2026-04 - 8

2026 (12)

April (12)

github: Copilot usage metrics now identify active and passive Copilot code review users

GitHub

2026-04-06

GitHub Copilot usage metrics now show which users have Copilot code review activity and whether that activity was active or passive. Enterprise and organization admins can use these metrics to see how users engage with Copilot code review.

azure: [Launched] Generally Available: Network Security Perimeter for Azure Service Bus

Azure Updates

2026-04-06

Network Security Perimeter support for Azure Service Bus is now generally available. It lets you define a logical network boundary around Service Bus namespaces and other Azure PaaS resources to block unauthorized public access.

security: Inside an AI‑enabled device code phishing campaign

Microsoft Security Blog

2026-04-06

Microsoft describes a new device code phishing campaign that uses AI and end-to-end automation to generate live authentication codes on demand. The result is more scalable account compromise, higher success rates, and longer post-compromise access.

azure: [In preview] Public Preview: Rule impact analysis on Azure Network Watcher

Azure Updates

2026-04-06

Azure Network Watcher now offers rule impact analysis in public preview. It lets you preview how security admin rules will affect your environment before applying them, including validating behavior and identifying possible conflicts.

security: Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

Microsoft Security Blog

2026-04-06

Microsoft says Storm-1175 is running fast-moving Medusa ransomware campaigns that exploit recently disclosed vulnerabilities in web-facing systems for initial access, data theft, and ransomware deployment. The actor uses Medusa ransomware, also referred to as Gaze.exe.

github: Organization runner controls for Copilot cloud agent

GitHub

2026-04-03

GitHub added organization-level runner controls for Copilot cloud agent development environments. Copilot cloud agent tasks now start on GitHub Actions, and orgs can control which runners are used instead of relying only on the default GitHub-hosted runner.

github: GPT-5.1 Codex, GPT-5.1-Codex-Max, and GPT-5.1-Codex-Mini deprecated

GitHub

2026-04-03

GitHub deprecated GPT-5.1 Codex, GPT-5.1-Codex-Max, and GPT-5.1-Codex-Mini across all GitHub Copilot experiences on April 1, 2026. The change applies to Copilot Chat, inline edits, ask and agent modes, and code completions.

github: Organization firewall settings for Copilot cloud agent

GitHub

2026-04-03

GitHub added organization-level firewall settings for Copilot cloud agent. The built-in agent firewall can now be configured centrally to control internet access and help reduce prompt injection and data exfiltration risk.

github: Copilot cloud agent signs its commits

GitHub

2026-04-03

Copilot cloud agent now signs every commit it creates. These commits show up as Verified on GitHub, indicating they were made by the agent and not altered after signing.

github: Copilot SDK in public preview

GitHub

2026-04-02

GitHub Copilot SDK is now in public preview. It provides building blocks to embed Copilot’s agentic capabilities into applications, workflows, and platform services.

github: Copilot usage metrics now includes per-user GitHub Copilot CLI activity in organization reports

GitHub

2026-04-02

GitHub Copilot organization reports now include per-user GitHub Copilot CLI activity. This completes CLI metrics coverage across enterprise-, user-, and organization-level reporting.

github: GitHub Actions: Early April 2026 updates

GitHub

2026-04-02

GitHub Actions added entrypoint and command overrides for service containers. The update also includes new security features: OIDC custom properties and VNET failover.