Back to updates

Security - 6

2025 (12)

November (9)

k8s: Ingress NGINX Retirement: What You Need to Know

Kubernetes Official Blog

2025-11-11

Kubernetes SIG Network and the Security Response Committee announced the retirement of Ingress NGINX. Best-effort maintenance will continue until March 2026; after that there will be no further releases, bug fixes, or security updates. Users are advised to migrate to Gateway API or another Ingress controller.

azure: [In preview] Public Preview: Insights in Azure Migrate

Azure Updates

2025-11-11

Azure Migrate is in public preview with integrated Security insights that let customers assess potential risks in their on-premises environments and receive actionable recommendations to mitigate those risks during migration planning.

azure: [In preview] Public Preview: Flatcar Container Linux for AKS

Azure Updates

2025-11-11

Azure announced a public preview of Flatcar Container Linux as a node OS option for Azure Kubernetes Service (AKS). The offering aims to reduce configuration drift and manual changes by providing a lightweight, immutable, container-optimized Linux distribution with automated updates and a smaller attack surface, improving node consistency, security, and operational predictability.

security: ​​Securing our future: November 2025 progress report on Microsoft’s Secure Future Initiative ​​

Microsoft Security Blog

2025-11-10

Microsoft published a November 2025 progress report for its Secure Future Initiative, reporting steady progress across all areas and engineering pillars. The initiative’s mission is to accelerate innovation, strengthen resilience, and lead the industry toward a safer digital future, with the report underscoring Microsoft’s continued commitment to security.

github: Actions pull_request_target and environment branch protections changes

GitHub

2025-11-07

GitHub will change how Actions' pull_request_target and environment branch protection rules are evaluated for pull-request-related events, effective 2025-12-08, to reduce security-critical exposures.

azure: [Launched] Generally Available: Azure MCP Server

Azure Updates

2025-11-06

Azure MCP Server is now generally available. Built on the Model Context Protocol (MCP), it provides a secure, standards-based bridge that lets agent-based applications and developer workflows access and coordinate across Azure services (examples called out include AKS, ACA, App Service, Cosmos DB, SQL, and AI Foundry). The GA release is aimed at simplifying integration, improving security and interoperability, and enabling cloud-powered agents.

github: npm security update: Classic token creation disabled and granular token changes

GitHub

2025-11-05

GitHub announced an npm security update that disables creation of classic tokens and introduces the first changes toward a granular token management system to strengthen npm security.

github: Secret scanning detects Base64-encoded secrets and more — October 2025

GitHub

2025-11-04

GitHub announced October 2025 updates to its secret scanning service, including new detection for Base64-encoded secrets and other expanded support for additional secret types.

github: Delegate AI controls management to members of your enterprise

GitHub

2025-11-03

GitHub now lets enterprise owners delegate management of AI and Copilot policies and setup administration to specific enterprise members and teams, without requiring broad enterprise ownership.

October (3)

azure: Retirement: Support for Node.js 20 ends on April 30, 2026 – upgrade your apps to Node.js 22

Azure Updates

2025-10-30

Azure Functions will stop supporting Node.js 20 on April 30, 2026. Apps running on Node.js 20 will continue to run, but they will no longer receive security fixes or performance updates; you should plan and perform an upgrade to Node.js 22 beforehand.

github: Upcoming deprecation of CodeQL Action v3

GitHub

2025-10-28

GitHub released CodeQL Action v4 on October 7, 2025; v4 runs on the Node.js 24 runtime. CodeQL Action v3 will be deprecated at the same time as GitHub Enterprise Server (GHES) 3.19.

azure: [Launched] Generally Available: Azure WAF CAPTCHA Challenge for Azure Front Door

Azure Updates

2025-10-28

Microsoft announced general availability of CAPTCHA protection for Azure Web Application Firewall (WAF) when used with Azure Front Door to help defend modern web applications from automated threats.