Security - 2

2025 (12)

November (4)

azure: [Launched] Generally Available: Azure MCP Server

Azure Updates

2025-11-06

Azure MCP Server is now generally available. Built on the Model Context Protocol (MCP), it provides a secure, standards-based bridge that lets agent-based applications and developer workflows access and coordinate across Azure services (examples called out include AKS, ACA, App Service, Cosmos DB, SQL, and AI Foundry). The GA release is aimed at simplifying integration, improving security and interoperability, and enabling cloud-powered agents.

github: npm security update: Classic token creation disabled and granular token changes

GitHub

2025-11-05

GitHub announced an npm security update that disables creation of classic tokens and introduces the first changes toward a granular token management system to strengthen npm security.

github: Secret scanning detects Base64-encoded secrets and more — October 2025

GitHub

2025-11-04

GitHub announced October 2025 updates to its secret scanning service, including new detection for Base64-encoded secrets and other expanded support for additional secret types.

github: Delegate AI controls management to members of your enterprise

GitHub

2025-11-03

GitHub now lets enterprise owners delegate management of AI and Copilot policies and setup administration to specific enterprise members and teams, without requiring broad enterprise ownership.

October (8)

azure: Retirement: Support for Node.js 20 ends on April 30, 2026 – upgrade your apps to Node.js 22

Azure Updates

2025-10-30

Azure Functions will stop supporting Node.js 20 on April 30, 2026. Apps running on Node.js 20 will continue to run, but they will no longer receive security fixes or performance updates; you should plan and perform an upgrade to Node.js 22 beforehand.

github: Upcoming deprecation of CodeQL Action v3

GitHub

2025-10-28

GitHub released CodeQL Action v4 on October 7, 2025; v4 runs on the Node.js 24 runtime. CodeQL Action v3 will be deprecated at the same time as GitHub Enterprise Server (GHES) 3.19.

azure: [Launched] Generally Available: Azure WAF CAPTCHA Challenge for Azure Front Door

Azure Updates

2025-10-28

Microsoft announced general availability of CAPTCHA protection for Azure Web Application Firewall (WAF) when used with Azure Front Door to help defend modern web applications from automated threats.

github: CodeQL 2.23.3 adds a new Rust query, Rust support, and easier C/C++ scanning

GitHub

2025-10-23

CodeQL 2.23.3 is a maintenance release for GitHub's static analysis engine that adds a new Rust query, improves Rust support, and makes C/C++ scanning easier, helping GitHub code scanning find and remediate security issues more effectively.

security: The new Microsoft Security Store unites partners and innovation

Microsoft Security Blog

2025-10-21

Microsoft announced the new Microsoft Security Store, a centralized gateway that helps customers discover, purchase, and deploy vetted security solutions and AI agents from leading partners, aiming to simplify procurement and accelerate partner-driven innovation.

k8s: 7 Common Kubernetes Pitfalls (and How I Learned to Avoid Them)

Kubernetes Official Blog

2025-10-20

The article outlines seven common Kubernetes pitfalls the author encountered—missing resource requests/limits, inadequate liveness/readiness probes, overreliance on kubectl logs, treating dev and prod identically, leaving stale resources, jumping into advanced networking too early, and weak security/RBAC—and gives pragmatic, experience-based advice to avoid each one.

k8s: Spotlight on Policy Working Group

Kubernetes Official Blog

2025-10-18

The Policy Working Group (now completed) worked to standardize and simplify policy management across the Kubernetes ecosystem. Led by co-chairs Jim Bugwadia, Poonam Lamba, and Andy Suderman, the group produced documentation, whitepapers, a CNCF survey, and the Policy Reports API, and helped educate the community about built-in policy APIs and CNCF policy tools. The WG coordinated with SIG Auth and SIG Security, faced contributor-time and consensus challenges, and encouraged newcomers to join meetings and review materials to get involved.

azure: [Launched] Generally Available: Observed capacity metric in Azure Firewall

Azure Updates

2025-10-16

Azure Firewall now includes the observed capacity metric (Generally Available). The metric reports the number of capacity units actively utilized over time to help administrators understand how their firewalls are scaling in practice.