WEEKLY BRIEFING · 27 APR – 3 MAY 2026 · UTC
Public sources only
152 public updates in week 18
Microsoft published 3 Windows KB releases (3 optional previews). No new MSRC release that week. 26 roadmap changes, led by Microsoft 365 Copilot (9) and Purview (8). CISA added 1 Microsoft CVE to its Known Exploited Vulnerabilities catalog. 1 lifecycle milestone fall in the next 30 days. 10 Windows and security articles from Microsoft blogs.
3Windows KB releases
0MSRC release notes
26Roadmap changes across 8 products
10Windows and security articles
1Microsoft CVEs added to CISA KEV
Security to act on1
Windows releases3
Windows and security news10
- Windows quality update: Progress we’ve made since March1 May
- Announcing new builds for 1 May 2026 and extending ISO support1 May
- The April 2026 Windows non-security preview update is now available30 Apr
- Dynamically remove apps from managed Windows 11 devices30 Apr
- Troubleshooting TPM Certificate: How to Fix the "Missing Stored Keyset" Error30 Apr
5 more
- Opt-In Windows Server 2025 Feature Update from the WS 2022 and WS 2019 Settings Dialog29 Apr
- Microsoft Defender: New Advanced hunting enhancements28 Apr
- So, You’ve disabled Windows Hello for Business, but the User can still Sign-in using a PIN27 Apr
- Assess Secure Boot certificate status with Microsoft Defender27 Apr
- Assess Secure Boot status with Microsoft Defender27 Apr
Lifecycle milestones in the next 30 days1
- End of servicing: .NET 9 12 May
Microsoft product news111
Microsoft Purview what's new · 22
- Changed1 May
- General availability (GA)1 May
- General availability (GA)1 May
19 more
- General availability (GA)1 May
- In preview: Administrators can now enable, disable, and configure cluster-level scanner features from PowerShell.1 May
- In preview: Custom Reporting populates additional columns and tables in the scanner cluster database so administrators can build their own reports directly against scan…1 May
- In preview: New Block access for specific external domains or users sub-option for the Restrict access or encrypt the content in Microsoft 365 locations action lets DLP…1 May
- In preview: Rolling out, a new label policy setting for meetings, Apply meeting label to artifacts, automatically applies the meeting's sensitivity label to recordings a…1 May
- In preview: Rolling out, manual labeling support for MP4 files in SharePoint and OneDrive.1 May
- In preview: You can now see the sync status of your sensitivity label publishing policies on the Label policies page, giving you visibility into when label policy update…1 May
- New: Custom examinations in Data Security Investigations.1 May
- New: For auto-labeling policies that are turned on and target SharePoint and OneDrive, per-policy review pages let you monitor daily labeling activity, spot-check labele…1 May
- New: OCR support in Data Security Investigations.1 May
- New: Support for administrative units, to bring parity with the classic versions of DSPM and DSPM for AI.1 May
- New: Support for Anthropic Claude (Enterprise) when you add and configure the Anthropic Claude data connector, now in preview.1 May
- New: The "Responsible AI FAQ for Data Security Posture Management" is replaced with the more detailed Application card for Data Security Posture Management to better hel…1 May
- New: To optimize resources, processing is paused for Microsoft 365 data when tenants are inactive for more than 60 days, and automatically resume when you return to the…1 May
- Preview: Custom posture reports let admins build tailored views of information protection and DLP activity.1 May
- Updated: Added the admin permissions (Directory Reader, Microsoft Edge administration, and Microsoft Intune administration) required to activate DLP policies for unmanag…1 May
- Updated: Clarified Edge browser profile scope for cloud app DLP policies.1 May
- Updated: New guidance for working with large audit search results in Data Security Investigations.1 May
- Updated: The documentation section How to disable sensitivity labels for SharePoint and OneDrive (opt-out) now includes labeling behavior if you disable sensitivity labe…1 May
Microsoft Entra what's new · 15
- Expanded policy storage for passkeys (FIDO2) in Microsoft Entra ID1 May
- General Availability - Account Discovery1 May
- General Availability - Cross tenant group synchronization1 May
12 more
- General Availability - High Scale Compatibility (HSC) mode for Microsoft Entra External ID1 May
- General Availability - Manage Agent ID sponsorship lifecycle with Lifecycle Workflows1 May
- General Availability - Modernized My Account pages1 May
- General Availability - NetBiosName resolution test now informational1 May
- General Availability - Support for passkeys in Microsoft Entra ID registration campaign1 May
- General Availability - System-preferred authentication expanded to first-factor in Microsoft Entra ID1 May
- Public Preview - Automate setting or clearing user attributes values in Lifecycle workflows1 May
- Public Preview - Azure Role assignments can now be governed via Entitlement Management1 May
- Public Preview - Enable soft-delete for Microsoft Entra Device objects1 May
- Public Preview - Sensitivity labels for Microsoft Entra security groups1 May
- Public Preview - Workload identity-based authentication for SAP SuccessFactors provisioning integrations1 May
- Upcoming change - Enhanced admin authorization for Microsoft Entra Connect Sync configuration changes1 May
Microsoft Graph changelog · 13
- Identity and access (v1.0): Added the verifiedIdProfile resource.1 May
- Agents (v1.0): Added the agentUser resource and its associated methods for managing the lifecycle of an agent's user.1 May
- Identity and access (v1.0): Added the deviceRegistrationPolicy resource type. (+11 more)1 May
10 more
- Identity and access (v1.0): Added the claimBindingSource enumeration type. (+11 more)1 May
- Identity and access (beta): Added the onVerifiedIdClaimValidationCustomExtensionHandler resource. (+3 more)1 May
- Identity and access (beta): Added the roleType enumeration type. (+1 more)1 May
- Identity and access (v1.0): Added the onVerifiedIdClaimValidationCustomExtensionHandler resource. (+3 more)1 May
- Identity and access (beta): Added the inheritedAppRoleAssignments relationship to the agentIdentity resource. (+3 more)30 Apr
- Files (v1.0): Added the sharePointGroups relationship to the fileStorageContainer resource. (+4 more)30 Apr
- Device and app management (v1.0): Added the updateAdDomainPassword method to the cloudPcOnPremisesConnection resource. (+3 more)29 Apr
- Identity and access (v1.0): Added the microsoftRevokedSessions member to the riskDetail enumeration.28 Apr
- Reports (v1.0): Added the microsoftRevokedSessions member to the riskDetail enumeration.28 Apr
- Identity and access (v1.0): Added the riskRemediation member to the conditionalAccessGrantControl enumeration.28 Apr
Microsoft Defender for Cloud release notes · 13
- Cloud security reporting in Microsoft Defender portal (Preview)1 May
- Daily score calculation enhancement for risk-based Cloud secure score1 May
- General availability of Defender for Cloud integration into the Defender portal1 May
10 more
- General availability of individual recommendations for Defender for Cloud in Azure portal and deprecation of legacy grouped recommendations1 May
- General availability of Microsoft Defender for Cloud and GitHub Advanced Security integration1 May
- General availability of on-demand malware scanning of Azure Files in Microsoft Defender for Storage1 May
- Malware detection for EKS and GKE nodes (Preview)1 May
- Microsoft Defender Experts for Servers as a managed XDR option1 May
- Microsoft Defender for Open-Source Relational Databases on AWS RDS will become Generally Available1 May
- Private clusters protection for gated deployment, binary drift detection, and malware detection (Preview)1 May
- Scanning support for Docker Hardened container images (preview)1 May
- SQL Vulnerability Assessment Express Configuration now available for Azure SQL Managed Instance and Synapse (Preview)1 May
- Updated Helm installation for Defender for Containers sensor1 May
Copilot Studio what's new · 10
- (General availability) Computer use is now generally available, letting your agents automate web and desktop apps by controlling browsers and desktop applications on beh…1 May
- (Preview) Add computer use standalone tools to agents and agent flows for modular, reusable UI automation with built-in governance, model selection, and observability.1 May
- (Preview) Automatically create Microsoft Entra Agent IDs for each of your agents to scope connector permissions, Conditional Access policies, and DLP governance to indiv…1 May
7 more
- (Preview) Choose Mistral Medium 3.5 as the primary AI model for your agent, now available as an experimental option alongside Anthropic, xAI, and other supported provide…1 May
- (Preview) Review agent readiness and issue status from a consolidated status page that surfaces publishing errors, runtime issues, and configuration blocks with severity…1 May
- Add a Microsoft 365 Copilot node to a workflow to send prompts to Microsoft 365 Copilot or a specific agent, enabling automation scenarios like research and audit drafti…1 May
- Add a prompt node to an agent flow to make a single AI call with dynamic content and model selection, useful for scenarios like translation and structured data extractio…1 May
- Configure consent-based recording on voice-enabled agents to ask callers for consent before recording, with configurable compliance behavior and retention settings.1 May
- Use asynchronous responses for agent flows to let long-running processes exceed the two-minute limit and return results to the agent when they complete.1 May
- Use the agent inventory schema to discover and audit all Copilot Studio agents in your organization from the admin center, API, or Azure Resource Graph.1 May
Microsoft Intune what's new · 7
- Access management for Apple services27 Apr
- Block location setting for Android Enterprise can keep Location services enabled27 Apr
- Configure credential manager permissions for Android Enterprise devices27 Apr
4 more
Microsoft Defender XDR what's new · 5
- (Preview) Automatic attack disruption can now isolate compromised devices from the network when high-confidence incident analysis indicates the device is being used as a…1 May
- Defender Chat experience (Preview) is an open prompt chat assistant built into Microsoft Defender.1 May
- In advanced hunting, the Take action wizard now lets customers allow or block top-level domains and files attachment hashes in emails based on query results.1 May
2 more
Microsoft Defender for Identity what's new · 5
- Defender for Identity sensor updates1 May
- Increased sensor capacity1 May
- Known limitation: Migration of domain controllers with Windows Server 2025 from sensor v2.x to sensor v3.x is not supported1 May
2 more
Classic Outlook known issues · 4
- [FIXED] Copilot Draft fails in classic Outlook with error "Sorry, something went wrong. Copilot is working on it."1 May
- [FIXED] Office document links opened in classic Outlook might appear to be blank or open with an error1 May
- [FIXED] Outlook 2024 LTSC crashes opening Viva Engage, Yammer, Power Automate, and other emails1 May
1 more
Microsoft 365 Blog · 2
- Microsoft 365 E7 and Agent 365 are now generally available1 May
- Microsoft 365 Backup granular restore now generally available!29 Apr
Azure Virtual Desktop what's new · 2
- AVD for hybrid environments with Arc-Enabled Servers (Public Preview)1 May
- FSLogix support for cloud-only and external identities is now generally available1 May
Microsoft Sentinel what's new · 2
- Generate playbooks using AI in Microsoft Sentinel is now generally available (GA)1 May
- UEBA enhancements: New settings experience, Okta V2 support, and more GCP anomaly detections1 May
SharePoint Blog · 2
- Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for Document Management30 Apr
- SharePoint Showcase: AI-Forward Content Creation & Curation for the Modern Intranet30 Apr
Microsoft Teams Blog · 1
Azure Connected Machine agent release notes · 1
Microsoft Defender for Cloud Apps release notes · 1
Azure Governance and Management Blog · 1
Gemini API release notes · 1
PowerShell Team Blog · 1
Microsoft Entra Identity Platform Blog · 1
PowerShell release notes · 1
Windows 365 what's new · 1
From the community2
Microsoft 365 roadmap26
Microsoft 365 Copilot · 9
- Microsoft Copilot (Microsoft 365): Copilot can edit your document in PowerPoint29 Apr
- Microsoft Copilot (Microsoft 365): Copilot can edit your document in PowerPoint29 Apr
- Microsoft Copilot (Microsoft 365): Copilot can edit your document in PowerPoint29 Apr
6 more
- Microsoft Copilot (Microsoft 365): Edit with the model of your choice in PowerPoint29 Apr
- Microsoft Copilot (Microsoft 365): Additional meeting results in Copilot responses28 Apr
- Microsoft Copilot (Microsoft 365): Enable watermarks for AI-generated content for M365 Copilot28 Apr
- Microsoft Copilot (Microsoft 365): Copilot chats conversations27 Apr
- Microsoft Copilot (Microsoft 365): Video recap in Copilot Chat27 Apr
- Microsoft Copilot (Microsoft 365): [Copilot Extensibility] IT Admins will be able to enable Anthropic models by specific users and groups in the tenant27 Apr
Purview · 8
- Microsoft Purview compliance portal: Insider Risk Management- Multi selectable DLP policies as an IRM triggering event1 May
- Microsoft Purview: Data Loss Prevention- Security Store now available within Purview DLP to browse, purchase, and enable partner integrations1 May
- Microsoft Purview: eDiscovery - review set limit increase1 May
5 more
- Microsoft Purview: eDiscovery - review set limit increase1 May
- Microsoft Purview compliance portal: Communication Compliance - Recommended policy scope29 Apr
- Microsoft Purview: Data Loss Prevention- New policy configuration options available for inline network and Edge for Business policies28 Apr
- Microsoft Purview: eDiscovery - Add Sample to Review Set28 Apr
- Microsoft Purview: Endpoint Data Loss Prevention-Endpoint DLP Device Status API28 Apr
Teams · 3
- Microsoft Teams: Consecutive interpretation in Interpreter1 May
- Microsoft Teams: Private channels increased limits and transition to group compliance27 Apr
- Microsoft Teams: Teams Phone user multi-line27 Apr
SharePoint · 2
- SharePoint: Power Automate trigger and action for forms in SharePoint29 Apr
- SharePoint: Admin Center - Data Access Governance - Permission report for a given group27 Apr
4 more products · 4 changes
Microsoft Edge · 1
OneNote · 1
Outlook · 1
Viva · 1
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.