WAF - WAF Release - 2026-05-20
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2025-53693
CVE-2025-53693
Weekly briefing
Week 21 · 18 May – 24 May 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
208 source records · 84 groupsSecurityDefender2 source records
Added to CISA KEV · 2 entries
- Microsoft Defender Denial of Service Vulnerability
Added to CISA KEV
CVE-2026-45498
Assessment context
CISA lists it as exploited
- Microsoft Defender Link Following Vulnerability
Added to CISA KEV
CVE-2026-41091
Assessment context
CISA lists it as exploited
SecurityMicrosoft DirectX NULL Byte Overwrite Vulnerability
Microsoft DirectX NULL Byte Overwrite Vulnerability
Added to CISA KEV
CVE-2009-1537
Assessment context
CISA lists it as exploited
SecurityMicrosoft Internet Explorer Use-After-Free Vulnerability2 source records
Added to CISA KEV · 2 entries
- Microsoft Internet Explorer Use-After-Free Vulnerability
Added to CISA KEV
CVE-2010-0249
Assessment context
CISA lists it as exploited
- Microsoft Internet Explorer Use-After-Free Vulnerability
Added to CISA KEV
CVE-2010-0806
Assessment context
CISA lists it as exploited
SecurityWindows
Microsoft Windows Buffer Overflow Vulnerability
Added to CISA KEV
CVE-2008-4250
Assessment context
CISA lists it as exploited
CommunityADSecurity - Sean Metcalf
AD Fundamentals: Group Policy Permissions & Owner Rights
Community post · ADSecurity - Sean Metcalf
CommunityNathan McNulty
Use an allowlist for VS Code extensions
Community post · Nathan McNulty
Updates and guidanceAzure5 source records
Azure update · 5 entries
Show the other 2 entries
Updates and guidanceMicrosoft 365 Message Center Archive by Merill Fernando3 source records
Azure update · 3 entries
Updates and guidanceMicrosoft Graph43 source records
Graph announcement · 39 passages · 2 entries
- Device and app management (beta): 39 API change passages
Graph announcement · 39 passages · Microsoft Graph changelog
Assessment context
Publisher announcement group; its passages may describe different API changes
- Devices and app management (beta): 4 API change passages
Graph announcement · 4 passages · Microsoft Graph changelog
Assessment context
Publisher announcement group; its passages may describe different API changes
Updates and guidancePowerShell
PowerShell PSResource Roadmap and Best Practices
Product news · PowerShell Team Blog
Updates and guidanceSQL Server
Message CenterDynamics 365
MC1317126: Dynamics 365 Contact Center – Enable AI-assisted time-off and swap requests
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Dynamics 365 Apps
Message CenterMicrosoft 365 Apps
MC1280558: Use Copilot to explain selected slide content in PowerPoint Live
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft 365 apps
Message CenterPurview
MC1317196: Microsoft Purview | Data Security Investigations: Proactive AI insights in Data Security Posture Management
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Purview
ReleasesPSResourceGet
Microsoft.PowerShell.PSResourceGet 1.3.0-preview1
Tool release · PSResourceGet releases
Assessment context
8 release-note bullets
- Add MAR as default registered repository in #1955
- Add concurrent (parallel) execution for Install-PSResource workflows in #1950
- Add DSC V3 resource for PSResourceGet in #1852
RoadmapOutlook
Outlook: Calendar Conditional Formatting in New Outlook
Roadmap entry · Microsoft 365 Roadmap · Microsoft 365 Message Center Archive by Merill Fernando
RoadmapTeams
Microsoft Teams: Book future meetings directly from Teams panels
Roadmap entry · Microsoft 365 Roadmap · Microsoft 365 Message Center Archive by Merill Fernando
Message CenterWindows
MC1315905: Updated Secure Boot status report in Windows Autopatch
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Windows
Assessment context
Microsoft marks it a major change
CommunityAli Tajran
How to Block Access for High-Risk AI Agents
Community post · Ali Tajran
CommunityJan Bakker
Domainless SAML federation in Microsoft Entra External ID
Community post · Jan Bakker
Updates and guidanceAzure2 source records
Azure update · 2 entries
Updates and guidanceGoogle Gemini3 source records
Product news · 3 entries
- Launched the Managed Agents in the Gemini API in public preview.
Product news · Gemini API release notes
- Released the general-purpose Antigravity Agent managed agent, antigravity-preview-05-2026, in public preview.
Product news · Gemini API release notes
Updates and guidanceMicrosoft 365 Message Center Archive by Merill Fernando3 source records
Azure update · 3 entries
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.