Known limitation: Migration of domain controllers with Windows Server 2025 from sensor v2.x to sensor v3.x is not supported
Product news · Microsoft Defender for Identity what's new
Weekly briefing
Week 18 · 27 Apr – 3 May 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
40 source records · 16 groupsUpdates and guidanceDefender23 source records
Product news · 23 entries
- (Preview) Automatic attack disruption can now isolate compromised devices from the network when high-confidence incident analysis indicates the device is being used as a…
Product news · Microsoft Defender XDR what's new
- Cloud security reporting in Microsoft Defender portal (Preview)
Product news · Microsoft Defender for Cloud release notes
- Daily score calculation enhancement for risk-based Cloud secure score
Product news · Microsoft Defender for Cloud release notes
Show the other 20 entries
- Defender Chat experience (Preview) is an open prompt chat assistant built into Microsoft Defender.
Product news · Microsoft Defender XDR what's new
- Defender for Identity sensor updates
Product news · Microsoft Defender for Identity what's new
- Disable informational alerts for unsanctioned app access (Preview)
Product news · Microsoft Defender for Cloud Apps release notes
- General availability of Defender for Cloud integration into the Defender portal
Product news · Microsoft Defender for Cloud release notes
- General availability of Microsoft Defender for Cloud and GitHub Advanced Security integration
Product news · Microsoft Defender for Cloud release notes
- General availability of individual recommendations for Defender for Cloud in Azure portal and deprecation of legacy grouped recommendations
Product news · Microsoft Defender for Cloud release notes
- General availability of on-demand malware scanning of Azure Files in Microsoft Defender for Storage
Product news · Microsoft Defender for Cloud release notes
- In advanced hunting, the Take action wizard now lets customers allow or block top-level domains and files attachment hashes in emails based on query results.
Product news · Microsoft Defender XDR what's new
- Increased sensor capacity
Product news · Microsoft Defender for Identity what's new
- Malware detection for EKS and GKE nodes (Preview)
Product news · Microsoft Defender for Cloud release notes
- Microsoft Defender Experts for Servers and Microsoft Defender Experts Hunting - Servers are now offered as standalone offerings for customers who wish to avail managed e…
Product news · Microsoft Defender XDR what's new
- Microsoft Defender Experts for Servers as a managed XDR option
Product news · Microsoft Defender for Cloud release notes
- Microsoft Defender for Open-Source Relational Databases on AWS RDS will become Generally Available
Product news · Microsoft Defender for Cloud release notes
- New Defender for Identity security alerts
Product news · Microsoft Defender for Identity what's new
- Private clusters protection for gated deployment, binary drift detection, and malware detection (Preview)
Product news · Microsoft Defender for Cloud release notes
- SQL Vulnerability Assessment Express Configuration now available for Azure SQL Managed Instance and Synapse (Preview)
Product news · Microsoft Defender for Cloud release notes
- Scanning support for Docker Hardened container images (preview)
Product news · Microsoft Defender for Cloud release notes
- Sensor v3.x supports all identity roles on domain controllers
Product news · Microsoft Defender for Identity what's new
- The hunting graph in advanced hunting now includes new identity-focused predefined scenarios.
Product news · Microsoft Defender XDR what's new
- Updated Helm installation for Defender for Containers sensor
Product news · Microsoft Defender for Cloud release notes
Updates and guidanceSentinel2 source records
Product news · 2 entries
- Generate playbooks using AI in Microsoft Sentinel is now generally available (GA)
Product news · Microsoft Sentinel what's new
- UEBA enhancements: New settings experience, Okta V2 support, and more GCP anomaly detections
Product news · Microsoft Sentinel what's new
SecurityCloudflare
WAF - WAF Release - 2026-04-30 - Emergency
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2026-41940
CVE-2026-41940
SecurityMicrosoft Edge
Edge 147.0.3912.98: Chromium security fixes
Security advisory · Microsoft Edge security release notes
SecurityGitLab
GitLab Patch Release: 18.11.2, 18.10.5
Security advisory · GitLab patch releases
SecurityWindows
Microsoft Windows Protection Mechanism Failure Vulnerability
Added to CISA KEV
CVE-2026-32202
Assessment context
CISA lists it as exploited
SecurityDefender
Microsoft Defender: New Advanced hunting enhancements
Security news · Microsoft Defender XDR Blog
SecurityMicrosoft 365 Apps
Microsoft Office Remote Code Execution
CISA KEV deadline
CVE-2009-0238
Assessment context
CISA deadline passed 182 days ago
SecuritySharePoint
Microsoft SharePoint Server Improper Input Validation Vulnerability
CISA KEV deadline
CVE-2026-32201
Assessment context
CISA deadline passed 182 days ago
Message CenterDefender
MC1293483: Microsoft Secure Score: New recommendation for Secure Boot 2023 certificate readiness in Microsoft Defender for Endpoint
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
SecurityCloudflare
SecurityDefender
Assess Secure Boot status with Microsoft Defender
Security news · Microsoft Defender for Endpoint Blog
SecurityExchange
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
CISA KEV deadline
CVE-2023-21529
Assessment context
CISA deadline passed 183 days ago
SecurityMicrosoft Visual Basic for Applications Insecure Library Loading Vulnerability
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
CISA KEV deadline
CVE-2012-1854
Assessment context
CISA deadline passed 183 days ago
SecurityWindows2 source records
CISA KEV deadline · 2 entries
- Microsoft Windows Link Following Vulnerability
CISA KEV deadline
CVE-2025-60710
Assessment context
CISA deadline passed 183 days ago
- Microsoft Windows Out-of-Bounds Read Vulnerability
CISA KEV deadline
CVE-2023-36424
Assessment context
CISA deadline passed 183 days ago
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.