ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Microsoft Copilot (Microsoft 365): [Copilot Extensibility] Users in GCC-H will be able to use custom engine agents Roadmap entry4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  2. Microsoft Purview: Data Lifecycle Management – Increase in expansion limit for auto expanding archive beyond 1.5TB Roadmap entry4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  3. Microsoft Purview: Data Loss Prevention – New Guided Experience to Diagnose and Resolve DLP Issues Roadmap entry4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  4. Microsoft Edge: Upgraded Copilot new tab page Roadmap entry4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  5. Microsoft Purview: Auto-labeling scalability, policy management, and reporting enhancements Roadmap entry4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  6. Jira Software Data Center: MITM (Man-in-the-Middle) axios Dependency (CVE-2026-101898) Advisory content revised: Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply proxy settings and caller-supplied DNS lookup policy. An HTTPS request uses httpVersion: 2 wi…3 linked entries across history · in Security Follow evidence and connection reasons
  7. Jira Software Data Center: DoS (Denial of Service) axios Dependency (CVE-2026-101901) Advisory content revised: Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not install adequate error handling for a ClientHttp2Session during Axios HTTP/2 session initialization or reuse. A request uses …3 linked entries across history · in Security Follow evidence and connection reasons
  8. Jira Software Data Center: DoS (Denial of Service) axios Dependency (CVE-2026-101903) Advisory content revised: Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular expression allows slash characters on both sides of the media-type separator. An application passes an attacker-controlled malf…3 linked entries across history · in Security Follow evidence and connection reasons
  9. Jira Software Data Center: MITM (Man-in-the-Middle) axios Dependency (CVE-2026-101905) Advisory content revised: Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request options without an own createConnection value. A separate same-process prototype-poll…3 linked entries across history · in Security Follow evidence and connection reasons
  10. Jira Software Data Center: DoS (Denial of Service) axios Dependency (CVE-2026-101906) Advisory content revised: Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot regular expression to redirect hostnames. HTTP_PROXY or HTTPS_PROXY is configured, NO_PROXY…3 linked entries across history · in Security Follow evidence and connection reasons
  11. Crowd Data Center: SSRF (Server-Side Request Forgery) axios Dependency (CVE-2026-101907) Advisory content revised: Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the maxRedirects: 0 redirect policy. An Axios request uses the fetch adapter with maxRedirects set to zero and receives a…3 linked entries across history · in Security Follow evidence and connection reasons
  12. Jira Software Data Center: Prototype Pollution axios Dependency (CVE-2026-101909) Advisory content revised: Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited serialization options and visitor properties supplied through prototype pollution. A separate…3 linked entries across history · in Security Follow evidence and connection reasons
  13. ImageMagick - Memory Leak in TXT File Processing via Texture Attribute Advisory content revised: ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture object allocated via ReadImage is not released when GetTypeMetrics fails, leaking memory each ti…3 linked entries across history · in Security Follow evidence and connection reasons
  14. ImageMagick - Heap Out-of-Bounds Read in PCD Decoder Advisory content revised: ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of s…3 linked entries across history · in Security Follow evidence and connection reasons
  15. Microsoft QUIC Information Disclosure Vulnerability Advisory content revised: Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.3 linked entries across history · in Security Follow evidence and connection reasons
  16. Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation Advisory content revised: Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied con…3 linked entries across history · in Security Follow evidence and connection reasons
  17. Microsoft Copilot (Microsoft 365): Edit your Copilot-generated PowerPoint presentation outline via Pages in Chat Cancelled3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  18. SharePoint: HTML pages Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  19. Microsoft Edge: v.157 - Updated performance information in tab hover cards Roadmap entry3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  20. Microsoft Teams: Granular Conditional Access for Teams meetings Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  21. Microsoft Copilot (Microsoft 365): Enable semantic model in Sales agent Date moved later3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  22. Microsoft Teams: Phishing Detection in Teams Messaging Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  23. Microsoft Teams: Loop meeting notes stored in the meeting organizer's OneDrive Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  24. Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  25. GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK on Windows Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  26. PAN-OS: GlobalProtect Authorization Bypass Vulnerability Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  27. PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  28. PAN-OS: Privilege Escalation Vulnerability in GlobalProtect Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  29. PAN-OS: User Impersonation through GlobalProtect Portal Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  30. PAN-OS: Buffer Overflow Vulnerability Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 13:11 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.