Back to updates

2025-11 - 27

2025 (8)

November (8)

security: ​​Learn what generative AI can do for your security operations center

Microsoft Security Blog

2025-11-04

Microsoft Security Blog published an e-book that shows how generative AI can improve Security Operations Centers (SOCs) by reducing alert fatigue, speeding triage, enabling proactive threat hunting, and helping teams get ahead of cyberattacks.

github: Required review by specific teams now available in rulesets

GitHub

2025-11-04

GitHub now lets repository administrators require approvals from specific teams to merge changes into protected branches using rulesets. You can target these team-based approval requirements to particular files and folders, giving finer-grained control over who must sign off on changes.

github: Delegate AI controls management to members of your enterprise

GitHub

2025-11-03

GitHub now lets enterprise owners delegate management of AI and Copilot policies and setup administration to specific enterprise members and teams, without requiring broad enterprise ownership.

github: Manage budgets and track usage with new billing API updates

GitHub

2025-11-03

GitHub expanded its billing APIs to let organizations programmatically manage budgets, track usage, and retrieve cost center data so finance and engineering teams can automate cost controls and reporting.

github: GitHub Copilot policy now supports agent mode in the IDE

GitHub

2025-11-03

GitHub admins can now control access to Copilot’s agent mode in IDEs through the Copilot policies page on github.com. The change is intended to give organizations better governance over who can use agent mode in development environments.

azure: [In preview] Public Preview: Azure NetApp Files Object REST API

Azure Updates

2025-11-03

Azure NetApp Files is offering a Public Preview of an Object REST API — an S3-compatible REST API that lets customers bridge traditional file-based storage and modern cloud services, enabling reuse of existing data and integration with Microsoft Fabric.

security: SesameOp: Novel backdoor uses OpenAI Assistants API for command and control

Microsoft Security Blog

2025-11-03

Microsoft DART researchers identified a novel backdoor, dubbed SesameOp, that abuses the OpenAI Assistants API as a covert command-and-control (C2) channel. A component of the backdoor uses the Assistants API as a storage/relay to fetch commands and execute tasks inside compromised environments, avoiding traditional C2 methods.

github: Control AI spending with budget tracking for GitHub AI tools

GitHub

2025-11-03

GitHub announced budget-tracking controls for AI tools and the launch of two new premium request SKUs for the GitHub Copilot coding agent and GitHub Spark to help teams manage AI spending as usage grows.