Microsoft's September 2026 security roundup adds a Security Copilot detonation summary to Microsoft Defender for Office 365 and network-level data loss prevention (DLP) through Microsoft Purview and Microsoft Entra Global Secure Access. Purview also gains larger auto-labeling simulations, eDiscovery support for user-owned SharePoint Embedded containers, file-level archiving, and permanent deletion with Priority Cleanup. In addition, Intune Remote Help, Enterprise Application Management, and Microsoft Cloud PKI are coming to GCC High. This article explains the requirements, configuration steps, and limitations of each feature.

Source

Microsoft has released a public preview of auto-generated Power Platform API command groups in Microsoft Power Platform CLI, the pac command-line tool for administering Power Platform. The preview adds more than 200 commands across 15 command groups generated directly from the Power Platform API specification instead of being written by hand. This article explains what Power Platform is, how the generated commands work, which admin scenarios they unlock, and how to get started.

Source

Specops Device Trust is a cloud-based security product from Specops Software (part of Outpost24) that ties access decisions to user identity and the device's security state. It addresses a specific gap that multi-factor authentication (MFA) alone cannot close: an attacker who steals a session token or login credentials can still access your systems if access decisions are based solely on user identity. The product binds users to enrolled, verified devices and continuously checks device security throughout every session. This article covers how Specops Device Trust works, what it checks, and how to deploy it.

Source

Microsoft has released the optional preview update KB5124006 for Windows 11 version 26H1, which raises the OS build to 28000.3086. The update adds taskbar positioning, a smaller taskbar, Start menu size options, and new Windows Search privacy controls. For administrators, the more relevant changes are the rollout of Administrator protection, general availability of Autopilot device association, Microsoft Execution Containers (MXC) process isolation, and standalone ML-KEM for TLS. The update also removes WMIC from 26H1 and lists two known issues that affect domain-joined PCs and USB audio devices.

Source

Microsoft announced the general availability of user-initiated provisioning for Windows 365 Reserve. Windows 365 Reserve is a business continuity service that gives employees short-term access to a Cloud PC, a virtualized Windows desktop hosted in Microsoft's cloud, when their primary work device is unavailable. With this feature, eligible users can start provisioning their own Reserve Cloud PC directly from the Windows App instead of waiting for IT. You control the capability through a Windows App setting in Microsoft Intune and scope it to Microsoft Entra ID user groups.

Source

An Autopilot AI agent is an always-on digital worker that keeps acting on your behalf without waiting for each new hand-off, unlike task agents that start only when you assign work. With Copilot Cowork and Microsoft Scout, Microsoft offers two AI agents that do not just answer questions but complete tasks on your behalf. Both borrow ideas from OpenClaw, the open-source personal agent that became one of the fastest-growing projects on GitHub. This comparison explains how the three tools differ in architecture, governance, licensing, and availability, and briefly covers Claude Cowork, ChatGPT Agent / Codex, Manus, Meta Muse, Perplexity Computer, Hermes Agent, and Grok Bot.

Source

Microsoft has released Windows Admin Center version 2610 as a public preview. The headline change is a combined installer that covers both Administration Mode (aMode) and Virtualization Mode (vMode). The preview also adds Azure Arc onboarding, backup and restore, and certificate lifecycle management to vMode, plus a redesigned Azure registration experience. At the same time, Microsoft removed the preview VM Conversion tool for VMware migrations because of a change at Broadcom.

Source

Microsoft has demonstrated new administrative controls for Agent 365, its control plane for AI agents in the Microsoft 365 admin center. The new capabilities include a unified agent registry that also covers third-party platforms, governance for the tools that agents use, reusable security policy templates, preview controls for shadow AI, and cost management for usage-based agent services. This article explains what each control does and where limitations remain.

Source

Microsoft reports that generative AI usage reached 18.8% of the global working-age population in June 2026, up roughly one percentage point from the first quarter. Many experts argue that the AI race will not be decided solely by which country builds the best models or produces the most advanced AI chips. The decisive factor may be which country adopts and deploys the technology fastest across its economy. By that measure, the United States has already been overtaken by most industrialized countries included in Microsoft’s ranking. China is not included in the report, but its rapid deployment of AI suggests it could plausibly rank among the top three.

Source

Anthropic has selected Accenture’s Faculty unit as its first embedded evaluator, giving an outside team direct access to its AI development work. The companies plan to invest at least $1 billion each over five years, while Anthropic will initially finance Accenture’s participation. In effect, Anthropic is paying a third party to scrutinize—and help slow—the company’s own push toward more powerful frontier models. That absurd arrangement raises fundamental questions about conflicts of interest, internal judgment, and whether Anthropic's leadership is qualified to build safe AI.

Source

Matthew Berman examines Jev, a new AI model from TypeSafe designed to make structured decisions rather than generate conversational text. Its RLCD training approach is presented as substantially faster and cheaper than conventional large language models, with free output tokens and very low input costs. The model is aimed at high-volume workflows where speed, cost, and consistent decisions matter more than open-ended conversation.

Source

Microsoft has released Desired State Configuration (DSC) v3.3.0, the latest version of its cross-platform configuration management platform. DSC lets you describe the desired state of a Windows or Linux system in a YAML or JSON configuration document and then apply, verify, or export that state with the dsc command-line tool. Version 3.3.0 adds three built-in Windows resources, a registry-backed adapter, wider --what-if support, new expression functions, and Linux packages on Microsoft's package repository. The release follows DSC v3.2.0: new Windows resources, version pinning, and Bicep integration, which introduced the first wave of built-in Windows resources.

Source

Microsoft Foundry Local lets you run large language models (LLMs, text-generating AI models) and speech models directly on a Windows PC without sending prompts to the cloud. The runtime handles model downloads, hardware acceleration, and inference (the process of generating a response from a model) on your device. You do not need an Azure subscription. Foundry Local is part of Microsoft Foundry on Windows, alongside built-in Windows AI APIs and Windows ML. This article covers what it does, what hardware you need, how to install it, and where it fits compared to other local AI options.

Source

Microsoft has released Intelligent Terminal 0.2.2572, an update to its experimental, open-source fork of Windows Terminal that integrates AI agents such as GitHub Copilot CLI, Claude, Codex, and Gemini directly into the command line. The release contains more than 60 fixes and improvements and focuses on performance, reliability, and usability. Its main new features are API key support for local and OpenAI-compatible models, automatic approval for supported agents, and slash commands provided by the agent itself. If you are new to the tool, see our earlier coverage in Microsoft Intelligent Terminal 0.1: AI-powered alternative to Windows Terminal.

Source

Microsoft has added several features to the Queues app for Microsoft Teams that let call queue representatives and supervisors handle customer calls as a team instead of individually. The Queues app is a Teams add-on for managing call queues—the phone lines that distribute incoming customer calls to a group of people, such as a help desk or bank branch team. The update introduces a shared view of call history, a status field for tracking follow-up, a longer reporting window, more self-service controls for supervisors, and support in the Teams mobile app. This article explains what changed and what you need to configure it.

Source

VS Code 1.138 brings AI agent sessions into local Dev Containers, letting them use a project’s defined tools and dependencies instead of the local machine’s environment. The update follows scheduled agents and Voice Mode in VS Code 1.137 with broader Codex integration, portable Agent Host sessions, and automatic cleanup for completed work.

Source

Recent updates to Microsoft Intune introduce administrative capabilities designed to streamline endpoint troubleshooting, tighten endpoint security, and broaden device inventory. You can now initiate unattended Remote Help sessions on physical Windows devices, letting support staff resolve issues without requiring a signed-in user. A new Controlled Configuration mode for Microsoft Defender Antivirus establishes Intune as the authoritative policy source to prevent security configuration drift. In addition, the properties catalog now collects custom Windows registry data, while assignment filters gain general availability for numerical operating system version comparisons. This article outlines the technical prerequisites, configuration steps, and current limitations for these new features.

Source