Back to updates

Security - 13

2025 (11)

September (8)

github: CodeQL 2.23.0 adds support for Rust log injection and other security detection improvements

GitHub

2025-09-10

CodeQL 2.23.0 is a new release of GitHub's static analysis engine used by code scanning. The release adds explicit support for detecting Rust log injection and includes other security detection improvements to help find and remediate vulnerabilities.

github: GitHub ruleset exemptions and repository insights updates

GitHub

2025-09-10

GitHub introduced a new "exempt" bypass type for repository rulesets that lets you exempt specific actors (users, teams, or GitHub Apps) from all enforced rules, and also rolled out updates to repository insights to improve repository visibility and monitoring.

github: Dependabot alerts now support production context prioritization in public preview

GitHub

2025-09-10

GitHub Dependabot alerts can now use production context from external artifact registries (for example, JFrog Artifactory) and CI/CD workflows to filter and prioritize alerts. The capability is available as a public preview, letting teams focus remediation on vulnerabilities that affect production artifacts and deployments.

aks: Release 2025-08-29

Release notes from AKS

2025-09-05

AKS v20250829 announces AKS Automatic general availability and multiple platform, networking, security, and component updates including new AKS patch versions, region expansions for API Server VNet Integration, Kubernetes 1.30 EOL, and several behavioral/observability changes.

security: Azure mandatory multifactor authentication: Phase 2 starting in October 2025

Microsoft Security Blog

2025-09-05

Microsoft Azure will begin Phase 2 mandatory multi-factor authentication enforcement at the Azure Resource Manager layer starting October 1, 2025, as announced on the Microsoft Security Blog.

azure: [Launched] Generally Available: Upgrade existing Azure Gen1 VMs to Gen2-Trusted launch

Azure Updates

2025-09-04

Azure announced general availability of the ability to upgrade existing Gen1 virtual machines to Gen2-Trusted Launch. The capability enables Trusted Launch on previously deployed Gen1 VMs to improve foundational VM security.

github: Remote GitHub MCP Server is now generally available

GitHub

2025-09-04

GitHub announced that the remote GitHub MCP Server is now generally available, with OAuth-based authentication, expanded tooling, and strengthened security guardrails to support production use.

github: CodeQL 2.22.4 adds support for Go 1.25 and accuracy improvements

GitHub

2025-09-03

GitHub released CodeQL 2.22.4 (2025-09-02), adding support for Go 1.25 and delivering accuracy improvements to its static analysis engine used by GitHub Code Scanning to find and remediate security issues.

August (2)

azure: [Launched] Generally Available: Azure NetApp Files file access logs

Azure Updates

2025-08-21

Azure NetApp Files file access logs are now generally available, providing detailed visibility into file-level operations for SMB, NFSv4.1, and dual-protocol volumes. This feature helps organizations improve their security monitoring.

azure: [In preview] Public Preview: Azure Storage Discovery

Azure Updates

2025-08-06

Azure Storage Discovery is now in public preview, offering enterprise-wide visibility into Azure Storage data. It enables deep analysis of capacity and activity to optimize costs, enhance security, and improve operations.

May (1)

azure: [In preview] Generally Available: Model Context Protocol support in Azure API Management and Azure API Center

Azure Updates

2025-05-23

Azure announced the public preview of Model Context Protocol (MCP) support in Azure API Management and Azure API Center, enabling enterprises to transform existing APIs into dynamic, agent-ready tools while improving security and simplifying integration and consumption. (Original content was truncated.)