Security - 6

2025 (9)

September (7)

github: GitHub ruleset exemptions and repository insights updates

GitHub

2025-09-10

GitHub introduced a new "exempt" bypass type for repository rulesets that lets you exempt specific actors (users, teams, or GitHub Apps) from all enforced rules, and also rolled out updates to repository insights to improve repository visibility and monitoring.

github: Dependabot alerts now support production context prioritization in public preview

GitHub

2025-09-10

GitHub Dependabot alerts can now use production context from external artifact registries (for example, JFrog Artifactory) and CI/CD workflows to filter and prioritize alerts. The capability is available as a public preview, letting teams focus remediation on vulnerabilities that affect production artifacts and deployments.

aks: Release 2025-08-29

Release notes from AKS

2025-09-05

AKS v20250829 announces AKS Automatic general availability and multiple platform, networking, security, and component updates including new AKS patch versions, region expansions for API Server VNet Integration, Kubernetes 1.30 EOL, and several behavioral/observability changes.

security: Azure mandatory multifactor authentication: Phase 2 starting in October 2025

Microsoft Security Blog

2025-09-05

Microsoft Azure will begin Phase 2 mandatory multi-factor authentication enforcement at the Azure Resource Manager layer starting October 1, 2025, as announced on the Microsoft Security Blog.

azure: [Launched] Generally Available: Upgrade existing Azure Gen1 VMs to Gen2-Trusted launch

Azure Updates

2025-09-04

Azure announced general availability of the ability to upgrade existing Gen1 virtual machines to Gen2-Trusted Launch. The capability enables Trusted Launch on previously deployed Gen1 VMs to improve foundational VM security.

github: Remote GitHub MCP Server is now generally available

GitHub

2025-09-04

GitHub announced that the remote GitHub MCP Server is now generally available, with OAuth-based authentication, expanded tooling, and strengthened security guardrails to support production use.

github: CodeQL 2.22.4 adds support for Go 1.25 and accuracy improvements

GitHub

2025-09-03

GitHub released CodeQL 2.22.4 (2025-09-02), adding support for Go 1.25 and delivering accuracy improvements to its static analysis engine used by GitHub Code Scanning to find and remediate security issues.

August (2)

azure: [Launched] Generally Available: Azure NetApp Files file access logs

Azure Updates

2025-08-21

Azure NetApp Files file access logs are now generally available, providing detailed visibility into file-level operations for SMB, NFSv4.1, and dual-protocol volumes. This feature helps organizations improve their security monitoring.

azure: [In preview] Public Preview: Azure Storage Discovery

Azure Updates

2025-08-06

Azure Storage Discovery is now in public preview, offering enterprise-wide visibility into Azure Storage data. It enables deep analysis of capacity and activity to optimize costs, enhance security, and improve operations.