Microsoft has completed the global rollout of AI workflow templates in the Teams Workflows app, powered by Microsoft 365 Copilot, as of mid-February 2026 (Roadmap ID 500379). The feature introduces scheduled prompts — recurring, AI-driven automations that run without manual intervention. You can use pre-built templates to automate tasks such as weekly project summaries or data monitoring across the Microsoft 365 ecosystem. The feature is restricted to users with a Microsoft 365 Copilot license and is currently available only in Teams for Web and Teams for Mac.

Source

Library management is a new feature in Microsoft Defender for Endpoint that provides security operations teams with a centralized interface for uploading, organizing, and reviewing scripts and files before a live response session begins. Previously, analysts had to upload tools during an active investigation, which delayed response times. The feature is now generally available for enterprise customers and integrates with Microsoft Security Copilot for automated script analysis.

Source

Microsoft Cloud PKI for Intune automates certificate management for enrolled devices, but you must manually handle the expiration of the certification authority (CA). When your Cloud PKI issuing CA approaches its expiration date, you need to create a new CA and update your SCEP certificate profiles to maintain uninterrupted service. This guide explains the expiration process, potential impacts, and the steps required to transition to a new issuing CA.

Source

The Microsoft Security Dashboard for AI is a unified governance tool now available in public preview that aggregates real-time risk signals from Microsoft Defender, Microsoft Entra, and Microsoft Purview into a single interactive interface. Designed for CISOs and AI risk leaders, it provides inventory discovery, posture tracking, and remediation paths for AI agents, models, MCP servers, and applications. No additional licensing is required — access is included for organizations that already hold enterprise subscriptions to the relevant Microsoft security products.

Source

Microsoft has released Windows 11 builds 26100.7918 (version 24H2) and 26200.7918 (version 25H2) to the Release Preview Channel via cumulative update KB5077241 on February 17, 2026. The update introduces native Sysmon integration, a built-in taskbar network speed test, Quick Machine Recovery for Windows Pro, Emoji 16.0, pan/tilt camera controls, and a range of app and system improvements. Features are delivered via two rollout types: gradual (phased, device-by-device) and normal (broad release to all eligible devices simultaneously).

Source

Microsoft has announced that moderation approvals in Exchange Online are transitioning from voting buttons to Actionable Messages Adaptive Cards, bringing Approve | Reject buttons directly into email bodies. This update enables moderators to approve or reject messages from any Outlook client, including Windows, macOS, web, and mobile. The rollout begins in late February 2026 and concludes by early April 2026 for Worldwide and GCC environments. The legacy voting button method remains available until July 31, 2026, after which Actionable Messages Adaptive Cards will be the only supported method.

Source

Microsoft has published its planned team investments for PowerShell 7.7, Windows OpenSSH, and Desired State Configuration (DSC) v3.2. The roadmap for PowerShell 7.7 includes relocating PSUserContentPath, non-profile-based module loading, Bash-style aliases, and a Model Context Protocol (MCP) server. For Windows OpenSSH, the primary addition under evaluation is support for Entra ID authentication. Desired State Configuration (DSC) v3.2 will include a new Python adapter to enable the creation of DSC resources on Linux.

Source

Autonomous AI agents can perform complex tasks without human intervention, but face a critical challenge: how can they trust agents from other organizations? ERC-8004, developed by teams from the Ethereum Foundation, Google, Coinbase, and MetaMask, addresses this by providing a decentralized identity, reputation, and verification system for AI agents. Launched on Ethereum mainnet on January 29, 2026, the standard enables agents to discover reliable service providers and verify past performance. Over 20,000 AI agents were deployed across multiple blockchains within the first two weeks.

Source

Microsoft released KB5077868 on February 16, 2026, to resolve a TrustedInstaller deadlock bug that causes Windows 11, version 26H1, to hang during the out-of-box experience (OOBE). The fix is delivered automatically as an OOBE update when the device has an active internet connection at first boot. No restart is required after applying the update, and Microsoft reports no known issues with KB5077868.

Source

The Windows January 2026 security update introduces security hardening that restricts applications from autofilling credentials in Windows authentication dialogs, affecting remote support tools, automated authentication workflows, and screen-sharing applications. This change addresses CVE-2026-20804, a Windows Hello vulnerability that allows biometric injection attacks.

Source

ChatGPT Lockdown Mode is an advanced security setting designed to protect organizations against prompt-injection-based data exfiltration attacks. Introduced by OpenAI in February 2026, you can enable this optional feature through workspace settings if you manage enterprise ChatGPT accounts.

Source

Microsoft released service update 2601 for Intune. The update introduces Endpoint Privilege Management support for Azure Virtual Desktop, brings admin tasks to general availability, and adds Lenovo Device Orchestration integration. Key configuration updates include new Windows settings catalog policies for Microsoft Edge version 143 and Google Chrome version 141, expanded Android Enterprise management mode filtering, and Zimperium Mobile Threat Defense certificate inventory integration for iOS devices.

Source

DNS over HTTPS (DoH) is a protocol that encrypts Domain Name System (DNS) queries and transmits them over HTTPS. This security enhancement prevents eavesdropping and manipulation of DNS traffic, addressing fundamental vulnerabilities in traditional DNS infrastructure that operates in plaintext. The DoH architecture consists of two components: the client, which initiates encrypted DNS queries, and the resolver (or server), which processes them. Windows has supported DoH on the client side since Windows 11. While Windows 10 includes the underlying client support in later builds (Insider Preview 19628 and later), it does not expose this functionality in the Settings app and requires manual Registry configuration, making it effectively unsupported for most users.

Source

WebMCP is a proposed web standard that enables websites to expose structured, callable tools directly to AI agents through a new browser API. Developed jointly by engineers at Google and Microsoft and incubated through the W3C's Web Machine Learning Community Group, WebMCP allows you to wrap your existing client-side JavaScript logic into agent-readable tools without re-architecting your web pages. Instead of AI agents relying on screen scraping or DOM manipulation to interact with websites, WebMCP provides a standardized way for agents to discover and invoke specific functions with defined schemas, ensuring more reliable and precise interactions.

Source

Microsoft announced on February 12, 2026, a significant change to its Exchange Online PowerShell module: the deprecation of the -Credential parameter for the Connect-ExchangeOnline cmdlet. This change represents part of a broader initiative to enhance security across Microsoft 365 administrative interfaces by eliminating authentication methods that do not support multifactor authentication.

Source

Windows 11 Insider Preview Build 28020.1611 for the Canary Channel is a relatively small but important update that primarily focuses on integrating enterprise-grade monitoring and refining cloud sharing workflows. Its headline change is native support for Sysmon (System Monitor), a tool that previously had to be installed separately from the Sysinternals suite, and is widely used by security professionals to analyze detailed system activity and detect threats.

Source

Anthropic announced on February 12, 2026, that Claude Enterprise is now available for direct self-serve purchase on its website, eliminating the need for sales conversations. Organizations can set up their workspace, configure single sign-on, and begin inviting team members within minutes.

Source

Microsoft is retiring Exchange Web Services (EWS) in Exchange Online, with a phased shutdown beginning October 1, 2026, and complete retirement by April 1, 2027. You must migrate your applications to the Microsoft Graph API before the final deadline to maintain access to Exchange Online mailboxes. This retirement only affects Exchange Online in Microsoft 365 environments and does not impact on-premises Exchange Server installations. Organizations using EWS-dependent applications face service interruptions unless they transition to supported alternatives. The nearly 20-year-old protocol no longer meets modern security, scale, and reliability requirements.

Source

Visual Studio Code version 1.109 introduces agent orchestrations — a feature that transforms the IDE into a multi-agent development platform. You can now create custom agents that collaborate, delegate tasks to specialized subagents, and execute complex workflows autonomously. This article explains the concept and demonstrates agent orchestration with a simple example. I'll also share my opinion on Microsoft's concept of agent orchestrations. It's not particularly favorable.

Source