Back to updates

2026-06 - 7

2026 (12)

June (12)

github: Generated release notes credit you for Copilot pull requests

GitHub

2026-06-18

Generated release notes now credit Copilot pull requests in the list of merged pull requests since the last release. This affects the automatically generated release notes output.

security: From package to postinstall payload: Inside the Mastra npm supply chain compromise

Microsoft Security Blog

2026-06-18

Microsoft describes a compromised npm package in the Mastra ecosystem that spread a hidden postinstall payload to 140+ projects. The post focuses on detection, hunting, and defense guidance using Microsoft Defender and threat intelligence.

security: Crypto Clipper uses Tor and worm-like propagation for persistence and control

Microsoft Security Blog

2026-06-17

Microsoft Threat Intelligence described a cryptocurrency clipper campaign that steals and replaces wallet addresses, uses Tor for command-and-control, and spreads in a worm-like way. The malware also maintains persistence and includes a lightweight backdoor for follow-on activity.

github: Read remote repository content with GitHub CLI

GitHub

2026-06-17

GitHub CLI now includes two commands for reading repository content without cloning: `gh repo read-file` and `gh repo read-dir`. These let you inspect remote files and directories directly from the terminal.

security: Beyond the benchmark: Advancing security at AI speed

Microsoft Security Blog

2026-06-17

Microsoft Security says it has advanced its agentic vulnerability detection system, MDASH, and integrated it into workflows across Windows, Azure, and identity systems. The post focuses on applying the system in real-world security operations rather than benchmark results.

github: Secret scanning updates – June 2026

GitHub

2026-06-17

GitHub added secret scanning coverage in June 2026 with new partner integrations, more default push-protection blocks, additional validity checks, and richer metadata for leaked secrets.

security: ​​Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report

Microsoft Security Blog

2026-06-17

Microsoft says Forrester named it a Leader in The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026. The post is an announcement of the analyst recognition and does not include product changes or technical updates.

azure: [Launched] Generally Available: Azure Databricks native read access to Microsoft OneLake

Azure Updates

2026-06-17

Azure Databricks now has generally available native read access to Microsoft OneLake through Unity Catalog. Users can query and analyze OneLake data directly without moving or copying it.

azure: [In preview] Public Preview: Azure Migrate – GitHub Copilot Modernization integration for at scale code assessments

Azure Updates

2026-06-17

Azure Migrate public preview now integrates with GitHub Copilot Modernization to provide at-scale code insights. The integration combines Azure Migrate’s portfolio-level discovery and assessment with Copilot’s context-aware code analysis.

azure: [In preview] Public Preview: Azure Databricks natively storing data in Microsoft OneLake

Azure Updates

2026-06-17

Azure Databricks now supports natively writing managed Delta tables to Microsoft OneLake in public preview. This lets customers use OneLake as the storage layer for Databricks workloads without managing separate storage accounts.

github: Enterprise-managed settings now support bypass permission controls

GitHub

2026-06-17

Enterprise administrators can now set `disableBypassPermissionsMode` to `"disable"` in enterprise-managed `settings.json` to prevent GitHub Copilot CLI and VS Code from bypassing permission controls.

security: AI is accelerating cyberattacks—here’s how to stay ahead

Microsoft Security Blog

2026-06-17

Microsoft describes how its identity and security products use unified signals to help teams prevent, detect, and respond to AI-accelerated attacks faster. The post is a security-focused overview rather than a feature release.