WEEKLY BRIEFING · 6 OCT – 12 OCT 2025 · UTC
Full source inventory · public sources only
Week 41 sources
No new MSRC release that week. 3 roadmap changes, led by Outlook (2) and SharePoint (1). CISA added 4 Microsoft CVEs to its Known Exploited Vulnerabilities catalog. 13 Azure updates, including 5 retirements. 7 Windows and security articles from Microsoft blogs.
3Roadmap changes across 2 products
7Windows and security articles
4Microsoft CVEs added to CISA KEV
Security to act on4
- CVE-2021-43226 — Microsoft Windows Privilege Escalation VulnerabilityKEV 6 Oct
- CVE-2013-3918 — Microsoft Windows Out-of-Bounds Write VulnerabilityKEV 6 Oct
- CVE-2011-3402 — Microsoft Windows Remote Code Execution VulnerabilityKEV 6 Oct
- CVE-2010-3962 — Microsoft Internet Explorer Uninitialized Memory Corruption VulnerabilityKEV 6 Oct
Windows and security news7
Product news13
Microsoft Graph · 6
- Security (beta): 2 API change passages10 Oct
- Security (v1.0): 2 API change passages10 Oct
- Identity and access (beta): 11 API change passages10 Oct
3 more
ADEssentials · 1
- ADEssentials 0.0.2617 Oct
Azure PowerShell · 1
Defender · 1
Global Secure Access · 1
Google Gemini · 1
Purview · 1
- Building Trustworthy AI: How Azure Foundry + Microsoft Security Layers Deliver End-to-End Protection10 Oct
Teams PowerShell · 1
- MicrosoftTeams 7.4.06 Oct
Azure updates13
- Generally Available: Custom port support for Azure Database for MySQL – Flexible Server9 Oct
- Generally Available: Azure Firewall updates - Customer provided public IP address support in secured hubs9 Oct
- Generally Available: Firmware analysis enabled by Azure Arc9 Oct
- Retirement: Azure AI Health Insights and related models9 Oct
- Public Preview: Introducing Vaulted Backup for Azure Data Lake Storage9 Oct
8 more
- Retirement: Azure Cache for Redis Enterprise is retiring on March 30, 2027 and new creation requests will be blocked starting April 1, 20268 Oct
- Retirement: Azure Cache for Redis is retiring on September 30, 2028.8 Oct
- Retirement: Azure Network Policy Manager (NPM) for Windows nodes on AKS to Be Retired by September 30, 20267 Oct
- Generally Available: Azure Firewall Updates - IP Group limit increased to 600 per Firewall Policy7 Oct
- Generally Avaialbe: Azure NetApp Files short-term clones7 Oct
- Retirement: Legacy Authentication in Azure Monitor - Container Insights will be retired on September 30, 2026.7 Oct
- Generally Available: AI toolchain operator add-on (KAITO) for AKS7 Oct
- Generally Available: Latest PostgreSQL minor versions supported by Azure Database for PostgreSQL – Flexible Server6 Oct
From the community2
Microsoft 365 roadmap3
Outlook · 2
SharePoint · 1
Other public updates38
- Activation keys for Windows 10 Extended Security Update might be incorrect11 Oct
- 30-Day Reminder: Windows 11, version 23H2 (Home and Pro editions) will reach end of servicing on November 11, 202510 Oct
- Microsoft PowerPoint: Find and add company approved images with Brand Images10 Oct
- Microsoft Purview | Data loss prevention - Alert classification property for DLP alerts on Purview portal10 Oct
- Exchange ActiveSync TLS 1.3 Certificate Based Authentication Change10 Oct
33 more
- Microsoft Defender for Cloud Apps: Improvements to threat protection capabilities9 Oct
- Microsoft 365 Admin Center: Admin Audit logs in Purview9 Oct
- Microsoft 365 Copilot: New usage intensity metrics available in admin center report9 Oct
- Microsoft Teams: Microsoft Graph APIs for Teams administration now available in beta9 Oct
- Microsoft 365 Copilot: MCP-based agents now available in Copilot and Microsoft 365 admin center9 Oct
- Manage SharePoint agents in Copilot Control System: View, block, or unblock agents used in Copilot Chat9 Oct
- Viva Engage: Retirement of Viva Engage Desktop Notifications9 Oct
- Microsoft Loop: Copilot experience upgrade9 Oct
- Dynamics 365 Contact Center - Split recordings speaker-wise in closed conversation view9 Oct
- Dynamics 365 Sales – Connect AI agents to sales workflows using Model Context Protocol server - updated date9 Oct
- Windows Office Hours: October 16, 20259 Oct
- Dynamics 365 Contact Center - Use optimized setting to update presence9 Oct
- Microsoft Teams: Apps now supported in Shared Channels8 Oct
- Teams Search now respects hidden user attributes without requiring "Scope Search"8 Oct
- New setting to pin Microsoft 365 Copilot and Companion apps to the Windows taskbar.8 Oct
- Microsoft 365 apps: Custom Engine Agents now available in Word, Excel, PowerPoint, and OneNote8 Oct
- Dynamics 365 Customer Insights - Journeys - Transform your outreach with Copilot-powered voice conversations8 Oct
- Dynamics 365 Contact Center – Use messaging APIs to manage customer chat conversations8 Oct
- Dynamics 365 Customer Insights - Journeys - Create an event portal on your own website using the event API8 Oct
- Dynamics 365 Contact Center – Use intent to consult with a user8 Oct
- Dynamics 365 Customer Insights - Journeys - Create event portals with event registration details using Power Pages8 Oct
- Retirement of IP-Based Location Detection in Bookmark Creation Flow7 Oct
- Microsoft Teams: Search in Settings7 Oct
- Windows Backup for Organizations is now available7 Oct
- Updates available for Microsoft 365 Apps for Current Channel7 Oct
- Dynamics 365 Apps – Upcoming permission enforcement for Dataverse Solutions7 Oct
- Microsoft Teams: Emojis in section names6 Oct
- Microsoft Teams: Retirement of UKG and Blue Yonder managed connectors for Shifts6 Oct
- Microsoft Defender for Office 365: Enhancing the quarantine email preview experience6 Oct
- Microsoft Viva Copilot Analytics launches new agent dashboard6 Oct
- Access to Non-Native Viva Engage Network Ending October 13 20256 Oct
- Power Automate – Automate browsers using direct control without extensions6 Oct
- Dynamics 365 Contact Center – Enhanced real-time translation6 Oct
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.