Nation-state actors are weaponizing agentic AI against M365 environments, and two Critical CVEs in .NET and Azure Pipelines demand attention. Ignite 2026 looms with Intune, Copilot, and Teams all shipping meaningful capability updates this week.
Exchange Online unlocks send-from-alias after years of requests, while Project Perception's multi-agent security defense and two new Purview DLP policies for Copilot grounding signal that AI governance is moving from theory to shipped controls.
EWS deprecation is live in Exchange Online and the ExchangeOnlineManagement module needs an upgrade - alongside Windows 11 26H2 GA, a Critical KDC RCE, and Purview's unified classifiers preview, this is a week for config changes and baseline reviews.
Agent 365 MCP governance tools land alongside a major Intune feature wave and Microsoft's disruption of the EvilTokens device code phishing platform - a week where AI control and endpoint capability both moved meaningfully forward.
Agent 365's cross-platform registry goes live alongside a Critical Outlook/Word RCE at CVSS 9.8 - a week that demands both a patch and a governance decision.
Four Critical CVEs land across Azure AD B2C, Copilot Studio, Azure AI Language, and Microsoft Fabric - plus GPT-6 Astra and Claude Fable 5.1 go live in Copilot, and Exchange hybrid shops face a hard version-floor deadline starting this week.
Entra Tenant Governance hits GA for multi-tenant control at scale, Defender for Identity expands sensor v3.x coverage to AD FS, AD CS, and Entra Connect, and the Copilot Domain Exclusion feature gets quietly rolled back - a lot moved this week.
Entra Tenant Governance surfaces shadow tenants, Purview DSPM for AI hits GA, and computer-using agents in Copilot Studio are production-ready — a feature-dense week with meaningful capability unlocks across identity, data, and automation.
Teams Live Events dies June 30 — migrate now. Exchange Server OWA has an active XSS CVE. Meanwhile, Purview ships posture reporting, Copilot Studio goes fully agentic with computer-use GA, and Entra tackles shadow tenant sprawl.
CVE-2026-42897 demands immediate patch action on all on-prem Exchange deployments, while Teams Live Events hits its June 30 retirement deadline — but this week also delivers real capability unlocks across AI agent governance, Purview posture reporting, and Entra multi-tenant visibility.