Microsoft Purview’s new DLP rule prevents Microsoft 365 Copilot and Copilot Chat from using external emails as grounding data. The block also applies retroactively to existing messages, helping reduce prompt-injection risks but potentially changing Copilot’s answers without any new mail arriving.

Source

Sophos has uncovered a Microsoft Teams vishing campaign that moved from an unsolicited call to Chaos ransomware deployment in less than 17 hours. The STAC4749 operation used IT-themed `.top` domains, plausible employee names, and remote-access tools to compromise dozens of North American organizations.

Source

Microsoft is preparing fixes for the calendar problems making the move from Classic Outlook to New Outlook disruptive. Automapped calendars will follow users between the two Windows clients, while Exchange Online shared calendars will move to a faster REST-based synchronization model without administrator intervention.

Source

Microsoft Teams can continue showing Out of Office after you return because the presence state is synchronized with Outlook’s automatic-reply settings. Turning it off in Teams may not be enough: clear the setting in Outlook as well to remove the stale status and automatic replies.

Source

The Microsoft 365 Admin agent is now generally available for all Microsoft 365 administrators. This AI-powered tool lets you manage Microsoft 365 services using natural language prompts instead of navigating complex menus. It provides a unified experience across the Microsoft 365 admin center and Microsoft 365 Copilot Chat. The agent respects your existing permissions and requires explicit approval before making any changes. This article explores the features, security controls, and configuration options for the Microsoft 365 Admin agent.

Source

Microsoft 365 Data Lifecycle Management is adding retention policies for Planner tasks, including deletion or retention based on creation and last-modified dates. The rollout is scheduled to reach general availability worldwide by mid-August 2026, but the last-modified value is not exposed through the Planner Graph API.

Source

Microsoft will disable Calendar in the Teams mobile apps for Android and iOS users who have not installed a current version by late October 2026. Affected users will lose the ability to view, schedule, and join meetings through Teams on mobile, while desktop and web clients will continue working.

Source

Microsoft 365 users are reporting a persistent “Upgrade your plan” banner in Word, Excel, and PowerPoint—even when they already have an active subscription. The diamond-marked promotion cannot currently be dismissed, hidden, or permanently removed.

Source

Des passerelles Wi-Fi d'hôtels sont détournées pour empoisonner le DNS et rediriger les voyageurs vers de faux portails Microsoft 365. Attention à ces attaques.

Le post Ils piratent le Wi-Fi des hôtels pour siphonner les comptes Microsoft 365 a été publié sur IT-Connect.

Microsoft has secured an extended stay in the ValueLicensing case while it asks the UK Supreme Court for permission to appeal. The £270 million dispute remains largely paused, but disclosure and confidentiality applications will continue toward a September hearing.

Source

Microsoft 365 Backup improves recovery speed, but it still does not cover every workload or replace third-party protection. The main buying decisions now come down to Teams coverage, Entra ID recovery, immutable storage, compliance, and restore granularity.

Source

ExchangeOnlineManagement 3.10.1 fixes certificate-based authentication (CBA) bugs that could leave Exchange Online PowerShell sessions apparently connected but unable to run cmdlets. Microsoft also reports minor performance improvements in the July 24 update.

Source

Microsoft will change Microsoft 365 profile cards beginning in late August 2026, making 11 additional fields visible by default when they contain data. A Microsoft 365 profile card is the small info panel that appears when you hover over or click a person’s name or avatar in apps like Outlook, Teams, and other Microsoft 365 services, showing key details about that user. The fields include Division, Role, Employee number, Employee type, Cost center, UPN, Alias, Fax, Street address, State, and Postal code. Administrators who do not want some of this information exposed should review their settings before August 24, 2026.

Source

Microsoft has delayed the forced transition from Outlook Classic to New Outlook for enterprise users until March 2027, rather than beginning it in April 2026. The revised opt-out phase gives organizations 12 months to test the newer client, update policies, and address compatibility problems before users may be redirected automatically. GCC High and DoD environments will receive separate migration timelines.

Source

Microsoft has canceled several planned Teams and Outlook capabilities before they reached general availability, removing them from the Microsoft 365 roadmap. The withdrawn items include Teams Inline Search and a Copilot feature that would have analyzed ordinary desktop screen shares. Microsoft has not given a reason for abandoning either Teams capability.

Source

Attackers are compromising hotel and conference-center Wi-Fi gateways to redirect every connected guest toward counterfeit Microsoft 365 sign-in infrastructure. The campaign requires no phishing email, malicious attachment, or malware on the victim’s device, and can still capture credentials, authentication tokens, or authorized sessions. ReliaQuest found activity in multiple U.S. cities, India, and Saudi Arabia involving travelers from finance, legal, healthcare, energy, retail, and other sectors.

Source

A widespread service disruption on July 23, 2026, left users globally unable to join Microsoft Teams meetings or maintain active calls. The outage extended beyond Teams, impacting other core Microsoft 365 services including SharePoint, Excel, and the Microsoft 365 Admin Center. Administrators reported significant connectivity failures, with desktop clients experiencing more severe issues than mobile applications.

Source

Microsoft has released version 7.9 of the Teams PowerShell module, which integrates the Windows Account Manager (WAM) for enhanced authentication security. While this update aligns with other Microsoft 365 modules, it has exacerbated existing assembly clash issues that prevent multiple management modules from functioning simultaneously in the same session. Administrators can temporarily bypass WAM using the –DisableWAM switch, though Microsoft intends to deprecate this parameter in future releases.

Source

Microsoft is hosting a four-part livestream series titled the "Microsoft 365 Copilot Agent’s Playbook" to guide users through the development and refinement of AI agents. These sessions, led by engineers and product makers, provide practical demonstrations on adding skills, grounding agents with WorkIQ, and utilizing terminal-based evaluation tools. The series aims to help participants transition from basic agent creation to deploying more sophisticated, interactive workflows.

Source