GitHub
2026-09-10
GitHub Actions now supports `cache-mode` to control cache access at the workflow or job level. This lets you grant least-privilege cache access instead of broad cache permissions.
Microsoft Security Blog
Microsoft describes an AI-assisted business email compromise campaign that impersonated executives and used fake invoices to target finance teams for ACH payment fraud. The post focuses on the attack pattern and how organizations can protect against it.
.NET
The post explains how C# unions and closed hierarchies integrate with System.Text.Json in ASP.NET Core. It covers use across Minimal APIs, MVC, SignalR, Blazor, and OpenAPI.
GitHub deprecated MAI-Code-1-Flash across all Copilot experiences on September 10, 2026. The suggested alternative is referenced in the deprecation notice.
Azure Updates
Azure Functions Flex Consumption now generally supports TLS/SSL certificates using a new site-scoped certificate model. It also adds end-to-end TLS encryption support for function apps in this plan.
Microsoft Defender is described as detecting and disrupting AI-themed phishing, malware, and multi-stage attacks across the attack chain. The post is a Microsoft Security Blog entry dated 2026-09-10.
Azure Copilot Troubleshooting Agent is now generally available. It provides a built-in Azure Copilot capability for investigating and resolving operational issues, and is available through Azure Copilot and Support.
GitHub’s Xcode 27 runner image for GitHub-hosted macOS runners now runs on macOS 27 and is available in public preview. This lets you validate Apple apps against macOS 27 using that runner image.
Microsoft Command Line Blog
PyRIT is presented as an open-source Python tool for AI red teaming that lowers the barrier for subject matter experts to test generative AI systems. The article describes its evolution toward making red teaming more accessible across many domains.
Microsoft AI Foundry Blog
2026-09-09
Microsoft Foundry’s July and August 2026 update adds stable Hosted Agent and Toolbox SDK paths, Claude tools support on Azure-hosted deployments, and Model Router updates. It also notes local inference improvements and SDK migration items to review before upgrading.
Azure Storage now generally available with user-bound user delegation SAS, combining user delegation SAS flexibility with Entra ID user-bound access for stronger authentication. The update adds enhanced secure authentication for Azure Storage.
npm now applies a 72-hour security hold to any account after a successful recovery-code sign-in. The hold was previously limited to high-impact accounts.