Security - 8

2025 (12)

October (11)

azure: [Launched] Generally Available: Microsoft Entra ID token refresh code samples in Python and .NET

Azure Updates

2025-10-13

Microsoft made generally available Python and .NET code samples demonstrating Entra ID token refresh for Azure Database for PostgreSQL to help securely manage authentication tokens when connecting with Entra ID.

github: CodeQL 2.23.2 adds additional detections for Rust, and improves accuracy across languages

GitHub

2025-10-09

CodeQL 2.23.2 is a maintenance release for the static analysis engine used by GitHub code scanning. The release adds additional Rust security detections and improves analysis accuracy across multiple languages.

azure: [Launched] Generally Available: Custom port support for Azure Database for MySQL – Flexible Server

Azure Updates

2025-10-09

Azure Database for MySQL - Flexible Server now generally supports configuring a custom server port (25001–26000) at creation for both public and private access-enabled servers, making it easier to integrate with existing applications and meet security requirements (default MySQL port remains 3306).

azure: [Launched] Generally Available: Azure Firewall updates - Customer provided public IP address support in secured hubs

Azure Updates

2025-10-09

Azure Firewall in Virtual WAN secured hubs is now generally available with support for customer-provided public IP addresses, allowing organizations to bring their own public IPs when deploying Azure Firewall in a secured Virtual WAN hub.

security: Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog

Microsoft Security Blog

2025-10-09

Microsoft highlights security as a central theme at Ignite 2025, offering dedicated sessions and hands-on experiences focused on securing agentic AI for security professionals and leaders. The blog points readers to the session catalog for details and scheduling.

azure: [Launched] Generally Available: Firmware analysis enabled by Azure Arc

Azure Updates

2025-10-09

Azure Arc's firmware analysis capability is now generally available, providing deep visibility into the software that runs on IoT, OT, and network devices to improve security visibility for systems that often operate as black boxes.

dotnet: Developer and AI Code Reviewer: Reviewing AI-Generated Code in .NET

.NET

2025-10-07

Practical guidance for reviewing AI-generated .NET code, emphasizing that AI output should be treated as a starting point and validated through tests, linters, security checks, and clear team processes to maintain quality and productivity.

github: Secret Protection expands default pattern support – September 2025

GitHub

2025-10-07

GitHub updated the Secret Protection default pattern set in September 2025, adding new secret detection patterns and upgrading existing ones to improve coverage across different secret types. The changes expand built-in secret scanning so repositories using the default patterns benefit from broader, more accurate detection without manual configuration.

github: Enterprise access restrictions now supports multiple enterprises

GitHub

2025-10-06

GitHub Enterprise Cloud customers with multiple Enterprise Managed Users (EMU) accounts can now use a single proxy header to block traffic to github.com that originates outside any of their enterprises. This update lifts the prior limitation that tied enterprise access restrictions to a single enterprise, simplifying network configuration for organizations with multiple EMU accounts.

azure: [Launched] Generally Available: Cross-tenant customer-managed keys for Azure NetApp Files volume encryption

Azure Updates

2025-10-03

Azure NetApp Files now generally supports cross-tenant customer-managed keys (CMK) for volume encryption, letting customers use and control their own encryption keys across different Azure tenancies to increase control and flexibility.

azure: [In preview] Public Preview: Azure SQL updates for late September 2025

Azure Updates

2025-10-01

In late September 2025 Azure SQL announced a Public Preview feature that adds immutability to long-term retention (LTR) backups to protect backups from ransomware and tampering.

September (1)

github: Secret scanning adds validators for MongoDB, Meta, and Microsoft Azure

GitHub

2025-09-30

GitHub Secret Scanning has added validity-check validators for secrets related to MongoDB, Meta, and Microsoft Azure. These new checks augment existing validators to improve detection of provider-specific credentials and prevent accidental commits of valid secrets.