Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 03:28 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 42 · 12 Oct – 18 Oct 2026 UTC · assess the changes, then plan the next dates.

All dated changes in this period

1570 source records · 75 groups
Clear list filters

Security advisory · 10 entries

Show the other 7 entries

Published vulnerability · 18 entries

Show the other 15 entries

Linux Kernel Elevation of Privilege Vulnerability

Published vulnerability

CVE-2026-62840

Assessment context

Microsoft rates the vulnerability Critical · Microsoft states that customer action is required

Published vulnerability · 37 entries

Show the other 34 entries

Published vulnerability · 139 entries

Show the other 136 entries

October 2026 Security Updates

MSRC release notes · Microsoft Security Update Guide

Assessment context

Monthly security release notes

Published vulnerability · 22 entries

Show the other 19 entries

Published vulnerability · 10 entries

Show the other 7 entries

Published vulnerability · 1029 entries

Show the other 1026 entries

Published vulnerability · 48 entries

Show the other 45 entries

Guidance changed · 28 entries

  • Attack surface reduction rules

    Guidance changed

    1 removed passage (8 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (8 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender Antivirus compatibility with other products

    Guidance changed

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender Antivirus platform and engine versions

    Guidance changed

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

Show the other 25 entries
  • Defender for Endpoint API release notes

    Guidance changed

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Endpoint changes

    Guidance changed

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Endpoint on Android and iOS

    Guidance changed

    4 new passages (about 80 words), 1 removed passage (14 words). The changed wording mentions prerequisites, network endpoints. Review the source to confirm the effect.

    Assessment context

    4 new passages (about 80 words), 1 removed passage (14 words). The changed wording mentions prerequisites, network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Endpoint on Linux requirements

    Guidance changed

    1 removed passage (about 20 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (about 20 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Endpoint on macOS requirements

    Guidance changed

    1 removed passage (about 20 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (about 20 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Endpoint requirements

    Guidance changed

    1 removed passage (18 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (18 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Endpoint server onboarding

    Guidance changed

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Device control

    Guidance changed

    1 removed passage (18 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (18 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • EDR in block mode

    Guidance changed

    1 removed passage (11 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (11 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Indicators of compromise

    Guidance changed

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • Tamper protection

    Guidance changed

    1 removed passage (about 20 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

    Assessment context

    1 removed passage (about 20 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

  • DMARC configuration

    Guidance changed

    1 removed passage (about 20 words). No rule matched the changed words; review the source for its effect.

    Assessment context

    1 removed passage (about 20 words). No rule matched the changed words; review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Cloud Apps network requirements

    Guidance changed

    The page title or its body outside the tracked passages changed. Review the source for its effect.

    Assessment context

    The page title or its body outside the tracked passages changed. Review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Identity deployment

    Guidance changed

    The page title or its body outside the tracked passages changed. Review the source for its effect.

    Assessment context

    The page title or its body outside the tracked passages changed. Review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Identity on AD FS, AD CS and Entra Connect servers

    Guidance changed

    The page title or its body outside the tracked passages changed. Review the source for its effect.

    Assessment context

    The page title or its body outside the tracked passages changed. Review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Identity sensor prerequisites

    Guidance changed

    The page title or its body outside the tracked passages changed. Review the source for its effect.

    Assessment context

    The page title or its body outside the tracked passages changed. Review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Identity sensor proxy and endpoints

    Guidance changed

    The page title or its body outside the tracked passages changed. Review the source for its effect.

    Assessment context

    The page title or its body outside the tracked passages changed. Review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender for Office 365 preset security policies

    Guidance changed

    1 removed passage (about 20 words). No rule matched the changed words; review the source for its effect.

    Assessment context

    1 removed passage (about 20 words). No rule matched the changed words; review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Defender unified role-based access control

    Guidance changed

    The page title or its body outside the tracked passages changed. Review the source for its effect.

    Assessment context

    The page title or its body outside the tracked passages changed. Review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Email authentication (SPF, DKIM, DMARC)

    Guidance changed

    1 removed passage (about 20 words). No rule matched the changed words; review the source for its effect.

    Assessment context

    1 removed passage (about 20 words). No rule matched the changed words; review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Exchange Online Protection built-in security

    Guidance changed

    1 removed passage (about 20 words). No rule matched the changed words; review the source for its effect.

    Assessment context

    1 removed passage (about 20 words). No rule matched the changed words; review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Microsoft Defender portal

    Guidance changed

    The page title or its body outside the tracked passages changed. Review the source for its effect.

    Assessment context

    The page title or its body outside the tracked passages changed. Review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Network protection

    Guidance changed

    1 removed passage (5 words). No rule matched the changed words; review the source for its effect.

    Assessment context

    1 removed passage (5 words). No rule matched the changed words; review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Recommended EOP and Defender for Office 365 settings

    Guidance changed

    1 removed passage (about 20 words). No rule matched the changed words; review the source for its effect.

    Assessment context

    1 removed passage (about 20 words). No rule matched the changed words; review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

  • Safe Links

    Guidance changed

    1 removed passage (17 words). No rule matched the changed words; review the source for its effect.

    Assessment context

    1 removed passage (17 words). No rule matched the changed words; review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

Revised by Microsoft · 32 entries

Show the other 29 entries

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 03:28 UTC · 271 of 271 readable · 268 fully read · documentation 464/464 current