// tag
#Security
16 posts
NTLM Is Ending in Git/libcurl: Azure DevOps Server Teams Need a Real Migration Plan
The September 2026 NTLM removal is not a minor compatibility issue; it is an identity architecture deadline for on-prem Azure DevOps Server environments.
.NET 8 and .NET 9 End of Support: Treat This as a Delivery Deadline
November 10, 2026 is not just a support date; it is the point where postponed upgrade risk becomes explicit.
The Real Agent UX Win Is Safe Autonomy, Not Maximum Autonomy
File access, approvals, and memory design are the practical triad for trustworthy agent behavior in production.
Immutable Backup for Cosmos DB Is the Kind of Feature You Appreciate Too Late
Azure Backup for Azure Cosmos DB now adds immutable backups and long-term retention in public preview. The key point is not just recovery, but improving resilience and evidence preservation for regulated or high-risk workloads.
FIDES Is the Kind of Deterministic Agent Security Story I Want to See More Of
The new FIDES capabilities in Agent Framework matter because they move prompt injection defense away from heuristics and toward enforceable policy based on labeled content and middleware checks.
MAESTRO, Defense-in-Depth, and Why SQL Server Is Now a Security Boundary for AI
Agentic AI introduces threats traditional STRIDE models weren't designed for. Here's how Microsoft SQL maps to the MAESTRO framework to provide a governed execution boundary.
NL2SQL Is the SQL Injection of the Agentic Age
Before you let an agent query your database with natural language, read this. NL2SQL looks simple until you think through schema completeness, indeterminism, and what SQL MCP Server actually solves.
Building Agents Is the Easy Part — Running Them Safely Is the Hard Part
Microsoft Agent Framework and Agent Governance Toolkit pair up to enforce runtime policy, govern tool calls, and provide Merkle-chained audit logs — without touching your agent prompts.
NuGet Package Pruning in .NET 10 Is the Kind of Improvement You Feel Everywhere
NuGet package pruning in .NET 10 reduces false-positive vulnerability reports, simplifies the restore graph, and improves restore performance. It is one of those platform changes that quietly makes daily work better.
Agent Governance Toolkit MCP Extensions Make the Secure Path Much Easier in .NET
The new Agent Governance Toolkit MCP extensions for .NET take policy enforcement, startup scanning, and response sanitization and place them directly into the MCP server builder flow. That is exactly the kind of secure-by-default story I want to see.
Your AI Agent Has an Identity Problem (And Here's the Template That Solves It)
A new azd template from Curity and Microsoft shows how to build AI agents that use short-lived OAuth tokens with fine-grained scopes — so agents can never see data they shouldn't.
Private Endpoints, VNets, NSGs — Aspire Handles the Networking Now
Aspire's new Azure enterprise networking support lets you model VNets, private endpoints, NAT gateways, NSGs, and Network Security Perimeters directly in your AppHost — no infrastructure drift required.
Governing MCP Tool Calls in .NET with the Agent Governance Toolkit
The Agent Governance Toolkit is a .NET 8+ package for scanning MCP tool definitions for threats, enforcing YAML-based policy, and sanitizing tool output — covering OWASP MCP Top 10.
SQL Server 2025 as Your Agent-Ready Database: Security, Backup, and MCP in One Engine
The final part of the Polyglot Tax series tackles the hard production problems: unified Row-Level Security across relational, JSON, graph, and vector data — plus cryptographic audit trails and MCP integration that make SQL Server 2025 genuinely agent-ready.
Patch This Now: .NET 10.0.7 OOB Security Update for ASP.NET Core Data Protection
.NET 10.0.7 is an out-of-band release fixing a security vulnerability in Microsoft.AspNetCore.DataProtection — the managed authenticated encryptor was computing HMAC over the wrong bytes, leading to potential elevation of privilege. Update immediately.
.NET April 2026 Servicing — Security Patches You Should Apply Today
The April 2026 servicing release patches 6 CVEs across .NET 10, .NET 9, .NET 8, and .NET Framework — including two remote code execution vulnerabilities.