Back to updates

2026-11 - 1

2026 (12)

November (12)

security: What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

Microsoft Security Blog

2026-11-02

Microsoft Security Blog says real-world exploitation is concentrated in a small subset of CVEs, and defenders should prioritize vulnerabilities by exploitation likelihood, exposure, and potential blast radius. The post presents a data-driven analysis of exploited vulnerabilities.

azure: [In preview] Public Preview: On-prem NAS share discovery and assessment are now available using Azure Migrate

Azure Updates

2026-11-02

Azure Migrate added public preview support for discovering and assessing on-premises NAS shares. The feature helps plan migrations of Dell PowerScale (OneFS) and NetApp ONTAP storage to Azure.

azure: Retirement: OT security in Microsoft Defender for IoT

Azure Updates

2026-11-02

Microsoft plans to deprecate the OT security component of Microsoft Defender for IoT. The service will be fully deprecated in October 2029 after a three-year transition period.

azure: [Launched] Generally Available: Change from virtual network integration to a private endpoint capable network configuration in Azure Database for PostgreSQL flexible server

Azure Updates

2026-11-02

Azure Database for PostgreSQL Flexible Server now supports changing existing VNet-integrated servers from delegated-subnet networking to a private endpoint-capable network configuration. This gives more flexibility in network design for existing workloads.

azure: Retirement: Azure Fluid Relay

Azure Updates

2026-11-02

Azure Fluid Relay will be retired on February 2, 2027. After that date, the service will be unavailable and workloads depending on it may be disrupted; the Fluid Framework remains available as open source.

azure: [Launched] Generally Available: Azure Storage Actions adds automatic task updates, execution controls, and case-sensitive matching

Azure Updates

2026-11-02

Azure Storage Actions now automatically propagates task definition updates, adds more execution control, and supports case-sensitive matching for automated data operations across Azure Blob and Data Lake Storage.

azure: [Launched] Generally Available: Restart databases in Azure SQL DB via the Azure portal

Azure Updates

2026-11-02

Azure SQL Database now supports restarting or failing over databases directly in the Azure portal. This applies to single databases, Hyperscale databases, and databases in elastic pools.

azure: [Launched] Generally Available: Geo-Replication on partitioned namespaces for Azure Service Bus Premium

Azure Updates

2026-11-02

Geo-Replication for partitioned Azure Service Bus Premium namespaces is now generally available. It lets you use partitioning for throughput while replicating messages and metadata to a secondary Azure region for resilience.

azure: [Launched] Generally Available: Azure Site Recovery for Azure Local

Azure Updates

2026-11-02

Azure Site Recovery support for Azure Local is now generally available. It lets customers protect supported Windows and Linux virtual machines by replicating them for disaster recovery.

github: Security risk assessments include repository protection status

GitHub

2026-11-02

GitHub’s code security risk assessment and secret risk assessment now indicate whether findings are in protected or unprotected repositories. This helps organizations see where to extend security coverage.

github: pull_request_target blocked by default December 2

GitHub

2026-11-02

Starting December 2, 2026, GitHub Actions will block `pull_request_target` events by default in all public repositories unless an applicable Actions event policy explicitly allows them. The enforcement date was changed from a previous schedule.

commandline: Nine engineers, 1,211 pull requests in a day: Lessons from building Copilot Cowork

Microsoft Command Line Blog

2026-11-02

Microsoft describes a case study from building Copilot Cowork, including a live migration of the runtime from Python to Rust. The article frames the migration as an example of the engineering practices used while shipping the system.