why operations remain human-directed, and provides Microsoft Defender detections and practical guidance for protecting identities, endpoints, and software repositories.

nareshvenkat introduces Project Osmos, a data engineering agent for Microsoft Fabric that investigates datasets, executes PySpark, and validates results. Persistent, shared tasks retain project context while teams define operating boundaries, review evidence, and guide changes. Tasks can be initiated through GitHub Copilot CLI, Claude Code, or Codex.

LeeBenjamin introduces the generally available Govern experience in Microsoft Fabric’s OneLake catalog and the new Govern Skills collection. Together, they provide centralized estate insights, policy controls, and AI-assisted governance checks, with evidence-based recommendations and confirmation before sensitive changes through tools such as GitHub Copilot.

Lynn Dai introduces Trusted Publishing for Visual Studio Marketplace, enabling extension releases from GitHub Actions and Azure Pipelines without long-lived personal access tokens. The article explains federated identity setup, GitHub policy activation, Azure Pipelines service connections, and how to migrate existing publishing workflows while verifying access before removing stored secrets.

GitHub Staff examines the 2026 Octoverse findings on repository activity, agent-started pull requests, and changing model choices. The report connects growing use of coding agents with shifts in review workflows, GitHub Actions usage, and language participation, while explaining the telemetry’s limitations and announcing general availability of GitHub Copilot Fusion.

Allison introduces the GitHub security extension, now in public preview for the GitHub Copilot app. Developers can browse code scanning alerts, ask Copilot to explain or fix them locally, and review changes before opening pull requests. The announcement also covers permissions, AI credit usage, and supported GitHub environments.

Allison announces general availability of GitHub Agentic Workflows, which compiles natural-language Markdown into GitHub Actions workflows powered by coding agents. The release adds runner support, model routing, and stronger isolation, with read-only defaults and validated outputs. The default GitHub Copilot CLI engine requires a Copilot license.

Allison introduces Dependabot reachability analysis, now in public preview for JavaScript and TypeScript on GitHub Enterprise Cloud. Using CodeQL and managed GitHub Actions workflows, it identifies call paths to vulnerable dependency functions and adds verdicts to alerts, helping teams prioritize remediation without automatically dismissing vulnerabilities.

Sandeep Sen summarizes October's Azure SDK releases, including authentication changes in Azure Core for .NET, managed identity improvements for Python and Java, and the first stable Cosmos DB libraries for Rust. The update also lists new stable management libraries and initial previews for AI and provisioning libraries.

Allison announces public preview support for server-to-server authentication in GitHub Copilot. GitHub Apps can use short-lived installation tokens to make SDK requests on behalf of an organization without user credentials. Usage is billed to the organization, with its model policies, budgets, spending controls, and app access controls applied.

Allison announces general availability of assisted permissions in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code. A language model evaluates command, file-path, and URL requests, automatically allowing those classified as clearly safe. Enterprise administrators can control available permission modes and set defaults for new sessions.

sbaynes describes how Microsoft combines AI agents, testing, static analysis, and formal verification to transform large codebases. The article covers Windows toolchain migration, C/C++ modernization into Rust, and specification-driven validation, explaining how small expert teams review shared knowledge and system properties rather than every generated change.

Sverre Brandsberg Dahl describes how SLB agile reservoir modeling connects with Azure Data Manager for Energy to run reservoir ensembles at cloud scale. The architecture combines parallel simulation, shared Azure Files storage, OSDU-aligned data services, and Microsoft Entra ID access controls to keep modeling workflows connected to governed corporate data.

Cynthia Zanoni and Pooja Yarabothu explain how Microsoft’s PostgreSQL extension brings database exploration, SQL editing, and troubleshooting into VS Code. They show how GitHub Copilot can help interpret schemas and query plans, while emphasizing result verification and careful review of performance recommendations before making changes.

Josef Sin explains what Azure DevOps users should check following the PHP2Shell disclosures. Azure DevOps Services and Server do not use PHP to handle customer requests, but pipeline workloads, agent hosts, containers, and deployed applications may require runtime patches. The guidance distinguishes Microsoft-managed updates from fixes customers must apply themselves.

Rahul Bhandari (MSFT) announces out-of-band security updates for .NET 8, 9, and 10, plus .NET 11 RC3. The release fixes Brotli decompression and Linux tarball ownership vulnerabilities, completes two earlier fixes, and explains how to update framework-dependent applications, self-contained deployments, containers, and source-build packages.

Allison explains a GitHub Enterprise Managed Users (EMU) incident where SCIM deprovisioning incorrectly deleted accounts instead of suspending and obfuscating them, how to confirm impact via audit logs, and what GitHub changed to restore records and prevent recurrence.

Microsoft Security Research, Mahesh Mandava, Srinivasan Govindarajan, Sagar Patil and Suriyaraj Natarajan break down the LiteLLM 1.107.0 supply-chain compromise, showing how Python startup hooks enabled credential theft without importing LiteLLM, what data was targeted, and how to investigate and recover using Microsoft Defender detections and hunting queries.

Allison announces new GitHub public monitoring capabilities for handling leaked secrets at enterprise scale, including alert triage workflows, continuous token validity checks, and integrations via a REST API and enterprise webhooks for incident response pipelines.

Allison announces general availability of enterprise-level installations for GitHub Apps, expanding API and permission coverage so enterprises can migrate more automation away from classic PATs and manage governance, security, and admin settings through GitHub Apps.

Allison summarizes the September 2026 update for GitHub Copilot in Visual Studio 2026, including PR exploration via the Git agent, preview BYOM support (with a breaking change to the new Agent harness), and a new flow to fix NuGet Audit vulnerabilities directly from the Error List.

Allison announces new GitHub Actions blob storage hosts that are now included in the GitHub meta API, with guidance for organizations that use network allowlists to avoid interruptions to job summaries and logs.

Allison announces a public preview feature for GitHub Enterprise Cloud with data residency that expands secret scanning to public commits on github.com, while keeping alert delivery and data handling within the customer’s residency region via verified domain matching.

Microsoft Security Research and Microsoft Threat Intelligence detail how Storm-0940 used the ARTEX agentic AI framework to accelerate a ConnectWise supply chain compromise, then abused OAuth application identities to access Microsoft 365 tenants via app-only authentication and Microsoft Graph, with concrete mitigation steps, detections, IOCs, and hunting queries.

Allison announces a public preview in GitHub CLI v2.103.0 that lets you opt in to expiring, auto-refreshing OAuth credentials, reducing the risk of long-lived leaked tokens. The post explains how to enable the feature, how it behaves with Git over HTTPS, and what to watch for in scripts that cache tokens.

Laura Jiang announces Agentic Autofix for GitHub Advanced Security in Azure DevOps, which generates proposed fixes for both code scanning alerts and vulnerable dependencies. The update uses repository context plus custom instructions/skills to better match team standards, and adds triage signals like EPSS and dependency scope to help prioritize what to fix first.

Alicia Li summarizes Q3 2026 updates to Microsoft Fabric Eventstreams, focusing on new managed and custom connectors, CDC ingestion from operational databases, schema registry and schema-aware processing for mixed event types, in-flight enrichment with Delta tables, improved monitoring and diagnostics, and stronger deployment and networking controls.

Allison summarizes recent improvements and bug fixes in GitHub secret scanning, including an upcoming audit log field change that may affect integrations, plus updates to token revocation support, webhook payloads, and several API and push-protection edge cases.

Allison announces an update to the Dependabot alerts REST API that adds a new version_requirement field, making it easier to retrieve the dependency version (or constraint) recorded for an alert without parsing lockfiles or issuing separate GraphQL queries.

Allison announces GitHub package firewall in public preview for GitHub Enterprise Cloud, a supply-chain security feature that inspects package metadata and downloads to block malicious dependencies before they reach CI/CD hosts or developer workstations.

Allison announces expanded Dependabot support for newer package manager versions (npm 12, pnpm 11/12, and Bun 1.4), so teams can upgrade and continue receiving automated dependency update PRs across GitHub.com and GitHub Enterprise Server.

jovanpop-msft introduces preview support for calling Fabric User Data Functions from T-SQL in Fabric Data Warehouse. The integration extends warehouse queries with custom Python logic for data enrichment, external API calls, and secret retrieval, with an example that calculates and stores IPv6 network prefixes for downstream analytics.

Satya Nadella shares Microsoft’s view that AI models and agents should be treated as insider risks, with security controls enforced outside the model. He highlights expanded Project Perception capabilities aimed at continuously assessing agent risk, adapting permissions, and containing threats across enterprise security layers.