Back to updates

Security - 3

2026 (12)

September (2)

security: Counterfeit installers to system compromise: Tracking a deceptive software download campaign

Microsoft Security Blog

2026-09-01

Microsoft describes an active malware campaign that uses fake software download pages and repackaged installer archives to impersonate legitimate vendors. The post includes observed tactics, Defender XDR detections, indicators of compromise, and mitigation guidance.

azure: [Launched] Generally Available: Confidential VMs for Azure Linux

Azure Updates

2026-09-01

Confidential Virtual Machines for Azure Linux in AKS are now generally available. This adds CVM node pool support for migrating highly sensitive container workloads to AKS.

August (10)

commandline: Your agent’s guardrails have a bypass

Microsoft Command Line Blog

2026-08-27

Microsoft introduced Agent Hooks, an open, framework-neutral governance contract for agent systems. It includes conformance testing and is intended to make enforcement fail closed instead of failing open when controls crash.

security: ​​​​​​What’s new in Microsoft Security: August 2026

Microsoft Security Blog

2026-08-27

Microsoft’s August 2026 security update highlights new capabilities for monitoring agent activity, broader security coverage across supported environments, and improved security management across environments.

azure: [Launched] Generally Available: Azure Bastion shareable link expiration

Azure Updates

2026-08-26

Azure Bastion shareable links now support an administrator-defined expiration date and time. After expiration, the link can no longer be used to connect.

azure: [Launched] Generally Available: Connect to AKS clusters using Azure Bastion

Azure Updates

2026-08-26

Azure Bastion integration with Azure Kubernetes Service (AKS) is now generally available. It lets customers create a secure tunnel from a local machine through Azure Bastion to an AKS cluster API server.

azure: [Launched] Generally Available: Custom block response code and body for Application Gateway WAF

Azure Updates

2026-08-24

Azure WAF on Application Gateway is now generally available with support for custom block response status codes and response bodies for blocked requests. This lets you define the HTTP response returned when WAF blocks a request.

github: Code scanning adds a mitigated alert dismissal reason

GitHub

2026-08-20

Code scanning now supports dismissing alerts with the reason "Mitigated" when the vulnerability still exists in code but is offset by external controls, such as a web application firewall or network protections.

security: Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026

Microsoft Security Blog

2026-08-19

Microsoft says it was named a visionary leader in Frost & Sullivan’s 2026 Frost Radar for Cloud Workload Protection Platforms, citing Microsoft Defender for Cloud’s unified runtime security. The post is a brief recognition announcement with no product changes described.

github: Credential revocation and deauthorization by token type

GitHub

2026-08-18

GitHub added self-service incident response actions to deauthorize and revoke user credentials by token type and by specific user. The update extends existing credential revocation workflows for security incidents.

github: Multiple redirect URIs and token refresh for OAuth apps

GitHub

2026-08-14

GitHub updated OAuth app and GitHub App platform support to improve app security. The changes include optional expiring access tokens with refresh tokens for OAuth apps, and support for multiple redirect URIs.

security: Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise

Microsoft Security Blog

2026-08-10

Microsoft says it was named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise. The post highlights Microsoft Defender Experts MDR as combining AI, threat intelligence, and human expertise.