WEEKLY BRIEFING · 27 APR – 3 MAY 2026 · UTC
Full source inventory · public sources only
Week 18 sources
Microsoft published 3 Windows KB releases (3 optional previews). No new MSRC release that week. 26 roadmap changes, led by Microsoft 365 Copilot (9) and Purview (8). CISA added 1 Microsoft CVE to its Known Exploited Vulnerabilities catalog. 1 lifecycle milestone fall in the next 30 days. 12 Azure updates, including 1 retirement. 14 Windows and security articles from Microsoft blogs.
3Windows KB releases
26Roadmap changes across 8 products
14Windows and security articles
1Microsoft CVEs added to CISA KEV
Security to act on1
Windows releases3
Windows and security news14
- Windows quality update: Progress we’ve made since March1 May
- Announcing new builds for 1 May 2026 and extending ISO support1 May
- The April 2026 Windows non-security preview update is now available30 Apr
- Dynamically remove apps from managed Windows 11 devices30 Apr
- Troubleshooting TPM Certificate: How to Fix the "Missing Stored Keyset" Error30 Apr
9 more
- Edge 147.0.3912.98: Chromium security fixes30 Apr
- WAF - WAF Release - 2026-04-30 - Emergency30 Apr
- Opt-In Windows Server 2025 Feature Update from the WS 2022 and WS 2019 Settings Dialog29 Apr
- GitLab Patch Release: 18.11.2, 18.10.529 Apr
- Microsoft Defender: New Advanced hunting enhancements28 Apr
- So, You’ve disabled Windows Hello for Business, but the User can still Sign-in using a PIN27 Apr
- Assess Secure Boot certificate status with Microsoft Defender27 Apr
- Assess Secure Boot status with Microsoft Defender27 Apr
- WAF - WAF Release - 2026-04-2727 Apr
Lifecycle milestones in the next 30 days1
- End of servicing: .NET 9 12 May
Product news124
Defender · 25
- (Preview) Automatic attack disruption can now isolate compromised devices from the network when high-confidence incident analysis indicates the device is being used as a…1 May
- Cloud security reporting in Microsoft Defender portal (Preview)1 May
- Daily score calculation enhancement for risk-based Cloud secure score1 May
22 more
- Defender Chat experience (Preview) is an open prompt chat assistant built into Microsoft Defender.1 May
- Defender for Identity sensor updates1 May
- Disable informational alerts for unsanctioned app access (Preview)1 May
- General availability of Defender for Cloud integration into the Defender portal1 May
- General availability of individual recommendations for Defender for Cloud in Azure portal and deprecation of legacy grouped recommendations1 May
- General availability of Microsoft Defender for Cloud and GitHub Advanced Security integration1 May
- General availability of on-demand malware scanning of Azure Files in Microsoft Defender for Storage1 May
- In advanced hunting, the Take action wizard now lets customers allow or block top-level domains and files attachment hashes in emails based on query results.1 May
- Increased sensor capacity1 May
- Known limitation: Migration of domain controllers with Windows Server 2025 from sensor v2.x to sensor v3.x is not supported1 May
- Malware detection for EKS and GKE nodes (Preview)1 May
- Microsoft Defender Experts for Servers and Microsoft Defender Experts Hunting - Servers are now offered as standalone offerings for customers who wish to avail managed e…1 May
- Microsoft Defender Experts for Servers as a managed XDR option1 May
- Microsoft Defender Experts — Product Terms1 May
- Microsoft Defender for Open-Source Relational Databases on AWS RDS will become Generally Available1 May
- New Defender for Identity security alerts1 May
- Private clusters protection for gated deployment, binary drift detection, and malware detection (Preview)1 May
- Scanning support for Docker Hardened container images (preview)1 May
- Sensor v3.x supports all identity roles on domain controllers1 May
- SQL Vulnerability Assessment Express Configuration now available for Azure SQL Managed Instance and Synapse (Preview)1 May
- The hunting graph in advanced hunting now includes new identity-focused predefined scenarios.1 May
- Updated Helm installation for Defender for Containers sensor1 May
Purview · 22
- Changed1 May
- General availability (GA)1 May
- General availability (GA)1 May
19 more
- General availability (GA)1 May
- In preview: Administrators can now enable, disable, and configure cluster-level scanner features from PowerShell.1 May
- In preview: Custom Reporting populates additional columns and tables in the scanner cluster database so administrators can build their own reports directly against scan…1 May
- In preview: New Block access for specific external domains or users sub-option for the Restrict access or encrypt the content in Microsoft 365 locations action lets DLP…1 May
- In preview: Rolling out, a new label policy setting for meetings, Apply meeting label to artifacts, automatically applies the meeting's sensitivity label to recordings a…1 May
- In preview: Rolling out, manual labeling support for MP4 files in SharePoint and OneDrive.1 May
- In preview: You can now see the sync status of your sensitivity label publishing policies on the Label policies page, giving you visibility into when label policy update…1 May
- New: Custom examinations in Data Security Investigations.1 May
- New: For auto-labeling policies that are turned on and target SharePoint and OneDrive, per-policy review pages let you monitor daily labeling activity, spot-check labele…1 May
- New: OCR support in Data Security Investigations.1 May
- New: Support for administrative units, to bring parity with the classic versions of DSPM and DSPM for AI.1 May
- New: Support for Anthropic Claude (Enterprise) when you add and configure the Anthropic Claude data connector, now in preview.1 May
- New: The "Responsible AI FAQ for Data Security Posture Management" is replaced with the more detailed Application card for Data Security Posture Management to better hel…1 May
- New: To optimize resources, processing is paused for Microsoft 365 data when tenants are inactive for more than 60 days, and automatically resume when you return to the…1 May
- Preview: Custom posture reports let admins build tailored views of information protection and DLP activity.1 May
- Updated: Added the admin permissions (Directory Reader, Microsoft Edge administration, and Microsoft Intune administration) required to activate DLP policies for unmanag…1 May
- Updated: Clarified Edge browser profile scope for cloud app DLP policies.1 May
- Updated: New guidance for working with large audit search results in Data Security Investigations.1 May
- Updated: The documentation section How to disable sensitivity labels for SharePoint and OneDrive (opt-out) now includes labeling behavior if you disable sensitivity labe…1 May
Microsoft Graph · 20
- Identity and access (v1.0): 1 API change passage1 May
- Agents (v1.0): 1 API change passage1 May
- Identity and access (v1.0): 12 API change passages1 May
17 more
- Identity and access (v1.0): 12 API change passages1 May
- Identity and access (beta): 4 API change passages1 May
- Identity and access (beta): 2 API change passages1 May
- Identity and access (v1.0): 4 API change passages1 May
- Identity and access (beta): 4 API change passages30 Apr
- Groups (beta): 1 API change passage30 Apr
- Files (v1.0): 5 API change passages30 Apr
- Identity and access (beta): 2 API change passages29 Apr
- Backup and recovery (beta): 6 API change passages29 Apr
- Device and app management (v1.0): 4 API change passages29 Apr
- Identity and access (v1.0): 1 API change passage28 Apr
- Reports (v1.0): 1 API change passage28 Apr
- Identity and access (beta): 5 API change passages28 Apr
- Identity and access (v1.0): 1 API change passage28 Apr
- Agents (beta): 4 API change passages28 Apr
- Device and app management (beta): 2 API change passages28 Apr
- Identity and access (beta): 1 API change passage28 Apr
Microsoft Entra · 16
- Expanded policy storage for passkeys (FIDO2) in Microsoft Entra ID1 May
- General Availability - Account Discovery1 May
- General Availability - Cross tenant group synchronization1 May
13 more
- General Availability - High Scale Compatibility (HSC) mode for Microsoft Entra External ID1 May
- General Availability - Manage Agent ID sponsorship lifecycle with Lifecycle Workflows1 May
- General Availability - Modernized My Account pages1 May
- General Availability - NetBiosName resolution test now informational1 May
- General Availability - Support for passkeys in Microsoft Entra ID registration campaign1 May
- General Availability - System-preferred authentication expanded to first-factor in Microsoft Entra ID1 May
- Public Preview - Automate setting or clearing user attributes values in Lifecycle workflows1 May
- Public Preview - Azure Role assignments can now be governed via Entitlement Management1 May
- Public Preview - Enable soft-delete for Microsoft Entra Device objects1 May
- Public Preview - Sensitivity labels for Microsoft Entra security groups1 May
- Public Preview - Workload identity-based authentication for SAP SuccessFactors provisioning integrations1 May
- Upcoming change - Enhanced admin authorization for Microsoft Entra Connect Sync configuration changes1 May
- General Availability: Refresh Token (RT) Transfer to Apple Watch in Microsoft Entra External ID Native Authentication29 Apr
Copilot Studio · 10
- (General availability) Computer use is now generally available, letting your agents automate web and desktop apps by controlling browsers and desktop applications on beh…1 May
- (Preview) Add computer use standalone tools to agents and agent flows for modular, reusable UI automation with built-in governance, model selection, and observability.1 May
- (Preview) Automatically create Microsoft Entra Agent IDs for each of your agents to scope connector permissions, Conditional Access policies, and DLP governance to indiv…1 May
7 more
- (Preview) Choose Mistral Medium 3.5 as the primary AI model for your agent, now available as an experimental option alongside Anthropic, xAI, and other supported provide…1 May
- (Preview) Review agent readiness and issue status from a consolidated status page that surfaces publishing errors, runtime issues, and configuration blocks with severity…1 May
- Add a Microsoft 365 Copilot node to a workflow to send prompts to Microsoft 365 Copilot or a specific agent, enabling automation scenarios like research and audit drafti…1 May
- Add a prompt node to an agent flow to make a single AI call with dynamic content and model selection, useful for scenarios like translation and structured data extractio…1 May
- Configure consent-based recording on voice-enabled agents to ask callers for consent before recording, with configurable compliance behavior and retention settings.1 May
- Use asynchronous responses for agent flows to let long-running processes exceed the two-minute limit and return results to the agent when they complete.1 May
- Use the agent inventory schema to discover and audit all Copilot Studio agents in your organization from the admin center, API, or Azure Resource Graph.1 May
Commercial changes · 4
Outlook · 4
- [FIXED] Copilot Draft fails in classic Outlook with error "Sorry, something went wrong. Copilot is working on it."1 May
- [FIXED] Office document links opened in classic Outlook might appear to be blank or open with an error1 May
- [FIXED] Outlook 2024 LTSC crashes opening Viva Engage, Yammer, Power Automate, and other emails1 May
1 more
Azure · 2
- Microsoft Azure — Product Terms1 May
- New Local Management Group for ALZ & Updated Sovereign Policies for SLZ30 Apr
Azure Virtual Desktop · 2
- AVD for hybrid environments with Arc-Enabled Servers (Public Preview)1 May
- FSLogix support for cloud-only and external identities is now generally available1 May
Intune · 2
- Configure credential manager permissions for Android Enterprise devices27 Apr
- Expanded support for Endpoint Privilege Management support approved elevation requests27 Apr
Microsoft 365 Blog · 2
- Microsoft 365 E7 and Agent 365 are now generally available1 May
- Microsoft 365 Backup granular restore now generally available!29 Apr
PowerShell · 2
- Announcing Microsoft Desired State Configuration v3.2.029 Apr
- v7.7.0-preview.1 Release of PowerShell28 Apr
Sentinel · 2
- Generate playbooks using AI in Microsoft Sentinel is now generally available (GA)1 May
- UEBA enhancements: New settings experience, Okta V2 support, and more GCP anomaly detections1 May
Windows 365 · 2
- Windows 365 — Product Terms1 May
- Snapshot-based reset for Windows 365 Flex shared Cloud PCs (Public Preview)27 Apr
ADEssentials · 1
- ADEssentials 1.0.227 Apr
Azure Arc · 1
Azure PowerShell · 1
Global Secure Access · 1
Google Gemini · 1
Microsoft 365 Apps · 1
Power Platform · 1
Teams · 1
Ubiquiti UniFi · 1
Azure updates12
- Update: Egress and data transfer with Azure in the United Kingdom1 May
- Generally Available: Prefix-scoped access for User Delegation SAS30 Apr
- Generally Available: Azure Functions support for Java 2530 Apr
- Generally Available: Microsoft Azure Red Hat OpenShift is now available in Austria East29 Apr
- Generally Available: Microsoft Agent Framework 1.029 Apr
7 more
- Public Preview: Memory in Foundry Agent Service29 Apr
- Public Preview: Container Network Insights Agent28 Apr
- Generally Available: Connect to Azure Elastic SAN from Windows VM via VM Extension28 Apr
- Generally Available: Cross-region IPAM pool association in Azure Virtual Network Manager28 Apr
- Public Preview: Microsoft HTTP DDoS Ruleset for Azure WAF on Azure Front Door Premium28 Apr
- Generally Available: Bring your own AI Gateway in Foundry Agent Service27 Apr
- Retirement: Prompt Flow in Azure ML and Foundry27 Apr
From the community4
Microsoft 365 roadmap26
Microsoft 365 Copilot · 9
- Microsoft Copilot (Microsoft 365): Copilot can edit your document in PowerPoint29 Apr
- Microsoft Copilot (Microsoft 365): Copilot can edit your document in PowerPoint29 Apr
- Microsoft Copilot (Microsoft 365): Copilot can edit your document in PowerPoint29 Apr
6 more
- Microsoft Copilot (Microsoft 365): Edit with the model of your choice in PowerPoint29 Apr
- Microsoft Copilot (Microsoft 365): Additional meeting results in Copilot responses28 Apr
- Microsoft Copilot (Microsoft 365): Enable watermarks for AI-generated content for M365 Copilot28 Apr
- Microsoft Copilot (Microsoft 365): Copilot chats conversations27 Apr
- Microsoft Copilot (Microsoft 365): Video recap in Copilot Chat27 Apr
- Microsoft Copilot (Microsoft 365): [Copilot Extensibility] IT Admins will be able to enable Anthropic models by specific users and groups in the tenant27 Apr
Purview · 8
- Microsoft Purview compliance portal: Insider Risk Management- Multi selectable DLP policies as an IRM triggering event1 May
- Microsoft Purview: Data Loss Prevention- Security Store now available within Purview DLP to browse, purchase, and enable partner integrations1 May
- Microsoft Purview: eDiscovery - review set limit increase1 May
5 more
- Microsoft Purview: eDiscovery - review set limit increase1 May
- Microsoft Purview compliance portal: Communication Compliance - Recommended policy scope29 Apr
- Microsoft Purview: Data Loss Prevention- New policy configuration options available for inline network and Edge for Business policies28 Apr
- Microsoft Purview: eDiscovery - Add Sample to Review Set28 Apr
- Microsoft Purview: Endpoint Data Loss Prevention-Endpoint DLP Device Status API28 Apr
Teams · 3
- Microsoft Teams: Consecutive interpretation in Interpreter1 May
- Microsoft Teams: Private channels increased limits and transition to group compliance27 Apr
- Microsoft Teams: Teams Phone user multi-line27 Apr
SharePoint · 2
- SharePoint: Power Automate trigger and action for forms in SharePoint29 Apr
- SharePoint: Admin Center - Data Access Governance - Permission report for a given group27 Apr
4 more products · 4 changes
Microsoft Edge · 1
OneNote · 1
Outlook · 1
Viva · 1
Other public updates61
- Exchange admin dashboard adds provider list export for Actionable Messages1 May
- Use sensitivity labels to block all connected experiences that analyze content in Word, Excel, and PowerPoint1 May
- Agent Registry API transition to Agent 3651 May
- What’s new in the Microsoft Intune service update for April 20261 May
- Updates available for Microsoft 365 Apps for Current Channel1 May
56 more
- Dynamics 365 Customer Insights - Data - Reduce alert fatigue with noise-free notifications1 May
- Microsoft 365 Copilot: Legal Agent for Word30 Apr
- Introducing Calendar Agentic capabilities in Microsoft 365 Copilot30 Apr
- Teams Phone call transfer improvements30 Apr
- The April 2026 Windows non-security preview update is now available30 Apr
- Dynamics 365 Sales - Chat with your deal insights using ask-and-refine experience in Sales Close Agent (preview)30 Apr
- Dynamics 365 Project Operations – Import projects in MPP files into existing projects30 Apr
- Dynamics 365 Sales - Stay on track at every deal stage with delta-first guidance in Sales Close Agent (preview)30 Apr
- Dynamics 365 Contact Center – Average wait time in messaging API channels30 Apr
- Dynamics 365 Contact Center - Split recordings speaker-wise in closed conversation view (Preview)30 Apr
- Dynamics 365 Project Operations - Task level schedule modes for precise planning (preview)30 Apr
- Dynamics 365 Customer Insights - Journeys - Govern agents and Copilot centrally with Dynamics 365 AI Hub (preview)30 Apr
- Dynamically remove apps from managed Windows 11 devices30 Apr
- Dynamics 365 Project Operations - Implement access restrictions in Project for the web iFrame30 Apr
- Microsoft 365 Copilot: Anthropic models available when editing Word documents30 Apr
- Microsoft 365 Copilot (Premium): Teams meetings as a reference in Copilot Notebooks30 Apr
- Teams Rooms Pro Management Portal: AI Assistant now available to all portal roles with RBAC-scoped data access30 Apr
- Microsoft Teams: Change of default file open preference30 Apr
- Microsoft 365 Copilot will use private community and event content as grounding sources30 Apr
- Microsoft Purview | Data Security Investigations: Introducing new custom examination focus areas30 Apr
- Microsoft Teams: Retirement of Together mode30 Apr
- New dedicated License Requests page in Microsoft 365 Admin Center30 Apr
- Microsoft 365 Copilot: New AI Reader role for Agent 365 (read-only access)30 Apr
- Dynamics 365 Customer Service - Use shadow mode for Case Management Agent predictions30 Apr
- Dynamics 365 Supply Chain Management - Run Planning Optimization on Azure operated by 21Vianet30 Apr
- Dynamics 365 Sales - Clone and share Sales Development agent configuration across teams30 Apr
- Dynamics 365 Project Operations - Add support for Lookups on custom columns30 Apr
- Microsoft Power Automate - Support for normalized schema import for data ingestion30 Apr
- Dynamics 365 Customer Service – Add knowledge citations to case resolution30 Apr
- Dynamics 365 Contact Center - Use average wait time diagnostics to get wait-time predictions30 Apr
- Power Automate - Analyze your processes in the process intelligence experience30 Apr
- Dynamics 365 Contact Center – Average wait time in messaging API channels30 Apr
- Dynamics 365 Contact Center - Pinned contacts and queues during consult and transfer30 Apr
- Dynamics 365 Contact Center – Track segment-level metrics across queues30 Apr
- Dynamics 365 Customer Insights - Journeys - Set message expirations to keep communication relevant30 Apr
- Microsoft Copilot Studio – Group and analyze the performance of user questions by themes29 Apr
- Dynamics 365 Customer Insights – Data - Effortlessly monitor daily performance and manage notifications29 Apr
- Dynamics 365 Field Service - Explore Dataverse data with Microsoft 365 Copilot29 Apr
- Dynamics 365 Sales – Identify important actions in the flow of work with Recommended Action29 Apr
- OneDrive sync supports up to 1 million items on Windows28 Apr
- Microsoft Exchange Online: Dynamic distribution groups will populate membership faster on creation and modification28 Apr
- Microsoft Edge: M365 Copilot Search relevance using work browsing history28 Apr
- Microsoft Teams: Enhanced cross-platform join via Session Initiation Protocol (SIP) for Teams Rooms on Android28 Apr
- Power Automate trigger and action for forms in SharePoint (Preview)28 Apr
- Generate documents using forms in SharePoint with Power Automate (Preview)28 Apr
- Dynamics 365 Sales – Uncover insights and risks to close more deals with Opportunity Research Agent28 Apr
- Dynamics 365 Customer Insights – Journeys – Create effective audiences with marketing website interactions28 Apr
- An updated version of the April 2026 Scan Cab is available28 Apr
- Excel Desktop update required to connect to Power Platform Analytical Dataflows27 Apr
- Microsoft Secure Score: New recommendation for Secure Boot 2023 certificate readiness in Microsoft Defender for Endpoint27 Apr
- Improved whiteboard saving behavior on Teams Rooms on Android with licensed user accounts27 Apr
- Exchange Online: Retirement of legacy TLS versions for POP and IMAP connections27 Apr
- Microsoft Purview | Data Loss Prevention: New guided diagnostics experience for DLP27 Apr
- Power Apps- Information regarding the end of support for the preview Analytics experience in Power Apps27 Apr
- Dynamics 365 Customer Insights – Journeys – Create effective audiences with marketing website interactions27 Apr
- Assess Secure Boot certificate status with Microsoft Defender27 Apr
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.