Microsoft Defender Unified RBAC is becoming the default access model in selected tenants. Tenants still using legacy RBAC will be automatically enabled for Unified RBAC, replacing legacy RBAC as the default authorization source. Security admins should verify their tenant status.
Microsoft is rolling out the redesigned meeting controls and a new share panel in Teams. The changes are designed to prevent misclicks between actions such as Share, Leave, and Raise hand. IT staff should inform their users about the change, as Microsoft will automatically move them to the new experience.
Microsoft is rolling out customized consent notifications to Teams Phone, extending a capability previously available only for meetings.
Microsoft is retiring the Learning Coach agent in Microsoft 365 Copilot. Users should transition to the Learning Agent.
Microsoft accidentally created a new “All Company” Microsoft 365 group in some tenants during a July incident. Administrators should check whether their tenant now has two such groups for Viva Engage.
Microsoft is extending control of production tools in Teams Meetings and Webinars, with support for guest users to manage production during events.
Microsoft Planner no longer requires a task’s due date to fall on or after its start date, letting users set both dates independently.
Microsoft 365 Backup now supports configurable recovery windows at the policy level, ranging from three months to two years, replacing the previous fixed one-year window. The default recovery window remains one year unless an administrator changes it.
Universal Print now has a dedicated web portal built for mobile devices, letting users release secure print jobs by scanning a QR code from their phone.
Microsoft will retire the Set-FederatedConnectorToggle PowerShell cmdlet, introduced in May 2026, shifting federated Copilot connector management to the Allowed agent types setting in Agent 365.
Security administrators can now enable automatic quarantine for emails containing password-protected attachments that Defender for Office 365 cannot scan.
Microsoft is extending the report a security concern feature to Teams meetings and group calls, helping organizations detect phishing, impersonation, and scams.
Microsoft recently recommended migrating GitHub Actions federated credentials to an immutable subject format in Microsoft Entra app registrations. This closes a subtle security gap where recycled repo or org names could let someone else’s token match your trust configuration. In this post, I walk through what the migration actually involves. I also tested the newer Flexible Federated Identity Credentials (FFIC), currently in preview.
Microsoft Purview introduces a new View-only Role Management role, providing users read-only visibility into role group membership and assignments in the Purview admin portal.
The tenant control for Graph API access to Teams transcripts is now active. I am testing the new control to access Teams transcripts, including two PowerShell samples for downloading meeting transcripts with and without speaker attribution.
Outlook Mobile now supports the Follow option for meeting invitations, letting users stay updated on meetings they cannot attend.
Retention policies for Teams call logs can now be created, modified, and deleted directly in the Microsoft Purview admin portal. Previously, a Purview compliance administrator had to manage these retention policies with PowerShell.
Microsoft Planner gets a new task details side panel, letting users view and edit tasks without leaving their Board, Grid, or My Tasks view. Planner switches automatically to dialog mode on smaller screens.
Teams now lets users keep typing and sending messages while a file uploads in the background, ending the delay caused by the previous blocking upload experience. Users should not close the Teams client, as the upload requires a running client.
Microsoft is moving Edge Stable to a 2-week release cadence starting with Edge 152 (the next release), while the Extended Stable channel keeps the 8-week cycle.