Weekly briefing

Week 44 · 26 Oct – 26 Oct 2026 UTC · assess the changes, then plan the next dates.

What to assess first

26 Oct – 26 Oct · dates to 25 Nov Check coverage

Coming up4

31Oct
Message Center action dateDue 31 Oct 2026 · in 5 days
MC1392568: Microsoft Defender for Endpoint: Support for Amazon Linux 2 (ARM64) retiring October 31, 2026
Same day: Message Center action date: MC1490899: Microsoft 365: Targeted Release retirement
2Nov
Message Center action dateDue 2 Nov 2026 · in 7 days
MC1230889: (Updated) Outlook for Windows report retirement in the Exchange admin center
6Nov
Message Center action dateDue 6 Nov 2026 · in 11 days
MC1325414: (Updated) Microsoft Entra ID SSPR will require registered authentication methods starting November 9, 2026
Related evidence (6)
- Combined security information registration
  Official documentation · Suggested by a shared curated topic and product; not a verified connection
- MC1450134: (Updated) Microsoft Entra: Windows Hello for Business and macOS Platform SSO as standalone MFA factors
  Public source · Suggested by a shared curated topic and product; not a verified connection
- Authentication registration campaigns
  Official documentation · Suggested by a shared curated topic and product; not a verified connection
- Conditional Access authentication strengths for guests
  Official documentation · Suggested by a shared curated topic and product; not a verified connection
- MFA NPS extension
  Official documentation · Suggested by a shared curated topic and product; not a verified connection
- Authentication methods policy
  Official documentation · Suggested by a shared curated topic and product; not a verified connection
10Nov
Patch TuesdayScheduled for 10 Nov 2026 · in 15 days
Patch Tuesday, 10 November 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

Changed4

26Oct
Security26 Oct 2026
Malicious code in monitoring-agent (npm)
MAL-2026-17515
26Oct
Security26 Oct 2026
Malicious code in @s4yhiitestpoc/scan-https-d (npm)
MAL-2026-17766
26Oct
Security26 Oct 2026
Malicious code in @s4yhiitestpoc/r2-https-b (npm)
MAL-2026-17808
26Oct
Security26 Oct 2026
Malicious code in @s4yhiitestpoc/r2-control (npm)
MAL-2026-18302

How this list is chosen

Changes from 26 Oct 2026 – 26 Oct 2026 UTC and dates due up to 25 Nov 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.