Back to updates

2026-09 - 15

2026 (12)

September (12)

github: CodeQL 2.27.0 adds support for Linux ARM64

GitHub

2026-09-09

CodeQL 2.27.0 is available on Linux ARM64. The release also adds a new Rust security query, expands framework coverage for Java/Kotlin and C#, and includes analysis accuracy improvements across multiple languages.

security: Threat matrix: Mapping threats across cloud web applications

Microsoft Security Blog

2026-09-09

Microsoft introduced the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework for understanding and prioritizing threats against cloud-hosted web applications and serverless platforms. It is intended to help defenders map attacks and identify mitigations.

azure: [Launched] Generally Available: Azure Ephemeral OS Disk with full caching for VM/VMSS

Azure Updates

2026-09-09

Azure Ephemeral OS Disk with full caching is now generally available for new virtual machines and Virtual Machine Scale Sets. It caches the full OS image on local VM storage so reads no longer go to remote storage after caching completes.

github: Enterprise managed permissions for GitHub Copilot agent operations

GitHub

2026-09-09

GitHub Copilot Business and Enterprise admins can now centrally manage agent operation permissions. Admins can set operations to be blocked, require human approval, or run without prompting.

k8s: Kubernetes v1.37: Introducing Node Lifecycle Conditions

Kubernetes Official Blog

2026-09-09

Kubernetes v1.37 reserves five well-known Node lifecycle condition types and adds an alpha feature gate for future built-in behavior, but the gate is disabled by default and no core components act on the conditions yet. The release is meant to provide a shared, Kubernetes-owned signal for drains, maintenance, and graceful shutdown so operators and external controllers can report Node lifecycle state consistently.

security: Passkey-themed social engineering leads to identity and cloud compromise

Microsoft Security Blog

2026-09-09

Microsoft describes a threat campaign using passkey-themed social engineering to compromise identities and extend access into cloud services. The activity includes MFA persistence, Microsoft Graph reconnaissance, and access to SharePoint, OneDrive, and email data, with guidance on detection and mitigation.

github: GitHub Advanced Security expands trial availability

GitHub

2026-09-09

GitHub Advanced Security self-serve trials are now available to more GitHub Enterprise Cloud customers. The trial can be used to evaluate GitHub Code Security and GitHub Secret Protection.

github: Block pull requests with exposed secrets from merging

GitHub

2026-09-09

GitHub added a repository ruleset capability to prevent pull requests from merging when they introduce exposed secrets. This extends rulesets as a repository-wide protection mechanism.

github: Remediate Code Quality findings with agentic autofix

GitHub

2026-09-09

GitHub added agentic autofix for Code Quality findings, allowing users to select and assign up to 25 standard findings at once for automated remediation. The feature is aimed at reducing backlog items in code quality reports.

aks: Release 2026-09-04

Release notes from AKS

2026-09-09

AKS release v20260904 rolls out Kubernetes 1.37 preview, adds GA autoscaling for VM node pools, and includes updates across gateway, service mesh, CSI, and cloud-provider components. It also introduces several behavioral changes, bug fixes, and retirement notices for VMAS clusters and Azure Linux with OS Guard.

github: Enterprise-managed sandbox in Copilot for JetBrains

GitHub

2026-09-09

Copilot for JetBrains now supports enterprise-managed sandbox policies, along with cross-file cursor jumps for next edit suggestions, global project context in chat, and enterprise policy diagnostics. The update also adds a new terminal Copilot connection.

github: GitHub Enterprise Server 3.22 is now generally available

GitHub

2026-09-08

GitHub Enterprise Server 3.22 is generally available. The release adds new platform capabilities, including administrator configuration for Copilot CLI.