Microsoft has introduced a native orchestrated user data migration tool to simplify transitions during corporate mergers, acquisitions, and restructurings. This new capability allows administrators to move Exchange mailboxes, OneDrive files, Teams chats, and Teams meetings through a single unified workflow. By utilizing Graph APIs, organizations can now avoid the risks associated with fragmented third-party point tools and manual PowerShell scripts.

Source

Microsoft is updating Outlook for iOS to utilize Apple’s Contact Provider framework, allowing contact data to be visible across the entire operating system. This change ensures that Outlook contacts will appear in native applications such as Phone and Messages without requiring full address book access. By leveraging this framework, Microsoft aims to provide a more unified experience for users who manage professional contacts within the Outlook ecosystem.

Source

Organizations may require periodic snapshots of Microsoft Teams memberships to maintain historical records of user access to sensitive information. While membership alone does not prove a user accessed specific files or messages, it establishes that they possessed the necessary permissions at a given time. This data is particularly valuable for legal and compliance scenarios where verifying potential access to SharePoint files or channel discussions is necessary.

Source

Microsoft has introduced a unified alert experience for Purview Insider Risk Management to streamline how security teams investigate potential internal threats. This update consolidates classic alerts and agent-generated insights into a single queue, eliminating the need to toggle between different views. Analysts can now preview AI-generated summaries and user details directly from the primary list to prioritize high-risk activities more effectively.

Source

Anthropic is expanding its enterprise presence by integrating Claude AI agents directly into the Microsoft ecosystem. While a native "Claude Tag" feature currently allows Slack users to mention the assistant in shared channels, Microsoft Teams users can now access similar capabilities through a dedicated Microsoft 365 connector. This integration allows the AI to reason over organizational data stored in Teams conversations, SharePoint, and OneDrive without requiring manual file uploads.

Source

Microsoft is upgrading Copilot in Excel with a multi-agent search system designed to handle complex web research directly within the spreadsheet interface. This new architecture replaces the previous single-query method with a coordinated team of sub-agents that investigate different facets of a prompt simultaneously. The system aims to transform Excel from a simple data grid into a sophisticated research surface for business decision-making.

Source

Microsoft has resolved a service-side bug that caused Copilot Chat buttons to disappear from the classic Outlook for Windows client. The issue primarily affected users with Copilot Chat (Basic) licenses, removing icons from the side navigation bar and the area above the ribbon. While the buttons were missing in the desktop application, the AI service remained fully functional through Outlook on the web and standalone mobile apps.

Source

Microsoft has officially integrated advanced Intune Suite capabilities into Microsoft 365 E3 and E5 licenses to streamline endpoint management. This change allows organizations to consolidate identity, security, and compliance tools within a single platform rather than relying on disconnected third-party solutions. The update aims to help administrators transition toward a Zero Trust architecture by providing more robust controls over diverse device inventories.

Source

The ARToken phishing-as-a-service platform has emerged as a sophisticated evolution of the EvilTokens ecosystem, specifically targeting Microsoft 365 environments. It abuses the OAuth 2.0 Device Authorization Grant, a protocol intended for keyboardless devices, to trick users into authenticating attacker sessions. This method effectively bypasses multi-factor authentication by leveraging legitimate Microsoft sign-in endpoints to capture session tokens.

Source

Microsoft Teams is introducing a new AI-powered agent called Facilitator designed to monitor live meeting conversations and proactively address knowledge gaps. The tool identifies when participants express uncertainty or ask questions that remain unanswered by the group during the discussion. When a gap is detected, the AI retrieves relevant information via web search and posts the answer directly into the meeting chat.

Source

CISA has added CVE-2026-45659 to its Known Exploited Vulnerabilities catalog following reports of active exploitation in the wild. This high-severity flaw involves the deserialization of untrusted data within Microsoft SharePoint Server, which allows attackers to execute arbitrary code. While the vulnerability requires an attacker to have Site Member permissions, the low complexity of the attack makes it a significant threat to enterprise environments.

Source

Microsoft Teams administrators face significant limitations when attempting to suppress harmful content in external chats using the removeAllAccessForUser Graph API. While documentation suggests the API removes a user's access to a chat, it actually only hides existing messages from the local user's view. The external participant retains full visibility of the conversation history, and the chat remains active for both parties to continue exchanging new messages.

Source

Microsoft has introduced several AI-driven features to Teams, including new calling agents that can conversationally route department calls or schedule appointments. A new brand impersonation protection system now detects and warns users when a caller may be posing as a trusted entity like a bank or IT help desk. Additionally, a new administrative policy for meetings helps identify potential bots and automatically routes them to the lobby for organizer approval.

Source

Microsoft Teams has introduced new AI-driven calling agents designed to handle departmental inquiries and appointment scheduling through conversational interfaces. These agents integrate with Microsoft Copilot Studio to facilitate specialized tasks, such as processing customer bill payments directly within a call. To improve security, the platform now includes brand impersonation protection that alerts users when a caller may be posing as a trusted organization like a bank or help desk.

Source

Microsoft has officially established a support timeline for the transition from classic Outlook to the new Outlook for Windows client. The retirement process will occur in stages, beginning with a voluntary opt-in phase that is currently active for most users. Support for the classic desktop application is scheduled to continue until 2029, providing a multi-year window for organizations to migrate.

Source

Organizations are increasingly facing risks from rogue AI agents that bypass traditional security perimeters by masquerading as legitimate user identities. These autonomous systems can gain persistent background access through unmanaged user consent or by exploiting legacy authentication flows like device-code and Resource Owner Password Credentials. Because these agents often borrow first-party application IDs, they leave no distinct service principal footprint in Microsoft Entra, making them difficult to distinguish from standard user activity.

Source

Microsoft has launched a public preview of context-based redirections for Windows 365 Enterprise and Flex environments. This feature replaces static allow or block rules with dynamic controls that evaluate the security posture of a session in real time. It aims to balance user productivity with data security by adjusting permissions based on the specific circumstances of a connection.

Source

Microsoft is ending support for the Microsoft Store installation type of Microsoft 365 Apps to streamline its deployment architecture. While feature updates for this specific version ceased in October 2025, critical security patches will only continue through December 2026. Users must migrate to the Click-to-Run installation type to ensure they remain protected and receive future cloud-based enhancements.

Source

Microsoft Teams has introduced a new setting that allows users to receive incoming calls in a compact, floating window instead of the traditional full-screen interface. This feature aims to reduce workflow disruptions by allowing users to maintain visibility of their active applications while managing an incoming call. The small window is fully resizable and can be positioned anywhere on the screen to suit the user's multitasking needs.

Source