Security - 5

2025 (12)

December (5)

github: CodeQL 2.23.6 adds Swift 6.2.1 and new C# security queries

GitHub

2025-12-04

CodeQL 2.23.6 has been released, adding support for Swift 6.2.1 and introducing new C# security queries. CodeQL is the static analysis engine behind GitHub code scanning, used to find and remediate security issues. The announcement appeared on The GitHub Blog.

ai: Announcing Foundry MCP Server (preview), speeding up AI development with Microsoft Foundry

Microsoft AI Foundry Blog

2025-12-03

Microsoft announced the Foundry MCP Server (preview), building on the Model Context Protocol (MCP) to help AI agents securely connect with apps, data, and systems. At Ignite, Microsoft Foundry also introduced Foundry Tools as a central hub to discover, connect, and manage both public and private MCP tools securely, simplifying integration and expanding interoperability.

azure: [Launched] Generally Available: The credcheck extension in Azure Database for PostgreSQL Flexible Server

Azure Updates

2025-12-03

Azure Database for PostgreSQL Flexible Server now supports the credcheck extension (general availability), which enforces password and credential validation policies directly within PostgreSQL.

github: Secret scanning updates — November 2025

GitHub

2025-12-02

GitHub Secret Scanning received updates in November 2025 that added support for 24 new secret types via new provider patterns; details were published in the GitHub Blog changelog.

github: Block repository administrators from installing GitHub Apps on their own now generally available

GitHub

2025-12-01

GitHub rolled out a new organization-level setting (now generally available) that lets organization owners prevent repository administrators from installing GitHub Apps on repositories, giving owners tighter control over app installation and repository surface area.

November (7)

github: Secret scanning alert assignees, security campaigns are generally available

GitHub

2025-11-25

GitHub announced that secret scanning alert assignees and security campaigns are now generally available. Alert assignees will receive email notifications to help teams track and remediate secret scanning alerts more effectively.

github: Secrets in unlisted GitHub gists are reported to secret scanning partners

GitHub

2025-11-25

As of 2025-11-25, GitHub will report publicly leaked secrets found in unlisted gists to the appropriate secret scanning partners, extending secret-scanning reporting beyond only listed/public gists.

devops+ai: 🔥Building Audit Logging for Multi-Platform AI Bots with Python, AWS Cloudwatch🔥

Let's do DevOps

2025-11-25

This article explains how to build audit logging for multi-platform AI bots using Python and AWS CloudWatch to answer questions like “who is actually using our bots today?”. It covers architecture, event schema, ingestion, storage, querying, privacy considerations, and practical implementation tips to capture, ship, and analyze bot usage across channels.

azure: [In preview] Public Preview: Entra ID support for RDP connections

Azure Updates

2025-11-24

Azure Bastion now supports Microsoft Entra ID authentication for RDP connections to Windows VMs directly in the Azure portal (public preview). This allows users to authenticate with their Entra ID identity instead of using local VM credentials.

azure: [Launched] Generally Available: DNS security policy Threat Intelligence feed

Azure Updates

2025-11-20

Azure DNS security policy Threat Intelligence feed is now generally available. It provides a Microsoft-managed threat intelligence feed to protect DNS queries by identifying and blocking known malicious domains, helping prevent attacks that begin with DNS resolution.

ai: Assess Agentic Risks with the AI Red Teaming Agent in Microsoft Foundry

Microsoft AI Foundry Blog

2025-11-20

Microsoft Foundry now offers major public-preview enhancements for models and agentic AI pipelines, including an AI Red Teaming Agent that helps organizations proactively identify and mitigate safety and security risks in models and agentic systems before they enter production.

github: Enterprise bring your own key (BYOK) for GitHub Copilot is now in public preview

GitHub

2025-11-20

GitHub announced that Enterprise Bring Your Own Key (BYOK) for GitHub Copilot is now in public preview. The feature responds to enterprise demand for greater flexibility, enabling teams that already use specific LLM providers or custom models to integrate those workflows with Copilot.