Security - 5

2026 (12)

July (12)

aks: Release 2026-07-17

Release notes from AKS

2026-07-24

AKS v20260717 adds Artifact Streaming GA, new preview networking and scheduling features, and multiple behavior changes and bug fixes. It also updates Kubernetes patch versions, core add-ons, node images, and includes several retirement notices and upcoming defaults.

github: Upcoming GHES change impacting uploading support bundles

GitHub

2026-07-22

GitHub will begin rejecting some GHES support bundle uploads starting August 18, 2026 because of an upcoming security change. Administrators should review the new upload requirements before that date to avoid failed submissions.

security: Least privilege for AI agents: Identity, access, and tool binding

Microsoft Security Blog

2026-07-16

Microsoft Security published a post on applying least-privilege principles to AI agents, focusing on identity, access control, tool binding, and auditing as agents become more autonomous.

security: Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Microsoft Security Blog

2026-07-16

Microsoft reports that attackers compromised AsyncAPI npm packages and used trusted CI/CD workflows to distribute malware via npm. The writeup details the attack chain, import-time payload delivery, and suggested defenses.

github: Improvements to secret scanning and public monitoring

GitHub

2026-07-15

GitHub rolled out updates to secret scanning and public monitoring. Resend is now a secret scanning partner, and secret scanning can detect new secret types from APIclub.

github: Code scanning shows AI security detections on pull requests

GitHub

2026-07-14

GitHub code scanning now shows AI-powered security detections on pull requests. The feature expands coverage to languages and frameworks not currently supported by CodeQL.

github: Manage secret scanning custom patterns via REST API

GitHub

2026-07-13

GitHub now supports managing secret scanning custom patterns through the REST API. The new generally available endpoints let security teams list, create, and edit custom patterns programmatically.

security: Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative

Microsoft Security Blog

2026-07-10

Microsoft published its July 2026 Secure Future Initiative progress report, summarizing work on secure foundations, AI-assisted defense, and broader cybersecurity readiness. The provided text is only a brief overview and does not include specific implementation details or metrics.

security: Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

Microsoft Security Blog

2026-07-08

Microsoft says its Secure Future Initiative (SFI) uses security requirements, threat intelligence, and operational frameworks to define what a well-defended cloud service should look like. It emphasizes continuously evaluating live services against those requirements at AI speed.

github: npm install-time security and GAT bypass2fa deprecation

GitHub

2026-07-08

npm v12 is now generally available and tagged latest. It enables the install-time security defaults announced in June and starts deprecating GAT bypass2fa.

azure: [In preview] Public Preview: Exceptions in WAF for Azure Application Gateway and Azure Front Door

Azure Updates

2026-07-07

Azure Web Application Firewall now has an exceptions feature in public preview for Azure Application Gateway and Azure Front Door. It lets you allow specific requests that would otherwise be blocked as false positives, complementing existing exclusions.

github: Secret scanning extended metadata and multipart validation

GitHub

2026-07-07

GitHub secret scanning now surfaces extended metadata for supported secret types to help identify ownership and impact of leaked secrets. The update also includes general availability of extended metadata checks and multipart validation support.