Help Net Security AIHelp Net Security AI · GitHub 联合 Microsoft Applied Sciences 推出基于 ModernBERT 的分类器，扩展 push protection：在代码推送进入仓库历史前识别无固定格式的密钥，可在 2 毫秒内批量评估疑似密钥。GitHub 称其有望使 push protection 能拦截的密钥数量增加一倍以上。该功能目前处于 private preview，并计划于 10 月晚些时候面向 Enterprise Cloud 及部分用户开放。
Microsoft Windows Developer Blog, X @simonwMicrosoft Windows Developer Blog · 2 sources · 2 reports · Microsoft announced general availability of Microsoft Execution Containers (MXC), providing a policy-driven execution isolation layer for AI agents that restricts the files and network resources accessible to model-generated code, plugins, tools, or the entire agent, with policies enforced by the container at runtime and the agent itself unable to escalate its own privileges. MXC offers four isolation backends: process containers (Windows 11, macOS, Linux), session containers supported only on Windows, WSL containers, and experimental MicroVM. Another report says Microsoft released an open-source cross-platform sandbox library, MxC, that provides isolated environments for agents on Windows, macOS, and Linux, using processcontainer, bubblewrap, and seatbelt underneath for sandboxing; the solution targets developers managing multiple sandboxes for agents, deeply integrates with agent ID on Windows, and covers process, session, and micro VM levels.
