Sr. Content Developer at Microsoft, working remotely in PA, TechBash conference organizer, former Microsoft MVP, Husband, Dad and Geek.
151886 stories
·
33 followers

#545: OWASP Top 10 (2025 List) for Python Devs

1 Share
The OWASP Top 10 just got a fresh update, and there are some big changes: supply chain attacks, exceptional condition handling, and more. Tanya Janca is back on Talk Python to walk us through every single one of them. And we're not just talking theory, we're going to turn Claude Code loose on a real open source project and see what it finds. Let's do it.

Episode sponsors

Temporal
Talk Python Courses

DevSec Station Podcast: www.devsecstation.com
SheHacksPurple Newsletter: newsletter.shehackspurple.ca
owasp.org: owasp.org
owasp.org/Top10/2025: owasp.org
from here: github.com
Kinto: github.com
A01:2025 - Broken Access Control: owasp.org
A02:2025 - SecuA02 Security Misconfiguration: owasp.org
ASP.NET: ASP.NET
A03:2025 - Software Supply Chain Failures: owasp.org
A04:2025 - Cryptographic Failures: owasp.org
A05:2025 - Injection: owasp.org
A06:2025 - Insecure Design: owasp.org
A07:2025 - Authentication Failures: owasp.org
A08:2025 - Software or Data Integrity Failures: owasp.org
A09:2025 - Security Logging and Alerting Failures: owasp.org
A10 Mishandling of Exceptional Conditions: owasp.org
https://github.com/KeygraphHQ/shannon: github.com
anthropic.com/news/mozilla-firefox-security: www.anthropic.com
generalpurpose.com/the-distillation/claude-mythos-what-it-means-for-your-business: www.generalpurpose.com
Python Example Concepts: blobs.talkpython.fm

Watch this episode on YouTube: youtube.com
Episode #545 deep-dive: talkpython.fm/545
Episode transcripts: talkpython.fm

Theme Song: Developer Rap
🥁 Served in a Flask 🎸: talkpython.fm/flasksong

---== Don't be a stranger ==---
YouTube: youtube.com/@talkpython

Bluesky: @talkpython.fm
Mastodon: @talkpython@fosstodon.org
X.com: @talkpython

Michael on Bluesky: @mkennedy.codes
Michael on Mastodon: @mkennedy@fosstodon.org
Michael on X.com: @mkennedy




Download audio: https://talkpython.fm/episodes/download/545/owasp-top-10-2025-list-for-python-devs.mp3
Read the whole story
alvinashcraft
13 seconds ago
reply
Pennsylvania, USA
Share this story
Delete

Microsoft Agent Framework releasing version 1.0

1 Share
From: Microsoft Developer
Duration: 19:49
Views: 520

Microsoft Agent Framework has reached version 1.0 — making production-grade agent development feel like normal software development. In this episode, Shawn Henry and Rong Lu walk through what's new in the v1.0 GA release: stable APIs, multi-agent orchestration with handoff patterns, and support for Python and .NET. They also demo Foundry Toolkit for VS Code (formerly AI Toolkit), now GA — a unified IDE experience for building agents with a single "Create Agent" entry point, Agent Inspector for F5 debugging, evaluation-as-tests in pytest, and deep GitHub Copilot integration. See the complete developer journey from local development to Foundry deployment without glue code.

✅ Chapters:
00:15 MAF - Microsoft Agent Framework GA Announcement
02:10 Demo - Getting started with MAF using VS Code Extension
02:44 Demo - using the new Foundry/MAF Skills with Copilot
04:10 Demo - Building a Multi-Agent workflow using Copilot
06:36 Demo - Debugging a Multi-Agent workflow using Agent Inspector
12:15 What improved on MAF since Public preview and What's coming
16:54 How to Contribute and Getting Started

✅ Resources:
Foundry Toolkit for VS Code: https://aka.ms/foundrytk
Microsoft Agent Framework on GitHub: https://aka.ms/AgentFramework
AI Agents for Beginners: https://aka.ms/ai-agents-beginners
Blog post: https://aka.ms/DeployingAgents-blog
MAF 1.0 Announcement: https://aka.ms/AgentFramework1.0-blog

📌 Let's connect:
Jorge Arteiro | https://www.linkedin.com/in/jorgearteiro
Shawn Henry | https://www.linkedin.com/in/shawn-patrick-henry/
Rong Lu | https://www.linkedin.com/in/rongl/

Subscribe to the Open at Microsoft: https://aka.ms/OpenAtMicrosoft

Open at Microsoft Playlist: https://aka.ms/OpenAtMicrosoftPlaylist

📝Submit Your OSS Project for Open at Microsoft https://aka.ms/OpenAtMsCFP

New episode on Tuesdays!

Read the whole story
alvinashcraft
32 seconds ago
reply
Pennsylvania, USA
Share this story
Delete

Get Started with Foundry Toolkit for VS Code

1 Share
From: Microsoft Developer
Duration: 2:35
Views: 321

Whether you’re exploring your first model, shipping a production agent, or squeezing performance from edge hardware, Microsoft Foundry Toolkit for VS Code meets you where you are.

To get started, visit aka.ms/foundrytk.

Read the whole story
alvinashcraft
42 seconds ago
reply
Pennsylvania, USA
Share this story
Delete

Introducing SQL projects in SSMS | Data Exposed

1 Share
From: Microsoft Developer
Duration: 13:16
Views: 398

You have a database in production. How do you get it into source control — and keep it there? With SSMS 22.5, you can now import your database into a SQL project — a code-based, human-readable definition of your schema — edit and validate without impacting the original database, and publish changes with confidence. In this Data Exposed episode, we introduce SQL projects in SSMS with the new Database DevOps workload in preview. We'll also show how the same project file works across VS Code, GitHub Actions, and Azure DevOps — so your database development process can grow with your team across any tool.

0:00 Introduction
2:13 Demos
12:00 What's next

✅ Resources:
https://aka.ms/sqlprojects
https://aka.ms/ssms-sqlprojects

📌 Let's connect:
Twitter - Anna Hoffman, https://twitter.com/AnalyticAnna
Twitter - AzureSQL, https://aka.ms/azuresqltw

🔴 Watch even more Data Exposed episodes: https://aka.ms/dataexposedyt

🔔 Subscribe to our channels for even more SQL tips:
Microsoft Azure SQL: https://aka.ms/msazuresqlyt
Microsoft SQL Server: https://aka.ms/mssqlserveryt
Microsoft Developer: https://aka.ms/microsoftdeveloperyt

#AzureSQL #SQL #LearnSQL

Read the whole story
alvinashcraft
49 seconds ago
reply
Pennsylvania, USA
Share this story
Delete

Using Microsoft Agent Framework with Foundry managed memory

1 Share
From: Microsoft Developer
Duration: 32:32
Views: 360

Production agents need to remember. In this episode, we dive into Memory in Foundry Agent Service — a managed, long-term memory layer that turns stateless LLM calls into stateful, continuous agents. Lewis Liu and Amy Boyd walk through how memory is natively integrated with Microsoft Agent Framework and LangGraph, enabling agents to persist user preferences, conversation context, and task outcomes across sessions — with zero infrastructure overhead. See how per-user memory scoping, automatic memory extraction, and CRUD APIs give developers full control while keeping enterprise governance built in.

✅ Chapters:
00:17 Introduction MAF - Microsoft Agent Framework and Foundry Memory
00:45 Why we need Foundry Memory
01:40 What's Foundry Memory
03:20 How Memory helps Agents - Use Cases
07:31 Foundry Memory Key concepts and Features
14:33 Foundry Memory - What's under development
16:55 Foundry Memory and MAF - Demo 1
20:25 Foundry Memory and MAF - Demo 2
24:24 Foundry Memory and MAF - Demo 3
30:50 Foundry Memory Public Preview and What's Next

✅ Resources:
Foundry Toolkit for VS Code: https://aka.ms/foundrytk
Microsoft Agent Framework on GitHub: https://aka.ms/AgentFramework
AI Agents for Beginners: https://aka.ms/ai-agents-beginners
Blog post: https://aka.ms/DeployingAgents-blog
MAF 1.0 Announcement: https://aka.ms/AgentFramework1.0-blog

📌 Let's connect:
Jorge Arteiro | https://www.linkedin.com/in/jorgearteiro
Amy Boyd | https://www.linkedin.com/in/amykatenicho/
Lewis Liu | https://www.linkedin.com/in/lewisxl/

Subscribe to the Open at Microsoft: https://aka.ms/OpenAtMicrosoft

Open at Microsoft Playlist: https://aka.ms/OpenAtMicrosoftPlaylist

📝Submit Your OSS Project for Open at Microsoft https://aka.ms/OpenAtMsCFP

New episode on Tuesdays!

Read the whole story
alvinashcraft
56 seconds ago
reply
Pennsylvania, USA
Share this story
Delete

How to use agents, skills, and instructions in Copilot CLI | Tutorial for beginners

1 Share
From: GitHub
Duration: 6:22
Views: 2,320

In episode 6 of our GitHub Copilot CLI for beginners series, we explore how to deeply customize your AI coding assistant. We walk you through setting up instructions, skills, and custom agents to ensure Copilot follows your team's exact coding standards. Learn how to generate project-level instructions, automate pull requests with agent skills, and run specialized tasks like accessibility reviews. These tools work in perfect harmony to keep your codebase consistent.

GitHub Copilot CLI for Beginners: https://github.com/github/copilot-cli-for-beginners?utm_source=youtube-cli-beginners-series-episode6-repo-cta&utm_medium=social&utm_campaign=copilot-cli-ga-phase-two-2026

#GitHubCopilot #CopilotCLI #AI

Stay up-to-date on all things GitHub by connecting with us:

YouTube: https://gh.io/subgithub
Blog: https://github.blog
X: https://twitter.com/github
LinkedIn: https://linkedin.com/company/github
Insider newsletter: https://resources.github.com/newsletter/
Instagram: https://www.instagram.com/github
TikTok: https://www.tiktok.com/@github

About GitHub
It’s where over 180 million developers create, share, and ship the best code possible. It’s a place for anyone, from anywhere, to build anything—it’s where the world builds software. https://github.com

Read the whole story
alvinashcraft
1 minute ago
reply
Pennsylvania, USA
Share this story
Delete
Next Page of Stories