Microsoft published its August 2026 Microsoft Entra roundup on 10 August 2026. The generally available items cover Windows single sign-on (SSO) prompt control, Exchange Online attribute writeback through Microsoft Entra Cloud Sync, Lifecycle Workflows testing and cancellation, and optional email during External ID sign-up. Three capabilities remain in public preview: Active Directory device sync with Cloud Sync, automated cleanup of guest accounts that have no sponsor, and Group Policy Object (GPO) backups in Microsoft Entra Domain Services. Lifecycle Workflows, Cloud Sync, and Domain Services are Entra features for joiner-mover-leaver automation, hybrid directory synchronization, and a managed Active Directory domain in Azure.

Source

Leaked Microsoft documents and video reveal Project Aion, a working Copilot-only operating system that replaced the Windows desktop with an AI-driven web shell. Designed for PCs and potentially Android-based devices, Aion abandoned the Start menu and Win32 apps in favor of task-focused conversations, while Microsoft’s current priorities suggest the project is unlikely to ship.

Source

Cloudera’s global survey finds that 95% of enterprises postponed or canceled AI initiatives during the past year, while 72% say their data architecture needs a major redesign. The findings show how governance, compliance, rising costs, and increasingly distributed data are pushing organizations toward a broad infrastructure reset.

Source

VMware Tanzu Spring software is facing a broad wave of security fixes, including a critical LDAP flaw that can grant administrator access and let attackers alter user identities. Additional weaknesses affect Spring Security, Spring AI, and Spring GraphQL, while CERT-Bund has separately reported multiple Spring Framework denial-of-service flaws rated CVSS 6.5; no exploitation has been confirmed so far.

Source

OpenAI’s GPT-5.6 Terra and Luna models are now generally available through Amazon Bedrock in both AWS GovCloud (US-East) and AWS GovCloud (US-West), bringing advanced AI workloads to AWS’s isolated government cloud regions. The release combines a choice between balanced and fast inference with a one-million-token context window, 90% discounted prompt caching, and access through Bedrock’s standard tooling.

Source

ChatGPT Search sharply reduced its Reddit citations in August 2026, with Reddit’s share falling from 3.83% to 0.52% in Promptwatch’s tracking. The timing coincides with ChatGPT greatly increasing domain-specific `site:` searches and nearly doubling the number of web queries it performs for each answer.

Source

Nous Research has bundled Bot Mode into Hermes Desktop and enabled it by default in Hermes Agent v0.20.3, moving the feature from a one-day public beta into the main product. It turns each Hermes profile into a named bot with separate memory, credentials, skills, chat history, and model settings, then lets bots hand work to one another.

Source

Windows 11 can silently remove a laptop’s dedicated graphics driver after the GPU remains disabled in Eco Mode for long enough. The cleanup process may treat the power-gated device as disconnected, delete its driver package, and leave the system using Microsoft Basic Display Adapter when the GPU is re-enabled.

Source

Windows 11 26H2 will be nearly effortless for systems on the 24H2 or 25H2 servicing branch, using the same 174KB enablement upgrade already expected for those devices. The important exception is Windows 11 26H1: because it runs on a separate code base, devices on that release will need a substantially different upgrade path rather than the tiny activation package.

Source

Canonical is funding a three-year University of Bristol research project to determine whether AI can convert large, mature C codebases into safe, maintainable Rust—not to immediately rewrite Ubuntu. The project will test a hybrid approach combining machine learning, program analysis, and formal methods on AppArmor and snap-confine.

Source

IBM is developing a dual-architecture processor with Arm that will let the same core run z/OS and Arm-native Linux workloads concurrently on future IBM Z and LinuxONE systems. Announced at Hot Chips 2026, the design could give regulated organizations direct access to Arm’s AI and cloud-native software ecosystem without moving sensitive workloads off their mainframes.

Source

CISA’s new Logging Reference Architecture is aimed at federal agencies, but its practical value extends to critical-infrastructure operators and state, local, territorial, and tribal governments. The guidance provides checklists that organizations can use to test whether their logs are timely, detailed, protected, and useful during both active attacks and forensic investigations.

Source

Truffle Security has found that 88% of 10,616 publicly exposed AWS access-key pairs still authenticate, including 526 root keys and 242 IAM users with AdministratorAccess. The credentials were found across public code, Docker images, CI logs, package registries, and Hugging Face datasets, turning years-old leaks into a current account-takeover risk.

Source

Microsoft has confirmed that its August 2026.NET Framework updates can break printing and PDF/XPS export in WPF applications across supported Windows client and Server releases. The immediate workaround restores compatibility by disabling a font-handling protection added in the same security update, creating a security tradeoff for administrators.

Source

Microsoft Teams is adding an admin policy that automatically rejects identified external bots instead of leaving organizers to approve them manually. The control extends Teams bot controls that sent detected external apps to the lobby, helping prevent unauthorized recording, transcription, and other automated services from entering meetings.

Source

Microsoft Planner is set to gain a capacity view that shows who is assigned to which work and highlights overloaded or underused team members. The Microsoft 365 Roadmap lists the feature under ID RM569733, with availability targeted for after October 2026.

Source

AWS has patched a flaw in seven AWS SDKs that could turn an unvalidated region value into a credential-theft mechanism. The most serious exposure affected applications and EKS workloads using `AssumeRoleWithWebIdentity`, whose redirected request could carry a Kubernetes service-account token to an attacker-controlled server and lead to live AWS credentials.

Source

Windows 11 26H2 is expected in late September or early October 2026, but Microsoft’s next feature update is designed to be almost invisible for PCs already running 24H2 or 25H2. The 174KB enablement package will activate code delivered through earlier cumulative updates, while Point-in-Time Restore becomes enabled by default on eligible systems.

Source

Public TLS validity dropped from 398 days to 200 days on March 15, 2026, the first of three cuts on the way to 47 days in March 2029. Most CAs moved early, so certificates issued from late February onward begin expiring in September and through October.

Source