Back to updates

2026-05 - 9

2026 (12)

May (12)

k8s: Kubernetes v1.36: Deprecation and removal of Service ExternalIPs

Kubernetes Official Blog

2026-05-14

Kubernetes 1.36 formally deprecates `Service.spec.externalIPs` because the feature is insecure by default and can enable CVE-2020-8554-style abuse. Kubernetes will warn on use now, disable it in kube-proxy no earlier than v1.40 with an opt-in path, and remove opt-back-in support no earlier than v1.43.

github: GitHub Actions: Upcoming image migrations

GitHub

2026-05-14

GitHub Actions has announced two upcoming hosted runner image migrations. GitHub is also transitioning to own and maintain the Arm64 images for hosted runners.

azure: [Launched] Generally Available: Support for workloads with large files in Azure NetApp Files

Azure Updates

2026-05-14

Azure NetApp Files now supports regular volumes with file sizes up to 64 TiB. This is intended for workloads that use large files, including Azure VMware Solution virtual machines with large VMDK disks.

azure: [Launched] Generally Available: Managed Identity Support for Azure Files SMB Is now GA

Azure Updates

2026-05-14

Azure Files SMB now supports Managed Identities in general availability. Applications and services can authenticate to Azure Files without storing static credentials or account keys, using Entra-issued tokens instead.

github: GitHub Copilot app is now available in technical preview

GitHub

2026-05-14

GitHub Copilot app is available in technical preview as a GitHub-native desktop experience for starting agentic development from existing work while keeping it isolated and steerable.

security: Defense in depth for autonomous AI agents

Microsoft Security Blog

2026-05-14

Microsoft says autonomous AI agents require updated defense-in-depth controls centered on application-layer design, identity, and human oversight. The post frames agent security as an evolution of existing defense-in-depth practices rather than a new model.

security: Kazuar: Anatomy of a nation-state botnet

Microsoft Security Blog

2026-05-14

Microsoft describes Kazuar as a long-running malware family attributed to Secret Blizzard that has evolved from a backdoor into a modular peer-to-peer botnet used for espionage. The post says it is still being actively developed to support persistent, covert access to target environments.

security: When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps

Microsoft Security Blog

2026-05-14

Microsoft Security describes how misconfigurations in cloud-native AI apps on Kubernetes can expose user interfaces, weaken authentication, and create risky defaults that lead to remote code execution and data leakage. The post frames configuration mistakes as a security issue rather than a deployment convenience.

github: Copilot cloud agent supports auto model selection

GitHub

2026-05-14

Copilot cloud agent now supports Copilot auto model selection. Choosing Auto in the model picker lets Copilot pick the best available model based on system health and model availability.

github: Introducing Copilot CLI agent and unified sessions view in GitHub Copilot for JetBrains IDEs

GitHub

2026-05-14

GitHub Copilot for JetBrains IDEs now includes the Copilot CLI agent and a unified sessions view. The sessions view shows live status for running and queued sessions, and the update also adds an ask… feature.

dotnet: Process API Improvements in .NET 11

.NET

2026-05-13

The post describes Process API changes in .NET 11, adding higher-level process-starting APIs, safer output capture to avoid deadlocks, control over handle inheritance, lifetime management features, and a lighter API surface based on `SafeProcessHandle`.

github: New enterprise installation API now in public preview

GitHub

2026-05-13

GitHub has introduced a new Enterprise Installation API in public preview for GitHub App developers. The API fills a gap identified from community feedback and lets an app determine whether it is installed in an enterprise.