OffSequence4h ago
🚨 CVE-2026-42826 (CRITICAL, CVSS 10.0) in Azure DevOps exposes sensitive data to unauthorized actors remotely. Microsoft has released a fix — ensure your environment is fully updated. More info: https://radar.offseq.com/threat/cve-2026-42826-cwe-200-exposure-of-sensitive-infor-a9bb0e45 #OffSeq #AzureDevOps #Vuln #InfoSec
Florian  Apr 30

I just noticed a new(?) checkbox when creating a PR from main to qa in #AzureDevops: "Set auto-complete"

I was so naive to think it will just sets the new PR to auto-complete (if all checks are green).
But no, of course not, this is #Microsoft Enterprise Software.

What it actually did was complete the PR as expected ... and automatically delete the source branch! And it didn't even care that the main branch was PROTECTED!

https://developercommunity.microsoft.com/t/11070507#T-N11070920

OneWheelGeekApr 30

Ah yes, Azure DevOps—
where every git fetch is a thrilling game of chance.

Will it work? Will it hang?
Will SSH just… silently time out for 3 minutes?

Modern SSH keys? Absolutely not.
But intermittent connection failures?
Delivered reliably, several times a day.

#Azure #AzureDevOps

holgerMar 29

Azure DevOps is moving some auth flows to Entra token issuance this summer, so token payloads will stop being readable by clients.

The exact mechanism isn’t specified (JWE would be my guess), but anything decoding tokens to read claims like UPN or tenant ID will break — no graceful degradation.

Most likely to hit internal tooling and scripts, but worth a check either way.

Supported path: Azure DevOps REST APIs for user and org data.

https://devblogs.microsoft.com/devops/authentication-tokens-are-not-a-data-contract/

#AzureDevOps #DevOps #Entra

Authentication Tokens Are Not a Data Contract - Azure DevOps Blog

Authentication tokens exist to answer one question: is this caller authorized to do this? They are not intended to be a stable data interface, a schema you can depend on, or an input into application logic. If your application decodes tokens and reads claims from them, this is an important heads-up. Token Claims Were Never […]

Azure DevOps Blog
anchoreMar 16
We just updated our guide on integrating Anchore into your Azure DevOps pipelines! Learn how to use anchorectl for distributed analysis (local SBOM generation) or centralized analysis via a staging registry. Secure your software supply chain without slowing down your devs.
Read more: https://anchore.com/blog/anchore-azure-devops/
#DevSecOps #AzureDevOps #ContainerSecurity #SBOM
Integrating Anchore Security Scanning into Your Azure DevOps Pipeline | Anchore

With a few lines of yaml, add security to your Azure DevOps pipeline to keep non-compliant containers from reaching production environments.

Anchore
anchoreMar 7
Don't let un-scanned containers reach production. 📦🛡️
Our latest blog update shows you exactly how to add an Anchore security gate to your Azure DevOps pipeline using anchorectl.Automate SBOM generationEnforce policy complianceFail builds on high-risk vulnerabilities
Read the guide: https://anchore.com/blog/anchore-azure-devops/
#CloudNative #AzureDevOps #DevOps
Integrating Anchore Security Scanning into Your Azure DevOps Pipeline | Anchore

With a few lines of yaml, add security to your Azure DevOps pipeline to keep non-compliant containers from reaching production environments.

Anchore
Alex o_OFeb 25

Azure DevOps, världens mest moderna utvecklingsplattform. Med cutting edge teknologi som denna, how can Europe even compete??

#Microslop #Microsoft #Azure #Azzure #AzureDevOps #AzureDevOops

Justin BirdFeb 19

Happening Today! (2026-02-19)

Kev Chant joins us to discuss #MicrosoftFabric and #AzureDevOps - the story so far for 2026. Learn how to implement #CICD, Git integration, and deployment best practices. https://www.meetup.com/fabricpowerbiwales/events/312430627

Microsoft Fabric and Azure DevOps - The story so far for 2026 with Kev Chant, Thu, Feb 19, 2026, 6:00 PM | Meetup

**Description** Microsoft Fabric is growing in popularity as a Microsoft Data Platform offering. However, a lot of people feel challenged about how to implement CI/CD. In

Meetup
Justin BirdFeb 12

How do you actually implement CI/CD for #MicrosoftFabric? On 2026-02-19, Data Platform MVP Kev Chant shows us the current state of #AzureDevOps integration including Git workflows, branching strategies, and deployment best practices.

Sign up at: https://www.meetup.com/fabricpowerbiwales/events/312430627

Microsoft Fabric and Azure DevOps - The story so far for 2026 with Kev Chant, Thu, Feb 19, 2026, 6:00 PM | Meetup

**Description** Microsoft Fabric is growing in popularity as a Microsoft Data Platform offering. However, a lot of people feel challenged about how to implement CI/CD. In

Meetup
Justin BirdFeb 9
Want to implement CI/CD for Microsoft Fabric? On 2026-02-19, Kev Chant walks us through Azure DevOps integration with Fabric. We will be covering Git workflows, branching strategies, and deployment approaches for Data Warehouses and SQL databases. https://www.meetup.com/fabricpowerbiwales/events/312430627
#MicrosoftFabric #AzureDevOps #DataPlatform