Scheduling Teams meetings from a shared mailbox is a supported feature provided the delegate has full access permissions and a valid Teams license. Currently, this process requires the use of the classic Outlook client because the new Outlook does not yet support creating Teams meetings within shared mailbox calendars. When the meeting is created, the shared mailbox is automatically designated as the organizer, though delegates should assign co-organizers to manage the live session.

Source

Microsoft will terminate support for the OneDrive sync client on Windows 10 version 22H1 and all earlier releases starting August 15, 2026. This decision ends an extended support period for the application on operating systems that officially reached their end-of-life status in late 2022. While the client will not be blocked from running immediately after the deadline, it will no longer receive security patches, bug fixes, or new features.

Source

CISA has issued an urgent warning regarding three vulnerabilities in on-premises SharePoint Server versions that are currently being exploited in the wild. The affected software includes SharePoint Server 2016, 2019, and the Subscription Edition. Threat actors are chaining these flaws to bypass security measures and gain unauthorized access to corporate environments.

Source

Microsoft is implementing a system-wide overhaul of its partner ecosystem to mitigate risks associated with Cloud Solution Providers (CSPs). These partners are frequent targets for nation-state actors seeking a vector to compromise downstream customer environments and steal sensitive data. To counter this, Microsoft is transitioning from reactive controls to a proactive, integrated security model that emphasizes continuous validation and identity verification.

Source

Microsoft has launched its July 2026 security updates for Exchange Server, providing critical fixes for the Subscription Edition (SE) and legacy on-premises versions. The release addresses several high-severity vulnerabilities, including a critical spoofing flaw (CVE-2026-55008) with a CVSS score of 9.6 and a remote code execution bug. While the update for Exchange SE is publicly available, updates for Exchange 2016 and 2019 are restricted to organizations enrolled in the Period 2 Extended Security Update (ESU) program.

Source

Microsoft has released the July 2026 security updates for Exchange Server 2016, 2019, and the Subscription Edition. These updates provide a permanent fix for CVE-2026-42897, a critical vulnerability that previously required temporary manual mitigations. While Exchange Server Subscription Edition updates are available through standard channels, the patches for legacy versions are restricted to specific cumulative update levels.

Source

Microsoft is expanding Exchange Online’s message recall functionality to allow users to retrieve emails sent to external Microsoft 365 tenants. Previously, this capability was restricted to recipients within the same organization, failing as soon as a message passed through an outbound connector. The new cross-tenant feature operates on a trust-based model where the receiving organization must explicitly permit the action.

Source

SharePoint Online has introduced a new administrative setting called "Use permalinks" to manage heading links across the environment. This feature traditionally displayed icons next to every page heading to allow users to copy direct links to specific sections. While beneficial for sharing documentation, the automated icons created significant navigation hurdles for users relying on assistive technologies.

Source

Two new phishing kits, Jalisco and OmegaLord, have emerged to target Microsoft 365 accounts by circumventing multi-factor authentication (MFA). Jalisco utilizes the OAuth 2.0 device-code flow, a mechanism intended for devices without browsers, to trick users into authorizing an attacker's session. By generating fresh codes in real-time, the kit bypasses the standard 15-minute expiration window and grants attackers full account access without requiring passwords.

Source

Microsoft is integrating its Planner project management tool directly into the New Outlook for Windows client to streamline task workflows. This update places Planner in the left-hand sidebar alongside existing Office applications and Microsoft To Do. The feature will be enabled by default for all users in the coming weeks to reduce the need for context switching between separate windows.

Source

Microsoft will officially retire its native telephony-based authentication services, including SMS one-time codes and voice calls, on February 1, 2027. This change ends the built-in delivery of these methods within Entra ID to encourage the adoption of phishing-resistant alternatives. Organizations that fail to transition by this deadline risk significant sign-in disruptions for users who rely solely on phone-based verification.

Source

Microsoft Entra ID will begin a major transition on September 1, 2026, by making passkeys the default authentication method for all public cloud tenants. Users currently relying on SMS or voice-based multifactor authentication will be automatically enabled for passkeys and prompted to register one during their next sign-in challenge. This shift aims to replace phishable credentials with public-key cryptography, which uses local device biometrics or PINs to ensure authentication data never leaves the user's hardware.

Source

Prompt injection is evolving from an offensive exploit into a defensive strategy known as context bombing. By embedding forbidden instructions into sensitive data or decoy secrets, defenders can trigger an AI model's internal safety guardrails to force a shutdown. This technique effectively cuts off the command chain of hostile AI agents before they can exfiltrate data or gain administrative control over cloud environments.

Source

Microsoft fait passer les boîtes Microsoft 365 Business de 50 à 100 Go, mais le déploiement traîne. Pourquoi des quotas restent bloqués et comment se débloquer.

Le post Microsoft 365 : vos boîtes restent bloquées à 50 Go ? Voici comment passer à 100 Go a été publié sur IT-Connect.

Microsoft has identified a persistent bug in Teams for macOS that causes screen-sharing sessions to freeze, fail, or display as a blank black screen. The issue predominantly affects organizations operating within Microsoft 365 Government environments, including GCC, GCC High, and DoD tenants. While the problem is most frequent on devices with low memory or high disk usage, it is specifically tied to older operating system versions.

Source

Identifying obsolete SharePoint Online sites is a common administrative challenge that requires more than just checking the last modified date. The standard LastModifiedDateTime property is often unreliable because background system processes frequently update it without any actual user interaction. To gain an accurate view of site activity, administrators should instead combine site information from the SharePoint Online management module with usage data from the Microsoft Graph API.

Source

Microsoft va déployer le rappel d'e-mails inter-tenant sur Exchange Online dès août 2026, via une liste d'autorisation gérée par l'organisation.

Le post Microsoft 365 : rappeler un e-mail envoyé à une autre entreprise, bientôt possible a été publié sur IT-Connect.

Microsoft is expanding the message recall capability in Exchange Online to support cross-tenant communication between separate organizations. Previously, this feature was strictly limited to internal messages where both the sender and recipient resided within the same Microsoft 365 tenant. The update aims to provide organizations with better control over accidental data leaks when collaborating with trusted partners, subsidiaries, or contractors.

Source

Microsoft has announced the retirement of the Surveys Agent in Microsoft 365 Copilot, with the tool scheduled for removal from the Agent Store on August 31, 2026. This specialized AI agent originally allowed users to create, distribute, and analyze surveys using natural language prompts within the Copilot interface. The decision marks a shift toward consolidating these capabilities directly into the Microsoft Forms application to streamline the user experience.

Source