Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 10:14 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 9 · 23 Feb – 1 Mar 2026 UTC · assess the changes, then plan the next dates.

What to assess first

23 Feb – 1 Mar · dates to 31 Mar Check coverage

Act on2

  1. Security25 Feb 2026

    Cisco · 2 security records

    CVE-2022-20775

Coming up8

  1. CISA KEV deadlineDue 3 Mar 2026

    Microsoft Windows Shell Protection Mechanism Failure Vulnerability

    CVE-2026-21510

    Same day: CISA KEV deadline: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability; CISA KEV deadline: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability; CISA KEV deadline: Microsoft Windows Type Confusion Vulnerability; CISA KEV deadline: Microsoft Windows NULL Pointer Dereference Vulnerability; CISA KEV deadline: Microsoft Windows Improper Privilege Management Vulnerability

  2. CISA KEV deadlineDue 5 Mar 2026

    Microsoft Configuration Manager SQL Injection Vulnerability

    CVE-2024-43468

  3. Patch TuesdayScheduled for 10 Mar 2026

    Patch Tuesday, 10 March 2026

    The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

  4. RetirementDue 15 Mar 2026

    Retirement: 2 products

    DMS (classic) – SQL Scenarios only retirement; Feature deprecation: Trigger playbooks on alerts by analytics rule

  5. RetirementDue 16 Mar 2026

    Retirement: AzureML Batch Endpoints API Preview retirement

    Same day: Message Center action date: MC1234542: Retirement of “Suspected identity theft (pass-the-ticket)” classic alert

Changed2

  1. Release26 Feb 2026

    Az PowerShell module 15.4.0

    Az PowerShell module releases

How this list is chosen

Changes from 23 Feb 2026 – 1 Mar 2026 UTC and dates due up to 31 Mar 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 27 Oct 10:14 UTC · 272 of 272 readable · 271 fully read · documentation 469/469 current