WEEKLY BRIEFING · 13 JUL – 19 JUL 2026 · UTC
Public sources only
117 public updates in week 29
Microsoft published 14 Windows KB releases (12 security, 2 out-of-band). MSRC published 578 new Microsoft CVEs, 57 critical, 3 already exploited in the wild. 41 roadmap changes, led by Purview (16) and Microsoft 365 Copilot (7). CISA added 3 Microsoft CVEs to its Known Exploited Vulnerabilities catalog. 18 Windows and security articles from Microsoft blogs.
14Windows KB releases
1MSRC release note
41Roadmap changes across 8 products
18Windows and security articles
578Microsoft CVEs published · 57 critical
3Microsoft CVEs added to CISA KEV
Security to act on6
- CVE-2026-58644 — Microsoft SharePoint Remote Code Execution Vulnerabilityexploited
- CVE-2026-55040 — Microsoft SharePoint Server Security Feature Bypass VulnerabilityCISA KEV
- CVE-2026-50522 — Microsoft SharePoint Remote Code Execution VulnerabilityCISA KEV
- CVE-2026-56155 — Active Directory Federation Services Elevation of Privilege Vulnerabilityexploited
- CVE-2026-56164 — Microsoft SharePoint Server Elevation of Privilege Vulnerabilityexploited
- CVE-2026-50661 — Windows BitLocker Security Feature Bypass Vulnerabilitydisclosed
Windows releases14
- Windows 11, version 24H2 — KB5121767 (OOB), build 26100.889418 Jul
- Windows 11, version 25H2 — KB5121767 (OOB), build 26200.889418 Jul
- Windows 10, version 1607 — KB5099535 (B), build 14393.933914 Jul
- Windows 10, version 1809 — KB5099538 (B), build 17763.902014 Jul
- Windows 10, version 21H2 — KB5099539 (B), build 19044.754814 Jul
9 more
- Windows 10, version 22H2 — KB5099539 (B), build 19045.754814 Jul
- Windows 11, version 23H2 — KB5099414 (B), build 22631.737614 Jul
- Windows 11, version 24H2 — KB5101650 (B), build 26100.887514 Jul
- Windows 11, version 25H2 — KB5101650 (B), build 26200.887514 Jul
- Windows 11, version 26H1 — KB5101649 (B), build 28000.252514 Jul
- Windows Server 2016 — KB5099535 (B), build 14393.933914 Jul
- Windows Server 2019 — KB5099538 (B), build 17763.902014 Jul
- Windows Server 2022 — KB5099540 (B), build 20348.538614 Jul
- Windows Server 2025 — KB5099536 (B), build 26100.3315814 Jul
MSRC security releases1
Windows and security news18
- Out-of-band update to address Windows update issue affecting some devices with Intel IPF driver18 Jul
- 90-Day Reminder: Windows Server 2022 will reach end of mainstream support on October 13, 202616 Jul
- Announcing Trusted Launch for Virtual Machines for Windows Server Insiders16 Jul
- 90-Day Reminder: Windows 11, version 24H2 and Windows 10 LTSB 2016 reaching end of updates on October 13, 202615 Jul
- Updated guidance explains Windows monthly updates and servicing15 Jul
13 more
- Announcing the ASIM Parser Creation Agentic Experience15 Jul
- New Privileged Token Context Telemetry Boosts Advanced Hunting in Microsoft Defender15 Jul
- Introducing scheduled antivirus scans on Microsoft Defender Linux15 Jul
- Customer Offerings: Solution Optimization for GitHub Copilot15 Jul
- Enforcement phase for Kerberos RC4 protections begins with the July 2026 Windows security update14 Jul
- The July 2026 Windows security update is now available14 Jul
- Hunting Local AI Tools on macOS with Microsoft Defender for Endpoint14 Jul
- Microsoft Defender now integrates with Dragos, Forescout, & Armis for OT Security14 Jul
- XBOX, The Coalition and NVIDIA announce a PC partnership for Gears of War: E-Day14 Jul
- Check This Out! (CTO!) Guide (July 2026)13 Jul
- Building toward an Agentic SOC: A Portable, Autonomous Malware Investigation Agent13 Jul
- Patch the Kernel, Skip the Reboot: The Case for Arc-Enabled Hotpatching on Windows Server 202513 Jul
- Improving Windows Search Box, with less clutter and more control13 Jul
Microsoft product news38
Microsoft Graph changelog · 11
- Mailbox import and export (beta): Added the Delete method to the mailboxItem resource.17 Jul
- Calendar (v1.0): Added the placeServicePlanInfo resource. (+4 more)17 Jul
- Identity and access (v1.0): Added the customDataProvidedResourceUploadStatus enumeration type to the v1.0 endpoint. (+12 more)16 Jul
8 more
- Identity and access (v1.0): Added the customDataProvidedResource resource, a derived type of accessPackageResource , to the v1.0 endpoint. (+1 more)16 Jul
- Device and app management (v1.0): Added the cloudPcServicePlan resource and an associated method. (+1 more)16 Jul
- Identity and access (v1.0): Added the sponsorOf relationship to the user resource. (+1 more)15 Jul
- Files (beta): Updated the getSharePointApiUsage method to support the optional reportType parameter, which selects between the egressReport and throttlin… (+1 more)15 Jul
- Identity and access (beta): Added the sponsorOf relationship to the user resource. (+1 more)15 Jul
- Security (beta): Added the attachment resource.15 Jul
- Device and app management (beta): Added the lastLogoffDateTime property to the cloudPC resource.13 Jul
- Search (beta): Added the informationProtectionLabel property to the externalItem resource. (+1 more)13 Jul
ITOps Talk Blog · 6
- Network Security Perimeter for Azure Event Hubs: Hardening Your Data Streams17 Jul
- Az Update - Week 2 of the return editions17 Jul
- Azure Elastic SAN: Pooled, Cloud-Native Block Storage That Actually Acts Like a SAN17 Jul
3 more
Claude Platform release notes · 4
- The experimental prompt tools APIs for generating, improving, and templatizing prompts (/v1/experimental/generate_prompt, /v1/experimental/improve_prompt, and /v1/experi…17 Jul
- The legacy Workbench (platform.claude.com/workbench) in the Claude Console is being sunset with access ending on August 17, 2026.17 Jul
- Mid-conversation system messages are available on Claude Fable 5, Claude Mythos 5, and Claude Opus 4.8, on the Claude API, Claude in Amazon Bedrock, and Google Cloud.15 Jul
Jamf Blog · 3
- AI in K-12: Practical use cases schools are already using15 Jul
- Why AI policy acknowledgements aren’t evidence of compliance14 Jul
- Sign in with your Jamf ID: no password required13 Jul
Windows 365 what's new · 3
- Add Cloud Apps from a file path in Public Preview13 Jul
- Cloud PC Settings is now generally available13 Jul
- Updated provisioning policy page in Microsoft Intune13 Jul
Microsoft 365 Developer Blog · 2
- Build Once, Run Everywhere: Unified Manifest for Office Add-Ins now Generally Available17 Jul
- Building Agents for Teams: Turning conversations into outcomes14 Jul
Microsoft 365 Blog · 1
Microsoft Teams Blog · 1
Azure Infrastructure Blog · 1
SharePoint Blog · 1
Power BI Updates Blog · 1
Microsoft Entra Blog · 1
Exchange Team Blog · 1
Microsoft Graph PowerShell SDK release notes · 1
Microsoft Intune what's new · 1
From the community5
- The Demise of the OWA Light Client17 Jul
- How to Schedule Teams Meetings from Shared Mailboxes16 Jul
- Cross-Tenant Message Recall and Duplicate DDG Detection Enhance Exchange Online Messaging15 Jul
- Microsoft to Stop Providing Telephony-Based Authentication Methods for MFA in February 202714 Jul
- How to Identify Obsolete SharePoint Online Sites with PowerShell13 Jul
Microsoft 365 roadmap41
Purview · 16
- Microsoft Purview: Data Loss Prevention to prevent Microsoft 365 Copilot processing content with sensitivity labels supports all storage locations17 Jul
- Microsoft Purview compliance portal: Data Loss Prevention - Trigger Power automate workflows as outcome of DLP rule match15 Jul
- Microsoft Purview: Data Loss Prevention - AI Powered Data Loss Prevention Policy Optimizer15 Jul
13 more
- Microsoft Purview: Data Lifecycle Management - Power Automate integration with records management14 Jul
- Microsoft Purview: Data Security Investigations – Introducing OCR support14 Jul
- Microsoft Purview: Endpoint Data Loss Prevention - Add support of hyperlinks in warn & block toast messages for Edge browser14 Jul
- Microsoft Purview: Endpoint Data Loss Prevention: Add control to include or exclude Default file paths exclusions for Windows14 Jul
- Microsoft Purview: Information Protection-Content Explorer – Enhanced Tag (SIT, Labels) Filter at UI Layer14 Jul
- Microsoft Purview: Purview Information Protection | Classifier Simulation Mode (Health Monitoring)14 Jul
- Microsoft Purview compliance portal: Data Loss Prevention - Optical character recognition (OCR) support for endpoint13 Jul
- Microsoft Purview compliance portal: Data Loss Prevention for endpoints - Optical character recognition (OCR) support for embedded images in endpoint13 Jul
- Microsoft Purview: Data Security Investigations – notification and improved search capabilities13 Jul
- Microsoft Purview: eDiscovery – Enhancement of Loop and Copilot Pages in Review and Export13 Jul
- Microsoft Purview: Information Protection- New Summary Metrics in Content Explorer for Unscanned Files and Classification History Details13 Jul
- Microsoft Purview: Insider Risk Management- Insider risk management for agents13 Jul
- Microsoft Purview: Insider Risk Management-Insider risk management for agents13 Jul
Microsoft 365 Copilot · 7
- Microsoft Copilot (Microsoft 365): Use Agent 365 agents within Microsoft 365 Copilot Chat and Declarative Agents17 Jul
- Microsoft Copilot (Microsoft 365): Find meetings based on topics and keywords15 Jul
- Microsoft Copilot (Microsoft 365): SharePoint list support in Agent Builder15 Jul
4 more
- Microsoft Copilot (Microsoft 365): Admins can manage access more precisely with support for nested permissions in Jira, Confluence, and ServiceNow13 Jul
- Microsoft Copilot (Microsoft 365): Copilot connectors are available for U.S. Department of Defense environment13 Jul
- Microsoft Copilot (Microsoft 365): Engage private content in M365 Copilot13 Jul
- Microsoft Copilot (Microsoft 365): Surveys Agent and Copilot Chat in Microsoft Forms13 Jul
Viva · 6
- Microsoft Viva: Copilot Analytics - Agent 365 dashboard for managers17 Jul
- Microsoft Viva: Copilot Analytics - Agent 365 Dashboard in Insights15 Jul
- Microsoft Viva: Engage: Detect moderated themes in images15 Jul
3 more
SharePoint · 5
- SharePoint: Microsoft 365 Archive file-level archiving15 Jul
- SharePoint: Enterprise store plugins in Copilot in SharePoint14 Jul
- SharePoint: Personal Skills in Copilot in SharePoint14 Jul
2 more
4 more products · 7 changes
Outlook · 3
- Outlook: All Day events to show up more clearly in the Mail module Calendar Preview17 Jul
- Outlook: Emails marked with External to be supported as Rules conditions15 Jul
- Outlook: add attachments while offline in the new Outlook for Windows13 Jul
Teams · 2
- Microsoft Teams: Breakout rooms up to 1,000 Attendees in Teams meetings17 Jul
- Microsoft Teams: Report external users for security concerns in Teams14 Jul
Microsoft 365 admin center · 1
OneDrive · 1
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.