ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 13:21 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 5 · 26 Jan – 1 Feb 2026 UTC · assess the changes, then plan the next dates.

What to assess first

26 Jan – 1 Feb · dates to 3 Mar Check coverage

Act on2

  1. Exploited27 Jan 2026

    Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

    CVE-2026-24858

  2. Known issueFeb 2026

    [INVESTIGATING] Mouse pointer disappears when hovering over classic Outlook

    Classic Outlook known issues

Coming up8

  1. CISA KEV deadlineDue 3 Feb 2026

    Microsoft Windows Information Disclosure Vulnerability

    CVE-2026-20805

  2. Message Center action dateDue 8 Feb 2026

    MC1217152: Tenant setting update: Copilot capacity designation enabled by defaultMicrosoft 365 Message Center Archive by Merill Fernando

  3. Patch TuesdayScheduled for 10 Feb 2026

    Patch Tuesday, 10 February 2026

    The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

  4. Message Center action dateDue 15 Feb 2026

    MC1217649: Endpoint DLP-sensitive data alerting retiring in Defender; use Purview DLPMicrosoft 365 Message Center Archive by Merill Fernando

    Same day: Message Center action date: MC1230455: Context IQ retirement in the new Outlook and Outlook on the web

  5. CISA KEV deadlineDue 16 Feb 2026

    Microsoft Office Security Feature Bypass Vulnerability

    CVE-2026-21509

  6. Message Center action dateDue 27 Feb 2026

    MC1219798: Custom greetings in voice call authentication will retire on Feb 28, 2026Microsoft 365 Message Center Archive by Merill Fernando

  7. Message Center action dateDue 28 Feb 2026

    MC1197103: Exchange Online ActiveSync device support updateMicrosoft 365 Message Center Archive by Merill Fernando

  8. CISA KEV deadlineDue 3 Mar 2026

    Microsoft Windows Shell Protection Mechanism Failure Vulnerability

    CVE-2026-21510

    Same day: CISA KEV deadline: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability; CISA KEV deadline: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability; CISA KEV deadline: Microsoft Windows Type Confusion Vulnerability; CISA KEV deadline: Microsoft Windows NULL Pointer Dereference Vulnerability; CISA KEV deadline: Microsoft Windows Improper Privilege Management Vulnerability

Changed2

  1. Security26 Jan 2026

    Microsoft Office Security Feature Bypass Vulnerability

    CVE-2026-21509

  2. Security26 Jan 2026

    WAF - WAF Release - 2026-01-26

    Cloudflare WAF changelog

How this list is chosen

Changes from 26 Jan 2026 – 1 Feb 2026 UTC and dates due up to 3 Mar 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 27 Oct 13:21 UTC · 272 of 272 readable · 270 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.