Weekly briefing

Week 22 · 25 May – 31 May 2026 UTC · assess the changes, then plan the next dates.

What to assess first

25 May – 31 May · dates to 30 Jun Check coverage

Act on1

29May
Exploited29 May 2026
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
CVE-2026-0257

Coming up8

3Jun
CISA KEV deadlineDue 3 Jun 2026
Microsoft Windows Buffer Overflow Vulnerability
CVE-2008-4250
Same day: CISA KEV deadline: Microsoft DirectX NULL Byte Overwrite Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Defender Link Following Vulnerability; CISA KEV deadline: Microsoft Defender Denial of Service Vulnerability
6Jun
End of servicingDue 6 Jun 2026
End of servicing: Microsoft Configuration Manager, Version 2409
9Jun
Patch TuesdayScheduled for 9 Jun 2026
Patch Tuesday, 9 June 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
29Jun
Message Center action dateDue 29 Jun 2026
MC1226495: Microsoft Teams: Teams Live Events is retiringMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1266901: Microsoft Teams: Retirement of legacy third‑party meeting and call control APIs
30Jun
Message Center action dateDue 30 Jun 2026
MC1263280: Microsoft Entra: Security hardening to prevent user account takeover in Microsoft Entra Connect SyncMicrosoft 365 Message Center Archive by Merill Fernando
Related evidence (6)
- Time to move to Entra Cloud Sync
  Community source · Suggested by a shared curated topic and product; not a verified connection
- Upcoming change - Enhanced admin authorization for Microsoft Entra Connect Sync configuration changes
  Public source · Suggested by a shared curated topic and product; not a verified connection
- Upcoming Change - Migrate from Microsoft Entra Connect Sync to Microsoft Entra Cloud Sync
  Public source · Suggested by a shared curated topic and product; not a verified connection
- MC1263280: Microsoft Entra: Security hardening to prevent user account takeover in Microsoft Entra Connect SyncMicrosoft 365 Message Center Archive by Merill Fernando
  Public source · Suggested by a shared curated topic and product; not a verified connection
- Entra Connect Sync 2.6.3.0 addresses an issue where auto-upgrade would halt synchronization
  Community source · Suggested by a shared curated topic and product; not a verified connection
- Microsoft Entra Connect 2.6.3.0
  Public source · Suggested by a shared curated topic and product; not a verified connection
31May
Message Center action dateDue 31 May 2026
MC1268926: Microsoft AutoUpdate (MAU) CDN Endpoint Update for MacMicrosoft 365 Message Center Archive by Merill Fernando
29May
CISA KEV deadlineDue 29 May 2026
Microsoft Exchange Server Cross-Site Scripting Vulnerability
CVE-2026-42897
28May
Message Center action dateDue 28 May 2026
MC1300584: Microsoft Entra: App Instance Lock enabled by default for new applicationsMicrosoft 365 Message Center Archive by Merill Fernando

Changed2

28May
Release28 May 2026
Az PowerShell module 16.0.0
Az PowerShell module releases
Related evidence (3)
- Az PowerShell module 15.6.1
  Public source · Suggested by a shared curated topic and product; not a verified connection
- Az PowerShell module 15.6.0
  Public source · Suggested by a shared curated topic and product; not a verified connection
- Az PowerShell module 15.5.0
  Public source · Suggested by a shared curated topic and product; not a verified connection
27May
Revised27 May 2026
MC1323250: [Action Required] Update scripts using Get-MailDetailTransportRuleReport and Get-MailTrafficPolicyReportMicrosoft 365 Message Center Archive by Merill Fernando
Exchange Online

How this list is chosen

Changes from 25 May 2026 – 31 May 2026 UTC and dates due up to 30 Jun 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.