Top 5

  1. Agent 365 MCP server governance is GA: Microsoft Agent 365 gives admins a unified console to view all MCP servers, plugins, and connectors in use across the tenant, block risky tools outright, and approve or reject new tool requests before agents act on them. If you have any Copilot Studio or Copilot Chat agents in production, this is your control plane for agent tool access - review it now before your agent estate grows further.

  2. MDE AI agent runtime protection configurable from Intune: A new Intune endpoint security template lets you enforce Audit or Block mode for AI agent runtime activity on Windows, covering both Intune-managed and MDE security settings management devices. This is the enforcement layer for the AI governance posture Microsoft has been building toward - stand up Audit mode first to baseline behavior before moving to Block.

  3. Cloud PKI now available for GCC High tenants: Intune Cloud PKI reaches GCC High, removing the last major on-premises dependency for certificate-based authentication in sovereign environments. GCC High tenants can now automate certificate issuance, renewal, and revocation for Wi-Fi, VPN, and app auth without NDES or the Intune Certificate Connector.

  4. EvilTokens device code phishing platform disrupted: Microsoft DCU, in collaboration with partners, disrupted the EvilTokens PhaaS infrastructure that automated device code phishing with AI-assisted lures and token theft. The threat is real and the TTP is still live elsewhere - if you haven’t restricted device code flow in Conditional Access, now is the time.

  5. CVE-2026-81355 VHD Miniport Driver RCE rated Critical: This Critical-rated remote code execution vulnerability in the Virtual Hard Disk Miniport Driver received an acknowledgment update this week. Confirm patched build versions are deployed across your Windows fleet; this affects environments using VHD-backed workloads including Windows 365 and on-premises Hyper-V.

Identity & Access

  • Storm-3168: Agentic-driven cloud attacks using compromised service principals [GA] - Service principal compromise is the entry point here: Storm-3168 (JADEPUFFER-linked) uses stolen SP credentials to conduct Azure reconnaissance, delete resources, and harvest additional credentials. Audit your service principal credential hygiene, enable Entra ID’s workload identity risk policies, and verify that SP permissions follow least-privilege; over-permissioned SPs are the blast radius multiplier in every documented incident.

  • Dynamics 365 Field Service: Track costs for non-billable field work [GA] - Field Service Work Orders can now connect to a project as a financial container for internal operational work, letting labor, material, and expense costs flow through project accounting without requiring a separate billing workflow. Relevant if your organization uses Field Service for both customer-facing and internal maintenance work and needs cost visibility without invoice generation.

Endpoint & Device Management

  • Microsoft Cloud PKI support for US Government GCC High [GA] - GCC High tenants can now build and manage a fully cloud-based PKI through Intune, eliminating the requirement for on-premises CA infrastructure, NDES, or the Intune Certificate Connector. Certificate-based auth for Wi-Fi, VPN, and apps is now fully manageable from the Intune admin center in sovereign cloud.

  • Faster delivery of Win32 apps [GA] - Intune now uses push notifications to signal managed devices when admin-initiated or service-side Win32 app changes occur, so devices check in immediately rather than waiting for the next polling cycle. Expect noticeably faster app deployments and updates, particularly in large-scale rollouts where polling lag was a visible issue.

  • Require Managed Home Screen authentication for protected app activities [GA] - MAM-integrated apps now redirect users to MHS for sign-in or PIN before allowing access to protected content, preventing authentication bypass at the app layer on Android Enterprise. Assign an app protection policy to both the target app and the signed-in user - no additional policy setting is required to activate the behavior.

  • Faster Win32 app delivery after Windows enrollment [GA] - The Intune Management Extension now polls for app assignments immediately after the Enrollment Status Page completes, closing the gap where required Win32 apps not installed during ESP would sit idle until the next scheduled check-in. Autopilot-heavy environments with large ESP-excluded app sets will see the most benefit.

  • New Apple settings in the Settings Catalog for iOS/iPadOS and macOS [GA] - The Intune Settings Catalog adds new Apple-sourced options covering app controls, Apple Intelligence, network and web-content filtering, and the macOS login window. If you manage Apple fleets and have been waiting on specific controls for AI features or login window customization, check the catalog for your target OS version.

  • Assignment filters for Android Settings Catalog policies [GA] - Intune assignment filters now work with Android Enterprise and AOSP Settings Catalog policies, enabling include/exclude targeting based on device properties. This closes a gap that previously required separate policy sets to approximate the same scoping behavior.

  • Automatically launch Microsoft Defender for Endpoint during Android Enterprise device setup [GA] - For corporate-owned Android Enterprise devices, Intune can now automatically open MDE during out-of-box setup so users complete Defender’s initial configuration as part of enrollment rather than skipping it. Requires the Defender connector, Grant MTD role permissions toggle, and the Defender app assigned as required before enabling in Endpoint security > Defender for Endpoint.

  • Upgrade an existing Android Enterprise connection to a managed Google domain [GA] - Tenants that originally connected Android Enterprise with a Gmail account can now upgrade to a managed Google domain and tie the Google-Intune connection to a Microsoft Entra work account. Navigate to Devices > Enrollment > Android > Managed Google Play to start the upgrade; this is optional but recommended for enterprise governance.

  • Bulk manage eSIMs on corporate-owned Android Enterprise devices [GA] - Admins can now activate eSIMs on up to 100 corporate-owned Android Enterprise devices at once (Android 15+) via a carrier activation server URL, and bulk wipe operations preserve eSIM data plans by default with an explicit opt-in to remove them. Personally owned work profile devices are excluded from both actions.

  • Configure MDE AI agent runtime protection for Windows [GA] - A new Intune endpoint security template surfaces MDE’s AI agent runtime protection settings for Windows, with Audit mode for detection-only visibility and Block mode for pre-execution enforcement. Start with Audit to establish a behavioral baseline before committing to Block, especially in environments where AI-assisted tooling is already embedded in dev or analyst workflows.

  • Onboard MDM compliance partners with new self-service functionality [GA] - Compliance partners can now self-onboard their connectors using Intune documentation, contracts, and validation hooks, and admins can opt in by providing vendor information directly in the admin center. This expands the ecosystem of third-party compliance solutions available without waiting for Microsoft-managed connector development cycles.

  • Microsoft Intune and Apple OS 27: New settings, support, and platform changes [GA] - Intune ships day-zero support for Apple OS 27, including new DDM configurations via the Settings Catalog, continued investment in data-driven infrastructure for rapid settings delivery, and compatibility for existing features across iOS/iPadOS and macOS 27. Review the full post for new settings that may need policy coverage in your Apple fleet before OS 27 adoption accelerates.

  • Giving you more control over camera, microphone, and location [GA] - Windows Insiders in the Experimental channel can now manage camera, microphone, and location access on a per-desktop-app basis rather than via a single global toggle. This is an Insider-channel preview only for now; watch for the Intune policy surface when it moves toward broader availability, as it has direct implications for app permission governance.

Collaboration & Productivity

  • SharePoint AI innovations hit GA, powering new Copilot app and agents [Preview] - SharePoint’s AI-enriched content infrastructure now underpins the new Copilot app experience through Work IQ, and Microsoft’s own evaluations show a 17-point improvement in Copilot response quality when content has been structured and enriched by Copilot. If your organization’s SharePoint content is poorly organized, that directly degrades Copilot output quality - this is the business case for a content hygiene project.

  • A Copilot Agent Writes the Status Report [GA] - A shared Copilot agent built in Agent Builder can generate a standardized weekly status report by reasoning over a user’s meetings, emails, and a reference template defined by the admin, producing outputs in the organization’s own format. This pattern is repeatable across any team that has a consistent reporting cadence and a template already in use.

  • What Can a Copilot Agent Actually Read? [GA] - Copilot Agent Builder agents can be grounded in SharePoint, OneDrive, Outlook email and calendar, Teams chats, channels, and recorded meetings, plus business systems via Copilot connectors. Understanding the full data access surface of every deployed agent is a prerequisite for accurate data governance - verify that agents are scoped to only the knowledge sources they actually need.

  • OneDrive: Prompt gallery for Copilot [Preview] - A new Prompt Gallery in OneDrive surfaces ready-to-use prompts for file tasks across Create, Analyze, Find, and Collaborate categories, accessible from the Copilot button or the chat pane’s + button. GA is targeted for October CY2026; no admin action required, but user readiness teams should factor this into adoption communications.

  • Outlook: Send availability in Outlook mobile apps [GA] - Send Later availability returns to Outlook iOS and Android, with iOS also gaining improved keyboard and VoiceOver accessibility for this feature. GA is targeted for October CY2026.

  • Microsoft Teams: Multi-line call history tabs in the Calls app [GA] - Multi-line Teams Phone users get per-line tabs in the Calls app, separating call history, voicemails, and recordings by line. GA targets November CY2026; relevant for contact center and front-line phone deployments where users manage multiple lines.

  • Planner: Refreshed experience and new capabilities [GA] - Planner is shipping a modernized interface with improved navigation, responsive layouts, consistency across Teams and web, and Goals in basic plans. GA is targeted for September CY2026, meaning this may already be rolling out to your tenant.

  • Planner: Refreshed experience and new capabilities [GA] - A second roadmap entry tracks the same Planner refresh wave, confirming the September CY2026 GA target for the updated interface and Goals feature across both the Teams app and Planner for the web.

AI & Copilot

  • Introducing the new Copilot with Home, Code and Autopilot [GA] - Microsoft has announced a reimagined Copilot experience organized around Home, Code, and Autopilot modes, positioning the product as a unified surface for individual work and organizational automation. This is the product direction that the Agent Builder, Work IQ, and agent governance investments are all converging toward - brief your leadership on the roadmap shift.

  • How to Tell If Your Copilot Agent Is Used [GA] - The new Monitor tab in Agent Builder surfaces total sessions, daily active users, average messages per session, average duration, engagement over time, and which knowledge sources are actually used in conversations. Agents showing real adoption can be promoted to the org’s Agent Store catalog via the agent menu - this is the operational loop admins should be running on any deployed agent.

  • One Prompt Builds Your Copilot Agent [GA] - Copilot Agent Builder generates an agent’s name, description, instructions, skills, knowledge sources, and suggested prompts from a single natural-language description, scoped only to the SharePoint sites and files you specify. The scoping behavior is the governance-relevant point: agents only answer from explicitly approved sources, which is worth communicating to users building their own agents.

  • What’s new in Microsoft Security: September 2026 [GA] - Microsoft’s September security roundup highlights discovering and controlling local AI agents, extending Zero Trust to agent traffic, and strengthening SOC foundations - all themes that intersect directly with the Agent 365 and MDE runtime protection launches this week. Read this alongside the Agent 365 governance announcement to get the full security framing.

  • Teach Your Copilot Agent a Repeatable Skill [GA] - Skills in Agent Builder define repeatable tasks in natural language with no code required; Agent Builder generates one from your initial prompt and you can layer additional skills on top, such as a weekly status email skill built from an actual email template. This is the mechanism for encoding organizational process standards into agents rather than relying on users to prompt consistently.

  • How to Share a Copilot Agent With Your Team [GA] - Sharing a Copilot agent works like sharing a file: you add people or groups and assign Use or Edit permissions individually, after which the agent appears in the Agent Store and is delivered via email notification. The Edit permission is the governance-sensitive one - control who can modify agent instructions, skills, and knowledge sources, not just who can use the agent.

  • Building the system for AI at work [GA] - Microsoft’s AI at Work blog outlines the broader system architecture behind the Copilot platform, framing Work IQ, agents, and the Agent Store as an integrated stack. Worth reading for context on where Microsoft is taking enterprise AI infrastructure over the next 12 months.

  • Modern List in Power Pages is now generally available [GA] - Power Pages’ Modern List component is GA, delivering Fluent UI styling, infinite scrolling, inline filtering, shimmer loading, and both low-code and custom JavaScript customization for Dataverse data presentation. Teams building external-facing portals on Power Pages should migrate list components to the modern experience.

  • Create agents fast with Agent Builder in Copilot [Preview] - The full Microsoft Mechanics walkthrough covers the complete Agent Builder workflow: single-prompt creation, knowledge scoping, skill definition, preview and test, sharing with permissions, Monitor tab analytics, and Agent Store publication. Watch this before your first agent governance review to understand the full capability surface you’re governing.

  • Governance is becoming agentic, too: How enterprises can operate AI at scale [GA] - Copilot Studio’s governance blog frames the core operational questions for a growing agent estate: what agents exist, who owns them, what data and systems they can reach, what they cost, and when their risk profile changes. If you don’t have answers to these questions today, this post is a useful framework for building the governance program.

  • Block Risky MCP Servers Across Your Org [GA] - In Microsoft Agent 365, admins get a unified view of all MCP servers, plugins, and connectors in use across the tenant, with the ability to block high-risk tools, approve or reject new tool requests from a dedicated request tab, and register organization-owned custom MCP servers. This is the practical admin workflow for the Agent 365 governance capability - run through it now to understand your current tool exposure.

  • Word: Legal plugins in Copilot [Preview] - Purpose-built legal plugins for Copilot in Word and Cowork surface summarization, drafting, review, and redlining skills that connect to M365 work context and supported third-party legal sources. GA is targeted for October CY2026; legal and compliance teams should evaluate which third-party legal source integrations are in scope.

  • Microsoft Clipchamp: Copilot video creation updates [Preview] - Copilot in Clipchamp Video Hub will support agentic video creation from prompts grounded in documents or WorkIQ knowledge, with preview playback in chat and iterative refinement. Preview targets December CY2026, GA January CY2027 - early signal for organizations planning creative content workflows.

  • Microsoft Copilot: Copilot Chat can now better match search results from text inside images in Word and PowerPoint files [GA] - Copilot Chat now extracts and searches text embedded in images within Word and PowerPoint files, including scanned contracts and image-based tables that were previously unsearchable. GA targets October CY2026; organizations with large libraries of scanned documents will see the most immediate retrieval improvement.

Security & Compliance

Action Required

  • CVE-2026-81355 VHD Miniport Driver RCE - Critical · CVSS 7.5. Remote code execution in the Virtual Hard Disk Miniport Driver; the week’s update was an acknowledgment change only but the Critical rating is unchanged. Verify your Windows fleet is fully patched, with particular attention to Hyper-V hosts and Windows 365 Cloud PC infrastructure.

  • CVE-2026-69522 .NET and Visual Studio RCE - Important · CVSS 8.8. KB articles and Download Center links are now published; Microsoft explicitly recommends installing the updates. Target any host running .NET runtimes or Visual Studio, including build agents and developer workstations.

  • Chromium CVE-2026-91728: Integer overflow in Chromium - Severity: not yet rated by MSRC · CVSS 9.6. High base score with no exploited flag; verify Edge is on the current stable channel build and that update policies are not blocking deployment.

  • Chromium CVE-2026-91745: Use after free in Chromium - Severity: not yet rated by MSRC · CVSS 8.8. Use-after-free class; ensure Edge auto-update is unblocked across managed endpoints.

  • Chromium CVE-2026-87612: Type confusion in V8 - Severity: not yet rated by MSRC · CVSS 8.8. Type confusion in V8 has a significant exploitation history; treat Edge update verification as a priority action this cycle.

  • Chromium CVE-2026-87625: Use after free in V8 - Severity: not yet rated by MSRC · CVSS 8.8. Second V8 use-after-free this week; combined with CVE-2026-87612, this is a notable V8 vulnerability cluster and warrants prompt Edge update confirmation.

  • Chromium CVE-2026-87601: Race condition in V8 - Severity: not yet rated by MSRC · CVSS 7.5. Race condition in V8; covered by the same Edge stable channel update as the other Chromium CVEs this cycle.

  • Chromium CVE-2026-95274: Improper output encoding in DevTools - Severity: not yet rated by MSRC · no CVSS score published. Assigned by Chrome and ingested by Edge; see Google Chrome Releases for patched build confirmation.

  • Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream - Severity: not yet rated by MSRC · no CVSS score published. Keep Edge on auto-update; no additional admin action required beyond confirming update policy is not blocking.

  • Chromium CVE-2026-95276: Improper input validation in Themes - Severity: not yet rated by MSRC · no CVSS score published. Input validation flaw in Themes; Edge stable channel update resolves this.

  • Chromium CVE-2026-95277: Use after free in Views - Severity: not yet rated by MSRC · no CVSS score published. Use-after-free in Views; Edge stable channel update resolves this alongside the other Chromium issues this week.

  • Chromium CVE-2026-87536: Use after free in V8 - Severity: not yet rated by MSRC · no CVSS score published. Third V8 vulnerability this cycle; ensure managed Edge deployments are confirmed current before end of week.

  • Block device code flow in Conditional Access - The EvilTokens PhaaS disruption this week confirms that device code phishing remains an active, scalable attack. If device code flow is not explicitly required by a workload, restrict it via Conditional Access authentication flow controls now. This is a no-regret mitigation with minimal operational impact for most tenants.

  • Review Agent 365 MCP tool exposure - With Agent 365 governance tooling now GA, run a full inventory of MCP servers, plugins, and connectors in use across your tenant. Block any tools that are not explicitly approved, and establish a review process for the request tab before your agent estate grows further. No deadline, but the window before unmanaged agent tool sprawl becomes a real problem is closing.

Documentation Updates

Identity & Access

  • Cloud Kerberos trust user requirements clarified - The Entra ID docs now clarify which user types and account configurations meet the prerequisites for cloud Kerberos trust, which matters if you’re mid-deployment and troubleshooting which users are falling back to certificate-based or NTLM authentication.

  • Conditional Access device platform condition: new security warnings added - The docs now include an explicit warning about the risks of using device platform as a sole Conditional Access condition, noting that platform claims can be spoofed; if you’re using platform-only conditions without additional controls, this guidance warrants a policy review.

  • Conditional Access device platform section enhanced with security note - A follow-on commit to the same section adds further detail on mitigating the spoofability risk when using device platform conditions, recommending pairing with compliant device or hybrid join requirements.

  • App role and permission scope limit documented at 700 values - Entra ID now officially documents a 700-value ceiling on app roles and permission scopes per application registration; if you’re building or managing complex enterprise apps with large permission models, validate you’re within this limit before hitting it at runtime.

  • Microsoft Entra COOP preparation guidance added - New guidance covers preparing for Cross-Origin Opener Policy (COOP) enforcement in Entra ID, which affects browser-based authentication flows in apps that don’t already configure COOP headers; review if you manage any web apps using MSAL or browser-based Entra auth.