Agent 365 MCP governance tools land alongside a major Intune feature wave and Microsoft's disruption of the EvilTokens device code phishing platform - a week where AI control and endpoint capability both moved meaningfully forward.
Agent 365's cross-platform registry goes live alongside a Critical Outlook/Word RCE at CVSS 9.8 - a week that demands both a patch and a governance decision.
Agent 365 lands with cross-vendor AI governance controls, a Critical Windows Secure Kernel EoP vulnerability needs patching, and September Exchange Server security updates are out.
Official Microsoft deployment and setup guides for Intune, Defender, Entra, Copilot, Purview, and Viva, organized by Modern Work practice area, plus what actually changes across Commercial, GCC, GCC High, and DoD.
Purview gets two meaningful compliance additions this week - retention for Copilot Memory and DSI integration with endpoint DLP alerts - plus expanded Organizational Messages support for hybrid-joined devices.
Entra Tenant Governance hits GA for multi-tenant control at scale, Defender for Identity expands sensor v3.x coverage to AD FS, AD CS, and Entra Connect, and the Copilot Domain Exclusion feature gets quietly rolled back - a lot moved this week.
Teams Live Events dies June 30 — migrate now. Exchange Server OWA has an active XSS CVE. Meanwhile, Purview ships posture reporting, Copilot Studio goes fully agentic with computer-use GA, and Entra tackles shadow tenant sprawl.