Browse Security Roundups (13)

Azure Cloud HSM Hardware Audit Logging is rolling out across public regions, giving security teams searchable operational records and hardware-signed audit batches they can independently verify. Investigations into malicious Claude Code-branded Cursor extensions and help desk impersonation show why remediation must address persistent SSH artifacts, privileged certificates, and previously issued Kerberos tickets rather than stop at the initial entry point. Marketplace Trusted Publishing introduces publishing without long-lived personal access tokens, while GitHub Copilot's server-to-server authentication preview gives organization-installed apps short-lived credentials governed by organizational policies and budgets. GitHub Agentic Workflows and Copilot assisted permissions reached general availability with execution safeguards and approval controls, while Dependabot's reachability preview adds call-path evidence for vulnerability prioritization and Copilot's security extension previews

Welcome to this week's Security roundup, where .NET out-of-band patches and the LiteLLM and ConnectWise supply chain investigations put deployment checks, environment rebuilding, and application identity reviews first. GitHub adds package filtering, credential lifecycle options, and secret exposure response tools, while upcoming agent-assisted fixes and CodeQL compatibility changes require planning. We then look at Microsoft's AI agent containment controls and Azure's sovereign and confidential computing updates, distinguishing available protections from preview capabilities.

Welcome to this week"s Security roundup, where the focus shifts from building capable AI operational agents to governing what they can do and proving it after the fact. Azure MCP Server 3.0 reached stable with safer tool contracts, while new guidance goes deeper on threat modeling MCP-driven operations around identity scoping, least-privilege RBAC, and prompt injection risks that can hide in logs and telemetry. On the GitHub side, AI Scan and agentic autofix reached GA, and Actions workflow lockfiles entered preview to reduce CI supply chain risk with sustainable pinning. We also cover hard deadlines like the end of Windows Server 2012 ESU, plus governance and infrastructure updates spanning Databricks cross-engine ABAC, open hardware security specs, and practical detections for phishing-as-a-service ecosystems.

Welcome to this week's Security roundup, where the common thread is turning AI-driven workflows into something you can govern, audit, and operate under real enterprise constraints. Microsoft previewed a cleaner model for agent runtime control by putting MCP tool calls behind Azure API Management, while GitHub expanded enforceable guardrails with Copilot local sandboxing and a new context-aware model for leaked secret detection. On the platform side, teams need to plan for Azure AD Graph retirement, test broker-based sign-in on macOS, and start post-quantum authentication work where it will hurt first (certificates and PKI), alongside a few easy-to-miss deadlines that can still cause outages if they slip.

This week's Security roundup focuses on turning guidance into enforceable defaults across GitHub and Microsoft platforms. On the GitHub side, maintainers get practical hardening with gh-secure, a shift to stateless GitHub App installation tokens (plus a header deprecation deadline), and tighter vulnerability reporting and advisory collaboration APIs, alongside CI controls for Dependabot and quieter scheduled code scanning. We also look at real-world threat tradecraft (Zimbra command injection, RMM abuse, Azure DevOps pipeline pivots, and targeted malware) and the parallel push to secure action-taking AI agents with clear identity, policy enforcement, runtime isolation, and telemetry.

This week in security, the focus shifted from adding more automation to putting tighter boundaries around it, starting with stronger identity and session controls in GitHub and extending into agent governance across Microsoft Foundry. Updates also targeted the places teams tend to forget until something breaks, including SSH hardening, CodeQL packaging changes, and NuGet signing trust policies that can block CI if you do not update proactively. On the threat side, new reporting on compromised service principals and device code token theft reinforced an identity-first reality where attackers can automate destruction and persistence once they have the right tokens. Rounding things out, platform guidance and releases highlighted practical isolation and egress controls (microVM sandboxes, pod sandboxing, confidential containers) plus operational lessons like how Blob immutability can quietly prevent cleanup when you need it most.

This week's Security roundup ties together three threads: tighter controls in CI/CD and package publishing, stronger enterprise identity enforcement in GitHub, and more practical guidance for hardening AI agents and their tool access. On the supply chain side, GitHub Actions workflow execution protections reached GA, npm introduced stage-only tokens for safer automation, and GitHub completed its SHA-1 HTTPS sunset while warning teams to audit risky `pull_request_target` usage ahead of enforcement. We also look at agent security patterns (MCP governance, identity-aware tool authorization, and outcome-based observability) plus Azure hardening work across TLS, private networking DNS automation, hosted control planes, and repeatable image and configuration delivery.

This week's Security roundup focuses on identity-first cloud defense and the controls that stop attacks at the first chokepoints: authentication, messaging, and the cloud control plane. Microsoft published a Cloud Web Applications Threat Matrix that turns ATT&CK techniques into concrete hardening priorities for App Service and serverless workloads, while new incident writeups show how passkey-themed lures, AI-assisted impersonation, and AiTM patterns translate into real Entra ID and M365 compromise paths. On the DevSecOps side, GitHub shipped enforceable guardrails (blocking PR merges with unresolved secrets, least-privilege cache access, and API-managed AI Scan rollout) alongside CodeQL updates, and the agent story matured with Citadel architecture guidance plus enterprise policies that constrain Copilot agent actions. Rounding it out are platform updates like user-bound delegation SAS in Azure Storage, managed-identity triggers for App Service integrations, network-aware migration pl

This week in Security, the throughline is pushing enforcement into identity, networking, and auditable runtime controls as AI agents move from demos to deployable systems. GPT-6 Astra reached GA in Microsoft Foundry with enterprise deployment choices (throughput, region, residency) and governance hooks like Entra ID, RBAC, private networking, and monitoring that mirror how you secure other workloads. Guidance also sharpened around end-to-end agent hardening (egress containment, mediated tool use, Kubernetes policy layers, and OpenTelemetry-based evidence), while supply chain and CI/CD updates tightened provenance with key rotations, stronger OIDC-based publishing, and improved scanning and Actions permissions. Threat reports rounded out the week with practical detections for phishing evasion, helpdesk impersonation via Teams, and counterfeit installers, reinforcing the need for normalization, monitoring, and response-ready telemetry.

This week's Security roundup focuses on how attackers and defenders are converging on the same idea: the control points between users, automation, and your internal network matter as much as endpoints. Microsoft Threat Intelligence detailed ClickFix (TerminalFix) tradecraft and a second wave of intrusions aimed at exposed AI gateways and orchestration layers, reinforcing priorities like tightening script execution, monitoring egress, and treating AI infrastructure like production identity and networking. On the defensive side, guidance and platform updates emphasized repeatable guardrails for agentic AI (verification, governed tool access, tracing, and secret boundaries), plus practical improvements in tenant governance and managed response coverage. We close with supply chain and collaboration controls, including GitHub moderation updates and evaluation patterns for LLM-based security workflows that help teams scale trust signals without losing auditability.

This week's Security roundup focuses on tightening access and making security decisions easier to audit. GitHub shipped OAuth refresh tokens with stricter redirect hygiene and added incident response controls to revoke credentials by token type, while CodeQL and code scanning updates improved detection coverage and clarified governance with new audit signals and a "Mitigated" dismissal reason. On the platform side, Azure and Fabric continued the shift toward keyless patterns (managed identity), programmable encryption governance (CMK APIs), and stronger recovery posture with immutable SQL backups, alongside practical guidance for securing agentic systems by constraining tools, data access, and runtime.

This week in Security focuses on how real-world attacks and platform changes are reshaping day-to-day defensive work. The ChainDrop (Shai-Hulud) npm worm is a reminder that supply chain incidents can spread through repo automation and developer tooling, so playbooks need to cover hooks, configs, and token scope - not just dependency diffs. On the platform side, GitHub shipped OAuth improvements (multiple redirect URIs and refresh tokens), GHES 3.22 RC tightened repository controls, and license detection updates will change some SBOM and compliance outputs. We also cover time-sensitive patch and version deadlines across Windows, .NET, and Defender for Endpoint on Android, plus practical guardrails for agentic workflows (sandboxes, gateways, MCP safety, and runtime tool-call policy).

This week in Security, the focus shifted from building agent guardrails to operating them safely in real enterprise environments, with clear patterns around least privilege, approval gates, and centrally enforced allowlists. On the developer platform side, identity-first CI/CD continued to replace long-lived secrets, from Azure DevOps workload identity authentication to NuGet.org moving API keys to a 30-day lifetime and pushing OIDC trusted publishing. Supply chain defenses broadened with expanded Dependabot malware advisories and fresh threat intel on an npm worm that abuses preinstall hooks to steal credentials. Hybrid and SOC operations rounded out the week with Azure Local confidential compute and SIEM integrations, plus case studies on macOS evasion tactics and Defender-driven ransomware containment.