The Microsoft Security Dashboard for AI is a unified governance tool now available in public preview that aggregates real-time risk signals from Microsoft Defender, Microsoft Entra, and Microsoft Purview into a single interactive interface. Designed for CISOs and AI risk leaders, it provides inventory discovery, posture tracking, and remediation paths for AI agents, models, MCP servers, and applications. No additional licensing is required — access is included for organizations that already hold enterprise subscriptions to the relevant Microsoft security products.

Source

Microsoft has released Windows 11 builds 26100.7918 (version 24H2) and 26200.7918 (version 25H2) to the Release Preview Channel via cumulative update KB5077241 on February 17, 2026. The update introduces native Sysmon integration, a built-in taskbar network speed test, Quick Machine Recovery for Windows Pro, Emoji 16.0, pan/tilt camera controls, and a range of app and system improvements. Features are delivered via two rollout types: gradual (phased, device-by-device) and normal (broad release to all eligible devices simultaneously).

Source

Microsoft has announced that moderation approvals in Exchange Online are transitioning from voting buttons to Actionable Messages Adaptive Cards, bringing Approve | Reject buttons directly into email bodies. This update enables moderators to approve or reject messages from any Outlook client, including Windows, macOS, web, and mobile. The rollout begins in late February 2026 and concludes by early April 2026 for Worldwide and GCC environments. The legacy voting button method remains available until July 31, 2026, after which Actionable Messages Adaptive Cards will be the only supported method.

Source

Microsoft has published its planned team investments for PowerShell 7.7, Windows OpenSSH, and Desired State Configuration (DSC) v3.2. The roadmap for PowerShell 7.7 includes relocating PSUserContentPath, non-profile-based module loading, Bash-style aliases, and a Model Context Protocol (MCP) server. For Windows OpenSSH, the primary addition under evaluation is support for Entra ID authentication. Desired State Configuration (DSC) v3.2 will include a new Python adapter to enable the creation of DSC resources on Linux.

Source

Autonomous AI agents can perform complex tasks without human intervention, but face a critical challenge: how can they trust agents from other organizations? ERC-8004, developed by teams from the Ethereum Foundation, Google, Coinbase, and MetaMask, addresses this by providing a decentralized identity, reputation, and verification system for AI agents. Launched on Ethereum mainnet on January 29, 2026, the standard enables agents to discover reliable service providers and verify past performance. Over 20,000 AI agents were deployed across multiple blockchains within the first two weeks.

Source

Microsoft released KB5077868 on February 16, 2026, to resolve a TrustedInstaller deadlock bug that causes Windows 11, version 26H1, to hang during the out-of-box experience (OOBE). The fix is delivered automatically as an OOBE update when the device has an active internet connection at first boot. No restart is required after applying the update, and Microsoft reports no known issues with KB5077868.

Source

The Windows January 2026 security update introduces security hardening that restricts applications from autofilling credentials in Windows authentication dialogs, affecting remote support tools, automated authentication workflows, and screen-sharing applications. This change addresses CVE-2026-20804, a Windows Hello vulnerability that allows biometric injection attacks.

Source

ChatGPT Lockdown Mode is an advanced security setting designed to protect organizations against prompt-injection-based data exfiltration attacks. Introduced by OpenAI in February 2026, you can enable this optional feature through workspace settings if you manage enterprise ChatGPT accounts.

Source

Microsoft released service update 2601 for Intune. The update introduces Endpoint Privilege Management support for Azure Virtual Desktop, brings admin tasks to general availability, and adds Lenovo Device Orchestration integration. Key configuration updates include new Windows settings catalog policies for Microsoft Edge version 143 and Google Chrome version 141, expanded Android Enterprise management mode filtering, and Zimperium Mobile Threat Defense certificate inventory integration for iOS devices.

Source

DNS over HTTPS (DoH) is a protocol that encrypts Domain Name System (DNS) queries and transmits them over HTTPS. This security enhancement prevents eavesdropping and manipulation of DNS traffic, addressing fundamental vulnerabilities in traditional DNS infrastructure that operates in plaintext. The DoH architecture consists of two components: the client, which initiates encrypted DNS queries, and the resolver (or server), which processes them. Windows has supported DoH on the client side since Windows 11. While Windows 10 includes the underlying client support in later builds (Insider Preview 19628 and later), it does not expose this functionality in the Settings app and requires manual Registry configuration, making it effectively unsupported for most users.

Source

WebMCP is a proposed web standard that enables websites to expose structured, callable tools directly to AI agents through a new browser API. Developed jointly by engineers at Google and Microsoft and incubated through the W3C's Web Machine Learning Community Group, WebMCP allows you to wrap your existing client-side JavaScript logic into agent-readable tools without re-architecting your web pages. Instead of AI agents relying on screen scraping or DOM manipulation to interact with websites, WebMCP provides a standardized way for agents to discover and invoke specific functions with defined schemas, ensuring more reliable and precise interactions.

Source

Microsoft announced on February 12, 2026, a significant change to its Exchange Online PowerShell module: the deprecation of the -Credential parameter for the Connect-ExchangeOnline cmdlet. This change represents part of a broader initiative to enhance security across Microsoft 365 administrative interfaces by eliminating authentication methods that do not support multifactor authentication.

Source

Windows 11 Insider Preview Build 28020.1611 for the Canary Channel is a relatively small but important update that primarily focuses on integrating enterprise-grade monitoring and refining cloud sharing workflows. Its headline change is native support for Sysmon (System Monitor), a tool that previously had to be installed separately from the Sysinternals suite, and is widely used by security professionals to analyze detailed system activity and detect threats.

Source

Anthropic announced on February 12, 2026, that Claude Enterprise is now available for direct self-serve purchase on its website, eliminating the need for sales conversations. Organizations can set up their workspace, configure single sign-on, and begin inviting team members within minutes.

Source

Microsoft is retiring Exchange Web Services (EWS) in Exchange Online, with a phased shutdown beginning October 1, 2026, and complete retirement by April 1, 2027. You must migrate your applications to the Microsoft Graph API before the final deadline to maintain access to Exchange Online mailboxes. This retirement only affects Exchange Online in Microsoft 365 environments and does not impact on-premises Exchange Server installations. Organizations using EWS-dependent applications face service interruptions unless they transition to supported alternatives. The nearly 20-year-old protocol no longer meets modern security, scale, and reliability requirements.

Source

Microsoft's original Secure Boot certificates, issued in 2011, begin expiring in late June 2026, potentially affecting millions of Windows devices worldwide. While your device will continue to boot normally after expiration, it will enter a degraded security state where new boot-level protections cannot be applied. To maintain full protection against emerging threats, ensure your system receives the latest 2023 certificates before the deadline.

Source

Microsoft released two dynamic updates for Windows 11 on January 29, 2026, targeting the setup and recovery infrastructure. KB5074110 is particularly important because older Secure Boot certificates will begin expiring in June 2026. KB5074110 and KB5074111 also bring improvements to feature update installations and recovery tools for Windows 11 versions 24H2 and 25H2. These updates ensure smoother upgrades and more reliable system recovery without introducing new user-facing features.

Source

Action1 is a cloud-based autonomous endpoint management platform focused on patch management, vulnerability assessment, and software deployment. The December release significantly expanded the platform by introducing native Linux agent support and an enterprise-wide management view, thereby strengthening Action1’s suitability for organizations managing heterogeneous, distributed environments.

Source

Microsoft Intune's January 2026 updates deliver enhancements to endpoint management, including PowerShell script installers for Win32 apps, improved Endpoint Privilege Management, unified admin task workflows, enhanced Apple device enrollment with ACME protocol support, and critical updates to the mobile application management service. These updates streamline application deployment, strengthen security controls, and improve administrative efficiency across Windows, macOS, iOS, and Android platforms.

Source