Back to updates

Governance - 1

2025 (12)

December (3)

github: Control who can request apps for your organization now in public preview

GitHub

2025-12-22

GitHub has launched a public preview that gives organizations more granular control over who can request GitHub Apps and OAuth apps, enabling stricter governance while preserving flexibility in security posture.

github: Enterprise governance and policy improvements for secret scanning

GitHub

2025-12-16

GitHub announced the general availability of enterprise governance and policy improvements for secret scanning, including enterprise-level delegated bypass controls for push protection and support for the new Enterprise Security Manager to provide stronger, more centralized controls and delegation for secret scanning across enterprises.

security: From awareness to action: Building a security-first culture for the agentic AI era

Microsoft Security Blog

2025-12-10

Microsoft emphasizes that insights from Cybersecurity Awareness Month and Microsoft Ignite 2025 show security remains a top business priority. The article calls for moving from awareness to concrete action by building a security-first culture suited to the risks and opportunities of agentic (autonomous) AI, combining leadership commitment, policy and governance, workforce training, and technical controls.

November (8)

azure: [Launched] Generally Available: Azure Virtual Network Manager address overlap prevention in mesh

Azure Updates

2025-11-18

Azure Virtual Network Manager's address space overlap prevention for mesh deployments is now generally available. The feature prevents unintended IP address overlaps across virtual networks in a mesh to avoid dropped traffic, improving reliability and governance in multi-VNet environments.

azure: [In preview] Public Preview: Cross region pool association support for Azure Virtual Network Manager IP address management

Azure Updates

2025-11-18

Azure Virtual Network Manager (VNet Manager) now offers public preview support to associate a single IP Address Management (IPAM) pool with virtual networks across multiple regions. This cross-region pool association simplifies governance and ensures consistent CIDR allocation for multi-region deployments.

github: Internal MCP registry and allowlist controls for VS Code Stable in public preview

GitHub

2025-11-18

GitHub announced that enterprise and organization administrators can configure internal MCP registries and enforce allowlist policies in the latest VS Code Stable release (public preview), extending governance controls to the majority of Copilot users.

azure: [In preview] Public Preview: New granular controls for network and integration security in Microsoft Foundry

Azure Updates

2025-11-18

Microsoft Foundry is releasing a Public Preview with more granular controls for network and integration security and resource management, enabling IT administrators to deploy enterprise AI solutions while meeting governance and security requirements.

vscode: Introducing the Visual Studio Code Private Marketplace: Your Team's Secure, Curated Extension Hub 🎉

Visual Studio Code

2025-11-18

Microsoft announced that the Visual Studio Code Private Marketplace is now generally available — a secure, curated extension hub for teams to manage and distribute VS Code extensions privately. Read the full article: https://code.visualstudio.com/blogs/2025/11/18/PrivateMarketplace

azure: [Launched] Generally Available: Azure Virtual Network Manager peering compliance

Azure Updates

2025-11-13

Azure Virtual Network Manager peering compliance is now generally available, delivering a secure, centralized way to enforce and monitor VNet peering rules to protect network connectivity managed by Azure Virtual Network Manager — particularly valuable in large-scale environments to prevent unintended peerings and ensure governance.

k8s: Announcing the 2025 Steering Committee Election Results

Kubernetes Official Blog

2025-11-09

The 2025 Kubernetes Steering Committee election concluded. Four of seven seats were up for election; the incoming members begin two-year terms immediately. The post announces the newly elected members, continuing members, election officers, emeritus members, and gives ways for the community to follow and participate in Steering Committee work.

github: GitHub Copilot policy now supports agent mode in the IDE

GitHub

2025-11-03

GitHub admins can now control access to Copilot’s agent mode in IDEs through the Copilot policies page on github.com. The change is intended to give organizations better governance over who can use agent mode in development environments.

October (1)

security: The 5 generative AI security threats you need to know about detailed in new e-book

Microsoft Security Blog

2025-10-30

Microsoft's blog post summarizes a new e-book that outlines the main challenges organizations face with generative AI, details the top generative AI security threats, and recommends steps companies can take to strengthen their security posture against unpredictable AI risks.