2026-04 - 9

2026 (12)

April (12)

security: Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise

Microsoft Security Blog

2026-04-16

Microsoft reports a macOS intrusion campaign attributed to Sapphire Sleet that uses social engineering and user-driven execution to bypass macOS protections. The campaign is described as stealing credentials, cryptocurrency assets, and other sensitive data.

github: Claude Opus 4.7 is generally available

GitHub

2026-04-16

Claude Opus 4.7 is now generally available in GitHub Copilot. GitHub says early testing showed improved multi-step task performance and more reliable agentic execution.

github: CodeQL 2.25.2 adds Kotlin 2.3.20 support and other updates

GitHub

2026-04-15

CodeQL 2.25.2 has been released. It adds support for Kotlin 2.3.20 and includes other unspecified updates.

github: Enable Copilot cloud agent via custom properties

GitHub

2026-04-15

GitHub Copilot cloud agent can now be enabled selectively for specific organizations using custom properties. Before this change, enterprise admins and AI managers could only turn the agent on or off across all organizations.

azure: Retirement: End of lift reminder of HBv2/HC-Series/NP-Series Azure Virtual Machine in Azure Batch Pool

Azure Updates

2026-04-15

Azure Batch will retire support for HBv2-series, HC-series, and NP-series VMs in Batch pools on May 31, 2027. The notice applies to these VM sizes only when used in Azure Batch pools.

azure: [Launched] Generally Available: Encrypt Premium SSD v2 and Ultra Disks with Cross Tenant Customer Managed Keys

Azure Updates

2026-04-15

Cross-tenant customer-managed keys for Premium SSD v2 and Ultra Disks are now generally available. Managed disks can now be encrypted with a CMK stored in an Azure Key Vault in a different Microsoft Entra tenant.

dotnet: Pin Clustering in .NET MAUI Maps

.NET

2026-04-15

The .NET MAUI Map control in .NET MAUI 11 now supports pin clustering, automatically grouping nearby pins into cluster markers. The post also covers configuring separate clustering groups and handling cluster tap events on Android and iOS.

security: Incident response for AI: Same fire, different fuel

Microsoft Security Blog

2026-04-15

Microsoft published a blog post on incident response for AI, focusing on how existing IR practices still apply while AI-specific telemetry, tools, and skills are needed. It frames AI incidents as similar to traditional response work but with different signals and operational needs.

azure: [Launched] Announcing: Minimum billable object size for cooler storage tiers

Azure Updates

2026-04-14

Azure Blob Storage and ADLS will now use a 128 KiB minimum billable object size for the cool, cold, and archive access tiers. Objects smaller than 128 KiB on those tiers will be billed as 128 KiB.

azure: [In preview] Public Preview: Azure Site Recovery support for Windows Azure VMs with NVMe disk controllers.

Azure Updates

2026-04-14

Azure Site Recovery now supports Azure-to-Azure replication and disaster recovery for Windows Azure VMs that use NVMe-enabled Generation 2 VM families. Supported examples include Da/Ea/Fa v6-series and Ebsv5/Ebdsv5.

github: OIDC support for Dependabot and code scanning

GitHub

2026-04-14

Dependabot and code scanning now support OpenID Connect (OIDC) authentication for private registries configured at the organization level. This removes the need to store long-lived credentials as repository secrets.

github: Deployment context in repository properties and alerts

GitHub

2026-04-14

GitHub added deployment context to repository properties and security alert pages. Two new built-in repository properties, deployable and deployed, now expose this information.