Security - 1

2026 (12)

May (11)

k8s: Kubernetes v1.36: Deprecation and removal of Service ExternalIPs

Kubernetes Official Blog

2026-05-14

Kubernetes 1.36 formally deprecates `Service.spec.externalIPs` because the feature is insecure by default and can enable CVE-2020-8554-style abuse. Kubernetes will warn on use now, disable it in kube-proxy no earlier than v1.40 with an opt-in path, and remove opt-back-in support no earlier than v1.43.

security: Defense in depth for autonomous AI agents

Microsoft Security Blog

2026-05-14

Microsoft says autonomous AI agents require updated defense-in-depth controls focused on application-layer design, identity, and human oversight. The post frames these as the main security areas to address as agent autonomy increases.

security: Accelerating detection engineering using AI-assisted synthetic attack logs generation

Microsoft Security Blog

2026-05-12

Microsoft describes research for generating realistic synthetic attack telemetry from attacker behaviors (TTPs) so detections can be tested and tuned at scale without using sensitive data.

security: Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark

Microsoft Security Blog

2026-05-12

Microsoft announced MDASH, a new multi-model agentic scanning harness for AI-powered cyber defense. The post says it outperformed a leading industry benchmark.

security: Defending consumer web properties against modern DDoS attacks

Microsoft Security Blog

2026-05-12

Microsoft published guidance on defending consumer web properties against modern DDoS attacks, emphasizing layered security, resilient architecture, and graceful service degradation.

security: When prompts become shells: RCE vulnerabilities in AI agent frameworks

Microsoft Security Blog

2026-05-07

Microsoft says new research found prompt injection issues in AI agent frameworks can lead to remote code execution. The post outlines affected areas and recommends securing agents against these flaws.

security: World Passkey Day: Advancing passwordless authentication

Microsoft Security Blog

2026-05-07

Microsoft says it is advancing passkey adoption as a replacement for passwords, with the goals of reducing phishing risk and simplifying sign-in. The post is framed around World Passkey Day and passwordless authentication.

github: Dependency scanning with GitHub MCP Server is in public preview

GitHub

2026-05-05

GitHub MCP Server now supports dependency scanning in public preview. It can scan code changes for vulnerable dependencies before you commit or open a pull request.

github: Code-to-cloud risk visibility with Microsoft Defender for Cloud is now generally available

GitHub

2026-05-05

GitHub says the code-to-cloud risk visibility integration with Microsoft Defender for Cloud is now generally available. The release includes follow-up improvements since public preview, bringing artifact and runtime context closer together.

aks: Release 2026-04-28

Release notes from AKS

2026-05-04

AKS 2026-04-28 adds new patch releases for Kubernetes 1.33–1.35, introduces several preview features, and updates multiple platform components and node images. It also highlights a security mitigation for CVE-2026-31431, deprecates Kubernetes 1.29 LTS, and starts moving Automatic clusters toward Gateway API-based ingress.

k8s: Kubernetes v1.36: Admission Policies That Can't Be Deleted

Kubernetes Official Blog

2026-05-04

Kubernetes v1.36 adds an alpha manifest-based admission control feature that loads admission webhooks and CEL policies from files on disk at API server startup. It closes the bootstrap gap and allows on-disk policies to protect API-based admission resources from deletion or modification.

April (1)

azure: [Launched] Generally Available: Prefix-scoped access for User Delegation SAS

Azure Updates

2026-04-30

Prefix-scoped access for User Delegation SAS in Azure Blob Storage is now generally available in all Azure regions. It adds a scope between container-level and single-blob access for SAS tokens.