Microsoft's MDASH agentic scanning harness found 16 CVEs in the Windows networking stack — including 4 Critical RCEs affecting tcpip.sys, IKEv2, DNS, and Netlogon. As a Power Platform Solution Architect, this is the infrastructure your solutions sit on. This post explains how the pipeline works, what the architectural lessons are, and how to use this in client governance and security conversations.
Microsoft formalized the Dataverse MCP server tool shape in June 2026 — 15 named tools that give any MCP-compatible agent grounded, auditable access to your Power Platform environment. This analysis covers the full tool surface organized by risk tier, how to configure clients in VS Code and Copilot Studio, the billing model, and a dedicated security and governance breakdown: Entra ID auth, RBAC, client allowlisting, audit gaps, prompt injection risks, and the delete-override danger in the sample agent instructions.
GitHub Copilot's Plan agent, introduced in Visual Studio in May 2026, adds a deliberate planning phase before any code generation happens. Instead of watching AI modify files in unpredictable directions, you review and approve a detailed Markdown plan grounded in your actual codebase — before a single file changes. This guide covers how the Plan agent works step by step, how to write prompts that produce genuinely useful plans, and how to apply it to a real Dataverse plugin refactoring scenario with working before-and-after code examples.
AI coding agents like Claude Code and GitHub Copilot generate Power Platform solutions at speed — but when the session ends, the reasoning behind every plugin stage, Client API pattern, and architecture decision disappears from the git history. Entire.io is a CLI-first system of record that captures those AI coding sessions as permanent, searchable records linked directly to your commits. This article explains why Power Platform developers need this more than most and how Entire fits into the full code-first development stack alongside microsoft/power-platform-skills and microsoft/Dataverse-skills.
After spending hundreds of hours with all three editors, here's the bottom line: VS Code + Copilot is the reliable workhorse with unmatched ecosystem support. Windsurf + Cascade is the AI-native innovator with continuous context awareness. Cursor is the agentic middle ground with excellent tab completion and Composer mode. Each excels in different scenarios, and for Power Platform developers? The answer depends entirely on your workflow. Let me show you exactly how to choose.
What used to take 45 minutes of clicking through property panels now takes 8 minutes of conversation with AI. Discover how AI-powered canvas app development is bringing version control, real IDEs, and professional development practices to Power Platform—and why this changes everything.
What if you could build canvas apps in 8 minutes instead of 45? What if version control, real IDEs, and CI/CD finally worked with Power Apps? I'm launching a 5-part series that shows you exactly how to do it—with AI-powered development tools that are changing everything.
Traditional GitHub Actions workflows are powerful but deterministic — they can only do what you explicitly tell them. GitHub Agentic Workflows change that. Launched in February 2026, they bring AI coding agents (Copilot CLI, Claude Code, Codex) into GitHub Actions with natural language specifications, security guardrails, and human review. Instead of writing imperative YAML, you describe outcomes in plain language and let AI agents figure out the implementation. This guide explores the six core automation categories and practical applications for Power Platform developers managing PCF controls, Dataverse solutions, and ALM pipelines.
Microsoft Power Pages supports five authentication methods — local credentials, OpenID Connect (OIDC), SAML 2.0, OAuth 2.0 social login, and open/invitation-code registration. This guide explains how each one works, when to use it, how to configure it, and what security risks to watch out for before you go live.
GitHub Copilot CLI Autopilot mode reached GA in February 2026 — but for Power Platform, autonomous PAC CLI execution carries real risk. This article builds a scored Risk Decision Matrix mapping every PAC CLI operation to one of four zones: full Autopilot, conditional, Plan Mode only, or human-only. Includes a calculable Autopilot Safety Score formula, a ready-to-use AGENTS.md template, and preToolUse hook enforcement patterns grounded in Singapore IMDA, AWS, and McKinsey agentic governance frameworks.