Weekly briefing

Week 13 · 23 Mar – 29 Mar 2026 UTC · assess the changes, then plan the next dates.

What to assess first

23 Mar – 29 Mar · dates to 28 Apr Check coverage

Coming up8

30Mar
Message Center action dateDue 30 Mar 2026
MC1184996: Legacy SharePoint Online Content Delivery Network (CDN) domain to be retired—review configurationsMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1189663: Retirement of external access token for actionable messages – moving to Microsoft Entra authentication; Message Center action date: MC1226498: Retirement of the isBroadcast property for Teams Live Events in Microsoft Graph; Message Center action date: MC1234566: Outlook: retiring “Contact Masking” (hide suggested recipients) - March 31, 2026
31Mar
RetirementDue 31 Mar 2026
Retirement: 9 products
API Keys for querying Application Insights; Batch Region Retirement; Classic alerts for Azure Backup; Classic Compute Node Communication Model; Deprecation of flash-extract custom fields; Retire Require Approve Client App Conditional Access Grant; VHD and Managed Images; Windows Server 2019 on AKS…
Same day: End of support: Azure Kubernetes Service Kubernetes 1.32; End of support: Microsoft SQL Server 2012 Parallel Data Warehouse (Analytics Platform System); Message Center action date: MC1227080: Project Online retirement: Project Web App site creation and unused PWA site changes effective April 1, 2026; Message Center action date: MC1240748: Retiring the Impala connector
4Apr
End of servicingDue 4 Apr 2026
End of servicing: Dynamics 365 Business Central on-premises (Modern Policy), 2024 release wave 2, version 25.x
5Apr
Message Center action dateDue 5 Apr 2026
MC1221939: Message Trace support on Graph API is now in Public PreviewMicrosoft 365 Message Center Archive by Merill Fernando
14Apr
Patch TuesdayScheduled for 14 Apr 2026
Patch Tuesday, 14 April 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
14Apr
End of supportDue 14 Apr 2026
End of support: 10 products
Dynamics C5 2016; Dynamics NAV 2016; Microsoft Advanced Group Policy Management 4.0; Microsoft Application Virtualization 5.0; Microsoft Application Virtualization 5.1; Microsoft Application Virtualization Hosting 5.0 for Windows Desktops; Microsoft Application Virtualization Hosting 5.1 for Window…
24Apr
Message Center action dateDue 24 Apr 2026
MC1281506: Planned breaking changes to ASIM KQL functions used by Microsoft Sentinel for DevelopersMicrosoft 365 Message Center Archive by Merill Fernando
27Apr
CISA KEV deadlineDue 27 Apr 2026
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
CVE-2012-1854
Same day: CISA KEV deadline: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability; CISA KEV deadline: Microsoft Windows Out-of-Bounds Read Vulnerability; CISA KEV deadline: Microsoft Windows Link Following Vulnerability

Changed3

23Mar
Security23 Mar 2026
WAF - WAF Release - 2026-03-23
Cloudflare WAF changelog
27Mar
Revised27 Mar 2026
MC1245216: Targeted file and folder restores in Microsoft 365 BackupMicrosoft 365 Message Center Archive by Merill Fernando
Microsoft 365 suite, SharePoint Online, Microsoft OneDrive
Related evidence (1)
- Microsoft 365: Perform granular file-level restore using Microsoft 365 BackupMicrosoft 365 Message Center Archive by Merill Fernando
  Vendor roadmap · Shared roadmap ID 464991
27Mar
Notable27 Mar 2026
MC1263280: Microsoft Entra: Security hardening to prevent user account takeover in Microsoft Entra Connect SyncMicrosoft 365 Message Center Archive by Merill Fernando
Microsoft Entra
Related evidence (6)
- General Availability - Enabling Email and SMS OTP MFA in Entra External ID Native Authentication
  Public source · Both explicitly reference the same documentation; this does not confirm the same change, rollout or applicability
- General Availability - Just‑in‑Time Password Migration in Microsoft Entra External ID
  Public source · Both explicitly reference the same documentation; this does not confirm the same change, rollout or applicability
- General Availability - Microsoft Entra Connect Health now enforces TLS 1.2
  Public source · Both explicitly reference the same documentation; this does not confirm the same change, rollout or applicability
- General Availability - Microsoft Single Sign-On for Linux support for authenticating with Phish-Resistant MFA credentials
  Public source · Both explicitly reference the same documentation; this does not confirm the same change, rollout or applicability
- General Availability - New M365 group creation experience in My Groups
  Public source · Both explicitly reference the same documentation; this does not confirm the same change, rollout or applicability
- General Availability - Passkey profiles in Microsoft Entra ID
  Public source · Both explicitly reference the same documentation; this does not confirm the same change, rollout or applicability

How this list is chosen

Changes from 23 Mar 2026 – 29 Mar 2026 UTC and dates due up to 28 Apr 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.