2026-04 - 1

2026 (12)

April (12)

security: Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook

Microsoft Security Blog

2026-04-18

Threat actors are using external Microsoft Teams collaboration to impersonate IT helpdesk staff, trick users into granting remote access, and then abuse legitimate tools and admin protocols for lateral movement and data exfiltration. Microsoft Defender can help detect this activity across Teams, endpoint, and identity telemetry.

github: GitHub Copilot CLI now supports Copilot auto model selection

GitHub

2026-04-17

GitHub Copilot CLI now generally supports Copilot auto model selection for all Copilot plans. When enabled, Copilot picks the most efficient model automatically.

azure: [Launched] Generally available: Anthropic Claude Opus 4.7 on Azure Databricks

Azure Updates

2026-04-17

Azure Databricks now supports Anthropic Claude Opus 4.7 via Azure Databricks AI Model Serving. The model is available generally and is positioned for complex extraction and agentic reasoning tasks.

azure: Retirement: Azure Functions runtime v3 on Linux Consumption will stop running September 30, 2026

Azure Updates

2026-04-17

Azure will enforce the retirement of Azure Functions runtime v3 for Linux Consumption–based Function Apps. The runtime was already retired on December 13, 2022, and affected apps will stop running on September 30, 2026.

azure: [Launched] Generally Available: Configure AKS backup using a single Azure CLI command

Azure Updates

2026-04-17

Azure Backup now supports configuring backup for Azure Kubernetes Service (AKS) clusters with a single Azure CLI command. This reduces the manual steps previously required to install and set up the backup extension and related components.

security: Containing a domain compromise: How predictive shielding shut down lateral movement

Microsoft Security Blog

2026-04-17

Microsoft describes a real-world domain compromise where exposure-based containment and predictive shielding slowed attacker activity, stopped credential abuse, and disrupted lateral movement. The post focuses on how containment reduced the threat actor’s momentum during the incident.

azure: Retirement: Azure Kubernetes Service support for Ubuntu 22.04

Azure Updates

2026-04-16

Azure Kubernetes Service will retire support for Ubuntu 22.04 on June 30, 2027. Users should migrate to Ubuntu 24.04 or later before that date to avoid service disruption.

ai: What’s New in Microsoft Foundry Fine-Tuning | April 2026

Microsoft AI Foundry Blog

2026-04-16

April 2026 adds three Reinforcement Fine-Tuning updates in Microsoft Foundry: global training for o4-mini with lower per-token pricing in 12+ regions, new GPT-4.1-based model graders for improved reward signals, and a best-practices guide for RFT workflows.

azure: [In preview] Generally Available: User and group quota reports in Azure NetApp Files

Azure Updates

2026-04-16

Azure NetApp Files now includes user and group quota reporting in preview/GA update. The feature provides visibility into quota limits and usage for NFS, SMB, and dual-protocol volumes.

github: Manage agent skills with GitHub CLI

GitHub

2026-04-16

GitHub CLI now includes `gh skill`, a new command for discovering and installing agent skills. The post says it is intended to make managing skills easier for AI coding agents.

security: Building your cryptographic inventory: A customer strategy for cryptographic posture management

Microsoft Security Blog

2026-04-16

The post outlines a customer approach to building a cryptographic inventory as part of cryptographic posture management and quantum-safe readiness. It references Microsoft Security tools, lifecycle best practices, and partner solutions.

github: Rule insights dashboard and unified filter bar

GitHub

2026-04-16

GitHub announced a new rule insights dashboard and a unified filter bar for repository rulesets. The update is meant to make it easier to spot trends such as blocked-push spikes and bypass patterns.