2026-07
2026-07
This release tracker is LLM-curated and based on the official Microsoft product sources listed below. It provides an architect-grade summary of recent features, changes, and announcements. Always verify critical details against the official documentation. List of all raw markdown files for the releases are at https://github.com/pisinger/pisinger.github.io/tree/main/_ms_release_radar
Microsoft Security Release Radar - July 2026
📦 Azure Container Apps
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟢 | Microsoft Defender for Cloud support for Azure Container Apps (Serverless Containers Posture) | GA | Customers can now bring Azure Container Apps environments into Microsoft Defender for Cloud’s Serverless Containers Posture experience, enabling security teams to extend posture management across container estates with attack path analysis and unified security posture visibility. |
⚡ Azure Functions
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟢 | Azure Functions support for Python 3.14 | GA | Azure Functions now supports developing and deploying Python 3.14 applications on Linux plans, extending the supported runtime and security-update window. |
| 🟡 | Azure Functions support for PowerShell 7.6 | Preview | Azure Functions now supports developing and deploying PowerShell 7.6 applications in preview. |
🔁 Azure Logic Apps
No lifecycle-dated Azure Logic Apps updates were returned by the Azure Updates API for July 2026.
🔌 Azure API Management
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟡 | AI Gateway tier | Preview | A dedicated AI Gateway tier of API Management for AI workloads: expose, secure and observe models (Foundry, AWS Bedrock, Vertex AI, OpenAI, Anthropic) and MCP servers with built-in policies, OpenTelemetry observability and enterprise authentication. |
⛵ AKS
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟡 | AppNet Release Notes - 2026-08-19 | Preview | Azure Kubernetes Application Network (AppNet) initial release notes covering changes since March 2026, including component updates to Istio 1.28.10, 1.29.6, and 1.30.3, plus multiple bug fixes for cluster management and certificate rotation. |
| ⚫ | enableCustomCATrust property retirement | Deprecation | On September 14, 2026, the preview property enableCustomCATrust will retire. After that date, enableCustomCATrust=true will no longer enable Custom Certificate Authority. Update impacted clusters to remove the preview property. |
| ⚫ | Windows Server Annual Channel for Containers retirement | Deprecation | AKS no longer supports creating node pools with Windows Server Annual Channel for Containers. Existing WSAnnual node pools are unaffected. |
| ⚫ | Flatcar Container Linux for AKS retirement | Deprecation | AKS no longer supports creating node pools or clusters with Flatcar Container Linux for AKS. Existing node pools are unaffected. |
| ⚫ | Kubernetes version 1.30 deprecated | Deprecation | Kubernetes version 1.30 is now deprecated. Upgrade to a supported Kubernetes version or opt into long-term support (LTS) to continue receiving updates. |
| ⚫ | Kubernetes version 1.33 LTS-only | Deprecation | Kubernetes version 1.33 is now available only under long-term support (LTS). |
| 🟢 | Artifact Streaming | GA | Generally available feature allowing streaming of container images from Azure Container Registry to AKS, pulling only necessary layers for initial pod startup to reduce deployment time. |
| 🟢 | Secure TLS bootstrapping enabled by default | GA/FIX | Secure TLS bootstrapping is now enabled by default in westcentralus and eastasia regions. |
| 🟢 | Secure Boot for GPU with Azure Linux OS | GA | Secure Boot is now supported when using GPUs with Azure Linux OS via Trusted Launch. |
| 🟢 | Trusted Launch toggle on existing node pools | GA/FIX | Trusted Launch (vTPM and Secure Boot) can now be enabled and disabled on existing Linux node pools. |
| 🟡 | Node Disruption Policy | Preview | Now available in public preview, lets you control when reimage-triggering operations are allowed so disruptive changes happen during defined windows. |
| 🟡 | Automatic zone placement | Preview | Now available in public preview, dynamically selects the best set of availability zones for a node pool without manual specification. |
| 🟡 | Prepared Image Specification | Preview | Now available in preview, enables creation of preconfigured node images with required container images and customizations for ready-to-run node startup. |
| 🟡 | Full caching mode for Ephemeral OS disks | Preview | Now available in public preview, caches the entire OS locally on the node for improved resiliency and faster OS disk performance. |
| 🔵 | Windows Server 2025 default for Windows node pools | Update | Starting with Kubernetes 1.37 (expected October 2026), Windows Server 2025 is the default and recommended OS SKU for new Windows node pools when no OS SKU is specified. |
| 🔵 | Node Auto Provisioning improvements | Update | AKS now sets kubernetes.azure.com/mode: user on the default NodePool to prevent pending system workloads from causing user node scale-up. |
| 🔵 | Spot rebalancing signal improvement | Update | Node Auto-Provisioning enabled clusters now use an In-VM spot rebalancing signal for improved spot eviction notification and proactive replacement. |
| 🔵 | kube-proxy nftables mode validation | Update | AKS now rejects kube-proxy nftables mode at request time on clusters running Kubernetes versions older than 1.33, instead of accepting and silently falling back to iptables. |
| 🔵 | Mixed-case networkPlugin values | Update | AKS now accepts mixed-case networkPlugin values for supported network plugin options during cluster creation. |
| 🔵 | Upgrade override until field extension | Update | The until field in upgrade override settings can now be set to any future date; AKS no longer rejects values more than 30 days in the future. |
| 🔵 | CNI Overlay Dual-Stack on Windows | Update | CNI Overlay Dual-Stack on Windows no longer requires a preview feature registration. |
| 🔵 | API Server Authorized IP Ranges fix | Update | Fixed an issue where API Server Authorized IP Ranges using only service tags were not enforced on API Server VNet Integration clusters. |
| 🔵 | Container Insights onboarding fix | Update | Fixed Container Insights onboarding through AzureMonitorProfile so re-enabling Container Insights uses AAD auth and blocks unsafe Log Analytics Workspace changes. |
| 🔵 | kube-proxy configuration fix | Update | Fixed an issue where clusters with existing kube-proxy configuration could not be updated unless KubeProxyConfigurationPreview was registered. |
| 🔵 | App Routing Istio manifest fix | Update | Fixed App Routing Istio manifest values so resource requests and limits are populated correctly. |
| 🔵 | Static Egress Gateway VMSS fix | Update | Fixed Static Egress Gateway VMSS model reconciliation so secondary egress IP configurations are preserved. |
| 🔵 | Cilium source IP verification | Update | Re-enabled Cilium source IP verification on Cilium v1.17+ to restore dataplane anti-spoofing protection. |
| 🔵 | Istio 1.30 mutating webhook support | Update | Fixed AKS support for Istio 1.30 mutating webhook configuration updates on Automatic clusters. |
| 🔵 | NAP load balancer deletion fix | Update | Fixed Node Auto Provisioning issue where load balancer deletion could block node provisioning. |
| 🔵 | NAP CSI empty-zone topology fix | Update | Fixed Node Auto Provisioning to normalize CSI empty-zone topology value to regional zone “0”. |
| 🔴 | Istio security fixes (ISTIO-SECURITY-2026-005) | Security | Istio-based service mesh add-on revisions asm-1-28, asm-1-29, and asm-1-30 include security fixes for ISTIO-SECURITY-2026-005. Action required: restart Istio workload pods to trigger re-injection of newer istio-proxy patch versions. |
| 🔴 | containerd security updates | Security | containerd updated from 1.7.32 to 1.7.33, including security fixes for CVE-2026-53488, CVE-2026-47262, and CVE-2026-34986. |
| 🔵 | Cilium, Hubble, ACNS security agent updates | Update | Security agent images updated for Kubernetes 1.32 (v1.17.17-260701), 1.34 (v1.18.11-260622), and 1.36 (v1.19.5-260714). |
| 🔵 | Azure Monitor for Containers update | Update | Updated to version 3.4.0. |
| 🔵 | Azure Karpenter Provider update | Update | Updated to v1.14.0. |
| 🔵 | Azure File CSI driver update | Update | Updated to v1.35.5 on AKS 1.35 and 1.36. |
| 🔵 | App Routing operator update | Update | Updated to v0.2.26. |
| 🔵 | Cluster Autoscaler updates | Update | Updated from v1.33.4 to v1.33.5, v1.34.3 to v1.34.4, and v1.35.0 to v1.35.1 for Kubernetes versions 1.33, 1.34, and 1.35. |
| 🔵 | kube-proxy image updates | Update | Updated to v1.36.2-5 and v1.33.7-15. |
| 🔵 | kube-scheduler image updates | Update | Updated across Kubernetes 1.34, 1.35, and 1.36 patch tags. |
| 🔵 | CoreDNS image updates | Update | Multiple version updates across v1.11.3, v1.12.1, v1.13.1, and v1.14.3 branches. |
| 🔵 | cluster-proportional-autoscaler update | Update | Updated from v1.9.0-19 to v1.9.0-21. |
| 🔵 | AKS Windows image updates | Update | Windows Server 2022 (20348.5386.260715) and Windows Server 2025 (26100.33158.260715) images updated. |
| 🔵 | AKS Azure Linux image updates | Update | v3.0 images updated to 202606.19.0, 202607.02.0, and 202607.09.0. |
| 🔵 | AKS Ubuntu image updates | Update | Ubuntu 22.04 and 24.04 images updated to 202606.19.0, 202607.02.0, and 202607.09.0. |
📊 Azure Monitor
| Indicator | Feature | Type | Description |
|---|---|---|---|
| ⚫ | Azure Diagnostics extension retirement | Deprecation | The Azure Diagnostics extension for Windows (WAD) and Linux (LAD) was retired on March 31, 2026 and is no longer supported. Migration guidance covers Azure Monitor Agent, Log Analytics data export, and OpenTelemetry metrics. |
| ⚫ | Legacy authentication for Container Insights retirement | Deprecation | Legacy authentication for Container Insights is retired. Clusters still running it after September 30, 2026 aren’t supported. Migrate to managed identity authentication. |
| 🔵 | Capture end-user feedback for GenAI agents | Update | New section covering how to send thumbs-up and thumbs-down feedback on agent responses to Application Insights using OpenTelemetry log records with gen_ai.evaluation.* attributes. |
| 🔵 | Data collection rule browse experience | Update | The new data collection rule (DCR) browse and creation experiences are now the default in the Azure portal. |
| 🟡 | Mirror Azure Monitor data in Microsoft Fabric | Preview | Mirror Azure Monitor in Microsoft Fabric is now in preview, exposing Log Analytics tables to Fabric through OneLake shortcuts without copying data. |
| 🔵 | Health models CLI and portal updates | Update | New health-models Azure CLI extension in preview, plus 2026.7.1 portal release adding data annotations, dynamic thresholds, and Azure Resource Health signals. |
| 🟡 | Export job for Log Analytics | Preview | Export historical records from Log Analytics workspace to Azure Blob Storage in Parquet format using the new export job feature in preview. |
| 🔵 | Query history in Log Analytics | Update | Expanded Log Analytics overview with query history documentation covering how to access, rerun, and manage recent queries. |
| 🔵 | Log Analytics table plan updates | Update | Merged standalone Auxiliary plan article into custom table creation and overview articles, bringing Auxiliary logs up to Basic and Analytics standards. |
| 🔵 | Log Analytics autosave | Update | Log Analytics now automatically saves session state including query tabs, work mode, query scope, and time range to browser’s local storage for 30 days. |
| 🔵 | Logs table feature support reference | Update | New reference article listing every Azure Monitor Logs table and its support for Basic plan, Auxiliary/Lake plan, DCR workspace transformations, and Logs Ingestion API. |
| 🟡 | Advanced platform metrics | Preview | Advanced platform metrics are now in preview, enabling collection of more granular metrics on supported Azure resources. |
| ⚫ | Send VM client data to Event Hubs and Storage retirement | Deprecation | This preview feature retires on July 31, 2026, after which existing configurations stop sending data. Alternatives include custom tables on Auxiliary plan and data export rules. |
| 🔵 | VM Insights Map and Dependency Agent retirement guidance | Update | VM Insights Map feature and Dependency Agent retire on June 30, 2028. Expanded guidance includes Azure Advisor retirement recommendations and queries for finding affected VMs. |
🔐 Microsoft Sentinel
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟡 | Custom detection rules in Sentinel Repositories | Preview | Manage Defender XDR custom detection rules as code in GitHub or Azure DevOps with the Microsoft Security Bicep extension, then sync them through Sentinel Repositories or deploy directly with the Bicep CLI. |
🛡️ Microsoft Defender Cloud
| Indicator | Feature | Type | Description |
|---|---|---|---|
| ⚫ | Legacy grouped recommendations removed | Deprecation | Retirement of legacy grouped recommendations (sub-assessments) completed July 31, 2026. Customers can no longer access deprecated data through the API. Migrate to individual recommendations. |
| 🔵 | Foundational CSPM opt-in model | Update | Starting October 27, 2026, Foundational CSPM moves to opt-in model for new Azure subscriptions, giving more control over security posture management configuration. |
| 🟢 | Database-level recommendations for SQL VA | GA | SQL vulnerability assessment recommendations now generally available as individual recommendations at the database level, affecting Cloud Score but not Secure Score. |
| ⚫ | Plan enablement API blocks deprecated plans | Deprecation | Onboarding blocked through plan-enablement API for five deprecated Defender plans: Defender for AKS, Defender for ACR, Defender for Key Vault, Defender for DNS, and Defender for ARM. |
| 🟢 | Container-level misconfiguration recommendations for Kubernetes | GA | Agentless, container-level KSPM recommendations now GA, assessing individual containers. Cluster-level recommendations for hostPath volumes, allowed ports, host networking, CAP_SYS_ADMIN, and AppArmor are deprecated. |
| 🟢 | Upgrade Azure Kubernetes Service Version recommendation | GA | Actionable recommendation to remediate vulnerabilities in AKS-managed system pods by identifying minimum AKS version upgrade required. |
| 🟢 | Vulnerability assessment for runtime-discovered container images on EKS and GKE | GA | Extends vulnerability assessment to runtime-discovered images on Amazon EKS and Google GKE, providing unified coverage across Azure, AWS, and GCP. |
| 🟢 | Kubernetes node vulnerability assessment for EKS and GKE | GA | Extends Kubernetes node (host) vulnerability assessment to EKS and GKE, bringing parity with existing AKS capability. |
| 🟢 | Scanning support for Docker Hardened container images | GA | Extends vulnerability scanning coverage to Docker Hardened container images. |
| 🟢 | Kubernetes misconfiguration enforcement in Defender for Containers | GA | Evaluates Kubernetes resource configurations at admission time and can audit or block deployments that don’t meet Microsoft security best-practice rules. Available through automatic provisioning for AKS, Azure Arc, AWS, and GCP. |
| 🟢 | Discovery and posture for serverless container workloads | GA | Provides inventory visibility, security recommendations for misconfigurations and vulnerability assessment findings, and attack path analysis for Azure Container Apps, Azure Container Instances, and Amazon ECS on AWS Fargate. |
🛡️ Microsoft Defender Cloud - Recommendations & Alerts
| Indicator | Feature | Type | Description |
|---|---|---|---|
| ⚫ | Retirement of legacy grouped recommendations | Deprecation | Retirement of legacy grouped recommendations (sub-assessments) has started. Customers can no longer access deprecated data through the API. The Azure portal and Azure Resource Graph might take a few days to reflect the change. |
| 🟢 | SQL Vulnerability Assessment individual recommendations | GA | Over 20 new recommendations released as part of transitioning Defender for SQL VA from grouped to individual recommendations at the database level, including execute permissions on xp_cmdshell, latest updates, GUEST user restrictions, CLR disabled, and more. |
🔬 Defender Container Sensor
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟢 | Sensor v0.11.4 GA with EKS/GKE Private clusters support | GA | General Availability of EKS/GKE Private clusters support for sensor v0.11.4 released July 2026. |
| 🟢 | Sensor v0.10.6 GA with security fixes | GA/FIX | Security fixes including patching vulnerabilities in authentication, runtime components, and dependencies to address credential exposure risks. Performance improvement for reduced process event filtering CPU usage and improved authentication stability using PSAT. |
| 🟢 | Sensor v0.9.62 GA with security fixes | GA/FIX | Security fixes including patching vulnerabilities in authentication, runtime components, and dependencies to address credential exposure risks. Performance improvement for reduced process event filtering CPU usage and improved authentication stability using PSAT. |
| 🟢 | Sensor v0.8.55 GA with security fixes | GA/FIX | Security fixes including patching vulnerabilities in authentication, runtime components, and dependencies to address credential exposure risks. Performance improvement for reduced process event filtering CPU usage and improved authentication stability using PSAT. |
🚨 Microsoft Security Exposure Management
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟡 | MAI-Augmented scan profile for on-demand scans | Preview | Expanding on previously released Defender CLI support, the MAI-Augmented scan profile is now available in preview for on-demand scans triggered from the Microsoft Defender portal. |
| 🟡 | MAI-Augmented scan profile via Defender CLI | Preview | The MAI-Augmented scan profile available in preview as part of Codename MDASH, including MAI-Cyber-1-Flash cyber-specialized model extending the current agentic scanner. |
| 🟡 | Codename MDASH - Agentic code scanner | Preview | Private preview of multi-model agentic AI system to detect code vulnerabilities with greater depth and accuracy than traditional static analysis. Scans can be run from Defender CLI or through GitHub connector. |
| 🔵 | OT data connectors for Armis, Dragos, and Forescout | Update | Microsoft Security Exposure Management now supports operational technology (OT) data connectors for Armis, Dragos, and Forescout, bringing OT asset and vulnerability data into the Defender portal for unified IT/OT visibility. |
🤖 Microsoft Security Copilot
No new updates reported for July 2026.
🔎 Microsoft Purview
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔵 | Microsoft Purview protection policies no longer support Azure SQL Database | Update | Azure SQL Database no longer supported for protection policies. |
| 🔵 | Manual BC/DR environment for Data Map | Update | New guidance for configuring manual business continuity and disaster recovery environment for Microsoft Purview Data Map, covering secondary account creation, scan mirroring, validation, and account promotion during regional outage. |
| 🟡 | Network Data Security with Global Secure Access | Preview | In preview: Protect sensitive data in text and prompts by integrating with Microsoft Entra Global Secure Access (GSA), enabling interception and inspection at the network layer for DLP policy enforcement across browsers, apps, APIs, and AI platforms. |
| 🟡 | Exchange Online DLP classification failure protection | Preview | In preview: Exchange Online DLP policies can now detect classification failures caused by timeouts, throttling, and scanning errors. Administrators can enable classification-failure detection and use DocumentScanFailures condition for different protection actions. |
| 🔵 | Fabric governance DLP activity insights | Update | Administrators can use Microsoft Fabric governance experiences in OneLake catalog to understand DLP activity and adoption, identifying evaluated workspaces and prioritizing high-risk assets. |
| 🔵 | Priority cleanup policy approval requirements | Update | Priority cleanup policies now require three separate approvals before content can be permanently deleted: one Priority Cleanup administrator, one retention manager, and one eDiscovery administrator. |
| 🔵 | Auto-labeling policy guidance updates | Update | Multiple updates to auto-labeling policy documentation including pre-flight checklist, troubleshooting guidance, removal/downgrade label behavior, simulation mode limitations, licensing and configuration locations, and supported/unsupported group types. |
| 🟡 | Unified alert experience for Insider Risk Management | Preview | In preview: Unified alert experience combining Triage Agent and Standard alert dashboards into single alerts list page with agent summary previews and direct alert/user detail access. |
| 🟡 | Expanded user profile details in IRM | Preview | In preview: Expanded user profile details in unified alert experience adding Microsoft Entra signals including office location, employee type, department, and last working date. |
| 🟡 | Expanded note capabilities in IRM | Preview | In preview: Expanded note capabilities across alerts and cases, with system-generated notes automatically applied on status changes, assignments, closures, or escalations. |
| 🔵 | Role-group assignment expiration | Update | Microsoft Purview role-group assignments can now be configured with expiration dates from one day to two years, supported by most built-in and custom role groups except eDiscovery Administrator and Manager. |
🏗️ Microsoft Foundry
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔵 | Multi-agent orchestration patterns including Magentic | GA | Microsoft Agent Framework reaches GA for multi-agent orchestration patterns including sequential pipelines, parallel collaboration, and Magentic-style coordination. Ships in .NET and Python with backward compatibility for preview API. |
| 🔵 | Agent Harness production runtime | GA | Microsoft Agent Framework reaches GA for Agent Harness, the production runtime for agents. Supports local development, container deployment, and Foundry Hosted Agents with OpenTelemetry traces. |
| 🔵 | Multi-agent orchestration SDK | GA | Unified multi-agent orchestration SDK for C# and Python consolidating patterns previously spread across AutoGen and Semantic Kernel. |
| 🟡 | Tracing for Microsoft Agent Framework | Preview | In public preview: OpenTelemetry-compatible spans for observing agent reasoning, tool calls, and model interactions during execution. Can route to Application Insights or compatible backends. |
| 🟡 | CodeAct pattern and Hyperlight containers | Preview | In public preview: CodeAct pattern lets agents collapse multi-step plans into single executable code blocks, cutting latency by ~50% and token use by >60%. Runs inside Hyperlight sandboxed container runtime. |
| 🟡 | Episodic procedural memory | Preview | In public preview: Built-in store letting agents remember successful task patterns and replay them on similar future requests for faster, cheaper recurring tasks. |
| 🟡 | DevUI Agent Inspector | Preview | In public preview: Local debugging surface showing agent runs as navigable tree of model calls, tool invocations, and intermediate state. Supports pause, replay, prompt editing, and model swapping. |
| 🟡 | Protect sensitive generative AI telemetry in Application Insights | Preview | In preview: Azure Monitor Application Insights now stores generative AI content in dedicated GenAIContent table (AppGenAIContent in Log Analytics), enabling restrictive access controls for sensitive AI telemetry containing PII/PHI. |
| 🟡 | Document PII playground sample | Preview | In preview: Document-based PII detection in Azure AI Language now ships initial playground experience in Microsoft Foundry NextGen portal with prepared sample documents showing redacted output side-by-side with source. |
| 🟢 | Document PII NextGen Playground | GA | Azure AI Language offers refreshed Document PII playground in GA with curated sample inputs and outputs for evaluating PII detection on names, addresses, financial IDs, and health identifiers. |
| 🟡 | Microsoft Foundry agent security transitioning to Agent 365 license | Preview | Starting July 1, 2026, Microsoft Foundry agent security capabilities previously available through Defender for Cloud transition to Microsoft Agent 365 license, powered by Agent 365 observability logs and Microsoft 365 agent registry. |
🧠 Microsoft Copilot Studio
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔵 | Automatic Entra Agent ID creation | Update | Starting July 2026, Copilot Studio automatically creates a Microsoft Entra Agent ID for every new agent. Users can no longer opt out at the environment level. |
| 🟡 | Workflow and MCP server as tools for GitHub Copilot harness agents | Preview | In preview: Add workflow or MCP server as tool for agents powered by GitHub Copilot harness to extend with multistep automated processes or external services. |
| 🟡 | MCP server Microsoft certification | Preview | In preview: Submit MCP server for Microsoft certification to give customers and administrators confidence it meets Microsoft’s expectations for reliability, security, compliance, and responsible operation. |
| 🟡 | Real-time agent across voice and digital messaging | Preview | In preview: Deploy same real-time agent across voice and digital messaging channels for consistent conversations. Use GPT-5-Chat (Preview) model for greater customization and monitor with Application Insights. |
| 🟡 | Environment-level agent telemetry export | Preview | In preview: Export environment-level agent telemetry to Azure Application Insights through Power Platform admin center. |
| 🟡 | File attachments for GitHub Copilot harness agents | Preview | In preview: Let users attach files to conversation and view files agent creates during conversation for agents powered by GitHub Copilot harness. |
📊 Microsoft Fabric
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟢 | Custom CA and mTLS in Eventstream connectors | GA | Custom CA and client certificates from Azure Key Vault now supported with MQTT, Apache Kafka, AWS MSK, and Confluent Cloud for Apache Kafka source connectors. |
| 🟢 | Folders in Eventhouse tree | GA | Folders in Eventhouse tree let you create, rename, delete, and move folders to organize tables, shortcuts, materialized views, functions, and data streams. |
| 🟢 | Eventhouse update policies with accelerated shortcuts | GA | Update policy queries can now join to accelerated shortcut external tables for governed ingestion-time enrichment. |
| 🟢 | Fabric Maps tilesets | GA | Fabric Maps tilesets create PMTiles from OneLake geospatial data for fast, interactive map rendering in Fabric. |
| 🟡 | Azure Event Hubs source workspace identity authentication | Preview | In preview: Eventstream Azure Event Hubs source can now use workspace identity instead of shared access keys for Microsoft Entra ID-based access. |
| 🟡 | Investigator insights in Operations Agent | Preview | In preview: Analyze related data after operations agent alert and surface scope, observations, patterns, and recommended next steps in Teams. |
| 🟢 | Real-Time Dashboard | GA | Monitor Eventhouse data with live refresh, Copilot-created tiles, drill-down exploration, Activator alerts, and team sharing. |
| 🟡 | Microsoft Fabric Embed | Preview | In preview: Embed Real-Time Dashboards in JavaScript or TypeScript apps with delegated Microsoft Entra access. |
| 🟡 | Oracle Database CDC source connector | Preview | In preview: Oracle Database CDC source connector streams changes from Oracle database into Fabric as structured change events with before/after values using Oracle LogMiner. |
| 🟢 | Eventstream SQL operator | GA | Eventstream SQL operator now GA, enabling filtering, aggregation, windowing, and routing of events with SQL, plus multi-destination fan-out and event-time processing. |
| 🟡 | Workspace outbound access protection for Real-Time Intelligence | Preview | In preview: Workspace-level outbound network controls extended to Eventstream, Eventhouse, KQL QuerySet, Activator, Real-Time Dashboards, and Azure/Fabric events. |
| 🟡 | Fabric Eventstream connector updates | Preview | Private network (vNet/On-Prem) support, Apache Kafka and Azure Service Bus source connectors, and custom CA/mTLS support marked GA. Preview support for enhanced IoT Hub connector metadata, Oracle CDC source, and HTTP connector pagination. |
| 🟡 | Outbound access protection for Eventstream | Preview | Workspace Outbound Access Protection for Eventstream lets you govern Eventstream sources and destinations with workspace-level data connection rules. |
| 🔵 | Event-driven app patterns with UDFs | Update | Business Events and User Data Functions guidance showing how to publish business events from UDFs and automate event-driven workflows in Fabric. |
| 🔵 | Event-driven architecture with Real-Time Hub | Update | Guidance on using Real-Time Hub to separate publishers from consumers across Business Events, Fabric Events, and Azure Events. |
| 🔵 | Customer-intent streaming pattern | Update | Guidance on capturing CDC events in Eventstream, reshaping with DeltaFlow (Preview), enriching with AI Functions, publishing Business Events, and activating responses. |
| 🔵 | Row-to-action pattern with Mirrored Database change feeds | Update | Manufacturing quality scenario guidance streaming Mirrored Database change feeds into Eventstream, filtering with SQL operators, and routing to Activator and Eventhouse. |
| 🟢 | Fabric IQ conversational analytics | GA | Fabric IQ conversational analytics lets you ask questions over governed Power BI semantic models in Microsoft 365 Copilot Chat and Copilot Cowork, and use data agents for specialized analysis. |
| 🟢 | Planning in Fabric IQ | GA | Planning in Fabric IQ reaches GA as unified no-code platform for collaborative planning, reporting, analytics, data integration, and management. |
| 🔵 | Fabric data agent public API | Update | Fabric data agent public API lets you manage data sources and data agents programmatically from local development, CI/CD pipelines, internal portals, containers, Azure Functions, and backend services. |
| 🟡 | Azure Monitor Logs mirroring | Preview | Mirror Log Analytics workspace telemetry into OneLake to combine observability and business data in Eventhouse, Real-Time Dashboards and Operations Agent workflows. |
| 🟡 | Azure Monitor and AWS Glue catalog mirroring | Preview | Mirrored Azure Monitor and Mirrored AWS Glue catalog bring Log Analytics workspace tables and AWS Glue Iceberg tables into OneLake without duplicating data. |
| 🔵 | Snowflake Iceberg mirroring | New/Updated | Syncs Snowflake Iceberg table metadata into OneLake through shortcuts, so the data can be queried across Fabric without duplicating files. |
| 🔵 | Mirrored database change feeds to real-time action | New/Updated | Guidance: stream Delta Change Data Feed changes from a mirrored database into an Eventstream, filter them with SQL operators, and route results to Activator alerts and Eventhouse KQL dashboards. |
🐙 GitHub Security
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟢 | Innersource security advisories GA | GA | GitHub Advanced Security enterprise customers can now publish internal security advisories restricted to enterprise-owned repositories. Includes REST API for managing innersource vulnerabilities with Dependabot notifications and auto-PRs. |
| ⚫ | npm install-time security defaults and 2FA-bypass GAT deprecation | Deprecation | npm v12 turns on install-time security defaults: allowScripts off, –allow-git none, –allow-remote none. npm 2FA-bypass GATs will stop skipping 2FA for account changes in early August 2026. |
| 🔵 | npm publish-time malware scanning | Update | Newly published packages are automatically scanned before availability, introducing ~5 minute delay (up to 15+ minutes at peak). Blocked packages may receive appeal notifications. |
| 🔵 | Dual-use content metadata requirement | Update | New contentPolicy field in package.json for maintainers to declare dual-use content. Requires DISCLOSURE file describing dual-use functionality and intended legitimate use. |
| 🔵 | Dependabot malware alerts expanded to more ecosystems | Update | GitHub Advisory Database now ingests malware advisories from OpenSSF malicious-packages repository, expanding coverage across npm, PyPI, and more ecosystems. |
| 🔵 | GitHub Actions holds potentially malicious workflows for approval | Update | GitHub Actions now holds certain workflow runs for approval before execution when identified as potentially malicious. Requires repository collaborator with write access to approve via authenticated web session. Applies to public repositories on github.com. |
| 🔵 | Dependabot version updates default package cooldown | Update | Dependabot now waits until a new release has been available for at least three days before opening version update PR. Security updates still open immediately. Configurable via cooldown option in dependabot.yml. |
🆔 Microsoft Defender Identity
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔵 | Sensor v2.255.19295.47272 update | Update | Adds support for new Event Tracing for Windows (ETW) provider and includes other improvements. |
| 🟢 | Sensor v2.x to v3.x migration GA | GA | Migration of Defender for Identity sensors from v2.x to v3.x is now generally available. |
| 🔵 | Windows Server 2025 DC migration to v3.x | Update | You can now migrate domain controllers running Windows Server 2025 from sensor v2.x to sensor v3.x. |
| 🔵 | Migration readiness reasons tooltips | Update | When server marked “Not ready for migration” on Sensors page, hover tooltip lists specific reasons server doesn’t meet migration prerequisites. |
| 🟡 | Expanded SaaS app support in Password protection | Preview | Password protection page now includes password risks from SaaS apps connected through Defender for Cloud Apps (Salesforce, ServiceNow) in addition to AD, Entra ID, and Okta. |
| 🟢 | Domain investigation page GA | GA | Domain investigation page now GA, showing Active Directory domain security including domain properties, deployment health, identity summary, service account breakdown, sensitive entities, active recommendations, group policies, and trust relationships. |
| 🔵 | Automatic RPC auditing on DCs | Update | Defender for Identity now automatically enables RPC auditing on domain controllers when upgrading to sensor v3.0.8 or later. No manual tag application needed. |
🏢 Microsoft Entra ID
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟢 | Admin control for single sign-on prompts in Windows | GA | A supported registry setting lets admins auto-accept SSO permissions on managed Windows devices, so the Windows sign-in credential reaches other Microsoft apps without extra prompts. Requires the July 2026 security update (KB5101650) for Windows 11 24H2/25H2. |
| 🟢 | Exchange Online-managed attributes writeback to Active Directory | GA | For cloud-managed remote mailboxes, Exchange attribute changes made in Exchange Online are written back to on-premises AD through Microsoft Entra Cloud Sync while the user identity stays synced from AD. |
| 🟢 | What-if mode in Lifecycle Workflows | GA | Simulate workflow processing to see which users fall into the execution scope and troubleshoot issues without affecting users. |
| 🟢 | Cancel workflow runs in Lifecycle Workflows | GA | Cancel queued or in-progress workflow runs to contain automation errors or misconfigurations; unprocessed tasks are cancelled, completed tasks are not reversed. |
| 🟢 | User Attribute Updates task in Lifecycle Workflows | GA | Automatically set or clear built-in, on-premises extension and directory extension attributes on lifecycle events, up to 10 attribute updates per task. |
| 🟢 | Expanded dynamic attributes for Lifecycle Workflow emails | GA | Custom workflow emails support a new attribute format plus more built-in user attributes, custom security attributes, directory extensions and on-premises extension attributes. |
| 🟢 | Optional email for external identity provider sign-up | GA | Microsoft Entra External ID can federate with identity providers that do not share the user’s email, and social sign-up users can withhold their email and still register. |
| 🟡 | Sync on-premises AD devices with Microsoft Entra Cloud Sync | Preview | Cloud Sync can synchronize AD devices to Entra ID, enabling Hybrid Azure AD Join and device lifecycle (updates, disables, deletes) across connected and disconnected forests without Entra Connect Sync or AD FS. |
| 🟡 | Automated detection and cleanup of sponsorless guests | Preview | Lifecycle Workflows can detect and remove guest accounts without a sponsor, reducing stale or over-permissioned external users. |
| 🟡 | Back up and restore Group Policy Objects in Entra Domain Services | Preview | Entra Domain Services keeps automatic backups of managed GPOs so admins can restore policy settings after unintended changes. |
📱 Microsoft Intune
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔵 | Samsung Knox E-FOTA firmware update management | Update | Microsoft Intune now integrates with Samsung Knox E-FOTA for managing firmware updates on corporate-owned Samsung devices directly in admin center. Control firmware versions, deploy without user interaction, schedule downloads/installations. Applies to Android Enterprise COSU, COBO, COPE. |
| 🔵 | New Windows settings catalog settings | Update | New settings for camera behavior, Keyboard Filter controls (Windows Insider), and Windows Subsystem for Linux (WSL). |
| 🔵 | New Microsoft Edge settings (Edge 149) | Update | Microsoft Edge administrative templates refreshed to version 149, adding 15 new policies including Local Fonts permissions, M365 authentication popups, Copilot settings, SharedWorkers extended lifetime, and developer tools availability. |
| 🔵 | New Windows App (Azure Virtual Desktop) settings | Update | Five new Windows App settings: turn off automatic updates, auto log off after inactive interval, skip First Run Experience, Admin Release Ring Policy, auto create shortcuts. |
| 🔵 | Remove Default Microsoft Store packages enhancement | Update | New subsetting “Specify additional package family names to remove” lets you provide custom list of PFNs to remove in addition to built-in defaults. |
| 🔵 | Disable Get Started app setting | Update | New setting prevents Windows Get Started app from being available to users. |
| 🔵 | New OneDrive settings | Update | Seven new OneDrive settings including custom folder name, OIDC authentication for on-prem SharePoint, offline mode prevention, and hard-delete options for folder shortcuts. |
| 🔵 | Visual Studio administrative templates update | Update | Refreshed to version 1.0.184.40051, adding Disable Model Context Protocol (MCP) setting. |
| 🔵 | Skip Setup Assistant screens for tvOS and visionOS | Update | Support for hiding/showing new Setup Assistant screens during automated device enrollment (ADE) for tvOS and visionOS, including Apple ID, Diagnostics Data, and Location Services. |
| 🔵 | Dedicated RBAC permission for zero-touch enrollment | Update | Dedicated RBAC permission for Google zero-touch enrollment portal access, independent from app management permissions. |
| 🔵 | Collect Windows registry data with properties catalog | Update | Collect Windows registry data through properties catalog by defining specific registry keys/values to collect from enrolled Windows devices under HKEY_LOCAL_MACHINE. |
| 🔵 | Improved on-demand device sync for Windows | Update | More comprehensive on-demand sync for Windows devices initiating full synchronization across configuration policies, apps, and scripts. |
| 🔵 | Custom compliance settings for macOS | Update | Custom compliance settings for macOS using scripts and JSON rules, similar to Windows and Linux support. |
| 🟡 | Controlled Configuration for Microsoft Defender antivirus | Preview | In preview: Defender antivirus settings delivered by Intune or MDE security settings management become authoritative, overriding configurations from Group Policy, Configuration Manager, and local scripts. |
| 🔵 | Regional support for Microsoft Store apps | Update | Regional selection for Microsoft Store apps when adding to Intune, enabling deployment of apps published for specific markets. |
| 🔵 | APP Multiple Managed Accounts | Update | Multiple Managed Accounts support extended to Microsoft Outlook on iOS/iPadOS (v5.2626.0 or later), letting users add and manage more than one managed account within same app. |
📧 Microsoft Defender Office 365
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔵 | Localized default Mark as and notify email templates | Update | Automatic notifications now use default template in user’s preferred language based on Outlook language settings. Custom templates not affected. |
| 🔵 | Unified RBAC default for new MDO Plan 2 organizations | Update | Starting July 2026, new Microsoft Defender for Office 365 Plan 2 organizations use Microsoft Defender unified RBAC model by default. |
| 🔵 | Microsoft Defender for Office 365 Plan 1 included in Microsoft 365 E3 | Update | Microsoft 365 E3 now includes Microsoft Defender for Office 365 Plan 1. |
| 🟡 | Prompt injection protection | Preview | Microsoft Defender for Office 365 now detects prompt injection attacks hidden in inbound email. |
🎯 Microsoft Defender XDR
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🟡 | AI agent posture risk in Microsoft Defender | Preview | Microsoft Defender now assesses posture risk for AI agents including enterprise agents and local agents discovered on endpoint devices. Risk levels based on configuration, access, runtime activity, endpoint/user context, and active alerts. |
| 🟢 | Domain investigation page GA | GA | Domain investigation page allows investigation of Active Directory domains, showing domain properties, deployment health, identity summary, service account breakdown, sensitive entities, active recommendations, group policies, and trust relationships. |
| 🟡 | Threat detection for Microsoft Agent 365 agents | Preview | Microsoft Defender analyzes runtime signals from agent interactions, tool usage, and execution patterns to surface alerts in Microsoft Defender XDR. Uses observability data from Copilot Studio, Foundry, M365 Copilot Agent Builder, and Agent 365 SDK agents. |
| 🟢 | Real-time protection for Microsoft Agent 365 tooling servers | GA | Microsoft Defender evaluates tool invocations and responses against security policies and can allow or block interactions with Work IQ MCP and customer MCP tools onboarded to Agent 365. |
🔍 Microsoft Defender Endpoint
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔵 | macOS Build 101.26062.0009 | Update | Release version 20.126062.9.0: Bug and performance fixes, extended network diagnostics with mdatp health –details network_configuration. |
| 🔵 | macOS Build 101.26052.0016 | Update | Release version 20.126052.16.0: Security and critical updates. |
| 🔵 | Linux Build 101.26052.0012 | Update | Improved antivirus enforcement visibility with mdatp health antivirus_enforcement_level field, more accurate connectivity tests validating same update paths as offline security intelligence updates, fixed FIPS-enabled RHEL 8/9 installation issue, fixed WordPress Core inventory detection. |
| 🔵 | Windows Antivirus Platform 4.18.26070.9 | Update | Improved archive scanning performance scaling service memory limits based on logical cores, improved cache builds on Lunar Lake CPUs using TrustedImageIdentifier, fixed excluded files resubmission to cloud protection service, fixed HTTPS connection stalls under Network Protection Block mode. |
| 🟡 | AI agent runtime protection updates | Preview | AI agent runtime protection enhancements: vendor-supported agent event interfaces work with standard platform/engine update channels (no Beta channel required), agent-native event inspection supports Codex CLI and GitHub Copilot app, network inspection supported for agents without vendor-supported event interfaces including OpenClaw and Node.js-based Claw agents. |
| 🟢 | Defender Deployment Tool for Linux | GA | Available from Linux version 101.26042.0011+. Combines installation, onboarding, upgrades, and uninstallation into single workflow. Automates prerequisite validation, supports custom installation paths, deploys specific versions from preferred update channels, works with local repositories. Provides Device Timeline integration, Advanced Hunting queries, and detailed error reporting. |
💿 MDE Release Notes
Windows
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔵 | Windows Antivirus Platform 4.18.26070.9 / Engine 1.1.26070.7 | Update | Improved archive scanning performance scaling service memory limits dynamically based on logical cores, improved cache builds on Lunar Lake CPUs using TrustedImageIdentifier, fixed excluded files resubmission to cloud protection service, fixed HTTPS connection stalls under Network Protection Block mode from dropped TCP FIN segments. |
macOS
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔵 | macOS Build 101.26062.0009 (July 2026) | Update | Release version 20.126062.9.0, Engine 1.1.26050.3000, Signature 1.455.265.0: Bug and performance fixes, extended network diagnostics with mdatp health –details network_configuration. |
| 🔵 | macOS Build 101.26052.0016 (July 2026) | Update | Release version 20.126052.16.0, Engine 1.1.26060.12000, Signature 1.455.47.0: Security and critical updates. |
Linux
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔵 | Linux Build 101.26052.0012 (July 2026) | Update | Release version 30.126052.0012.0, Engine 1.1.26040.3001, Signature 1.449.136.0: Improved antivirus enforcement visibility with antivirus_enforcement_level field showing real_time/passive/on_demand/audit mode, more accurate connectivity tests validating same update paths as offline security intelligence updates with inline diagnostics, fixed FIPS-enabled RHEL 8/9 installation issue, fixed WordPress Core inventory detection. |
🩹 MDVM Fixed Inaccuracies
| Indicator | Feature | Type | Description |
|---|---|---|---|
| 🔴 | Fixed incorrect recommendations for CVE-2020-13692 | Security/FIX | Fixed incorrect recommendations by excluding PostgreSQL CPE. Fix date: 06-July-26. |
| 🔴 | Updated CVSS score for CVE-2016-0638 | Security | CVSS score updated. Fix date: 15-July-26. |
| 🔴 | Added MDVM support for CVE-2026-46300 | Security/FIX | Added MDVM support for Linux Image Generic Vulnerability by adding recommendations. Fix date: 15-July-26. |
| 🔴 | Fixed incorrect recommendations for CVE-2026-12161 | Security/FIX | Fixed incorrect recommendations in Devolutions Remote Desktop Manager Vulnerability. Fix date: 15-July-26. |
| 🔴 | Added NoFixAvailable tag for CVE-2026-58052 | Security | Added NoFixAvailable tag for 7-zip Vulnerability. Fix date: 15-July-26. |
| 🔴 | Fixed incorrect recommendations for CVE-2022-38014 | Security/FIX | Fixed incorrect recommendations in MS Windows Subsystem for Linux Vulnerability. Fix date: 26-July-26. |
| 🔴 | Added NoFixAvailable tag for CVE-2026-6861 | Security | Added NoFixAvailable tag for GNU Emacs Vulnerability. Fix date: 26-July-26. |
| 🔴 | Improved accuracy for vendor F5 | Security/FIX | Improved accuracy for vendor F5. Fix date: 29-July-26. |
| 🔴 | Fixed incorrect detections for multiple vendors | Security/FIX | Fixed incorrect detections in Tytel, W3cmm, Modumhq, Localsend, Getstoryteller, Aib, and GitHub Copilot. Fix date: 29-July-26. |
| 🔴 | Added MDVM support for multiple Microsoft products | Security/FIX | Added MDVM support for Microsoft Windows App Client, Microsoft Remote Desktop Client, GitHub Copilot Chat, Power Automate for Desktop, Nuance PowerScribe 360, PC Manager, and Power toys. Fix date: 29-July-26. |
Action Items
| Priority | Action | Due | Affected Product(s) |
|---|---|---|---|
| 🔴 | Restart Istio workload pods to apply security patches for ISTIO-SECURITY-2026-005 | Immediate | AKS |
| 🔴 | Update containerd to v1.7.33 to remediate CVE-2026-53488, CVE-2026-47262, CVE-2026-34986 | Immediate | AKS |
| 🔴 | Migrate from legacy grouped recommendations to individual recommendations before API access fully removed | Immediate | Microsoft Defender Cloud |
| 🔴 | Update automations using deprecated Defender plan enablement API to supported plans | Immediate | Microsoft Defender Cloud |
| 🔴 | Migrate legacy Container Insights authentication to managed identity before September 30, 2026 | September 30, 2026 | Azure Monitor |
| 🔴 | Remove enableCustomCATrust preview property from clusters before September 14, 2026 | September 14, 2026 | AKS |
| 🔴 | Stop using npm 2FA-bypass GATs for account management operations before early August 2026 | Early August 2026 | GitHub Security |
| 🔴 | Review and migrate from deprecated Azure Diagnostics extension (WAD/LAD) | Immediate | Azure Monitor |
| 🔴 | Migrate to managed identity authentication for Container Insights clusters | September 30, 2026 | Azure Monitor |
| 🟡 | Review Ubuntu 22.04 kernel CVE findings from Canonical reclassifications and verify actual exposure | Ongoing | AKS |
| 🟡 | Evaluate adoption of Node Disruption Policy for controlled disruptive operations | Q3 2026 | AKS |
| 🟡 | Assess MAI-Augmented scan profile for on-demand vulnerability scans | Q4 2026 | Microsoft Security Exposure Management |
| 🟡 | Evaluate agentic code scanner private preview for code vulnerability detection | Q4 2026 | Microsoft Security Exposure Management |
| 🟡 | Test Network Data Security with Global Secure Access for DLP policy enforcement | Q4 2026 | Microsoft Purview |
| 🟡 | Evaluate AI agent posture risk assessment capabilities for enterprise agents | Q4 2026 | Microsoft Defender XDR |
| 🟡 | Assess Microsoft Agent 365 runtime protection and real-time tool protection | Q4 2026 | Microsoft Defender XDR |
| 🟡 | Evaluate Foundry agent security transition to Agent 365 licensing model | Q3 2026 | Microsoft Foundry |
| 🟡 | Review npm install-time security defaults and update package.json allowlists | Q3 2026 | GitHub Security |
| 🟡 | Prepare for dual-use content metadata requirements in package.json | Q3 2026 | GitHub Security |
| 🟡 | Evaluate Dependabot 3-day cooldown default impact on update workflows | Q3 2026 | GitHub Security |
| 🟡 | Assess GitHub Actions malicious workflow approval requirement for public repos | Q3 2026 | GitHub Security |
| 🟡 | Plan migration to sensor v3.x for Defender for Identity | Q4 2026 | Microsoft Defender Identity |
| 🟡 | Evaluate Controlled Configuration preview for Microsoft Defender antivirus settings | Q4 2026 | Microsoft Intune |
| 🟡 | Assess prompt injection protection capabilities for inbound email | Q4 2026 | Microsoft Defender Office 365 |
| 🟡 | Evaluate AI agent runtime protection updates for Codex CLI and GitHub Copilot app | Q4 2026 | Microsoft Defender Endpoint |
| 🔵 | Plan Foundational CSPM opt-in configuration for new Azure subscriptions | October 27, 2026 | Microsoft Defender Cloud |
| 🔵 | Review new PostgreSQL Flexible Server recommendations and remediate misconfigurations | Q3 2026 | Microsoft Defender Cloud |
| 🔵 | Assess new multicloud recommendations for AWS and GCP resources | Q3 2026 | Microsoft Defender Cloud |
| 🔵 | Evaluate OT data connectors for Armis, Dragos, and Forescout integration | Q3 2026 | Microsoft Security Exposure Management |
| 🔵 | Review advanced platform metrics preview for granular metric collection | Q3 2026 | Azure Monitor |
| 🔵 | Assess new Microsoft Edge policies (Edge 149) for deployment | Q3 2026 | Microsoft Intune |
| 🔵 | Evaluate Samsung Knox E-FOTA integration for firmware update management | Q3 2026 | Microsoft Intune |
Security Architect Observations
AI agent security emerges as critical architecture priority: Multiple releases (Defender XDR, Foundry, Defender Endpoint) introduce AI agent posture risk assessment, runtime protection, and threat detection capabilities. Security architects must evaluate agent inventory, access patterns, and tool integrations across Copilot Studio, Foundry, and M365 Copilot Agent Builder to establish governance frameworks for AI agent security.
Container security posture management matures significantly: GA releases for serverless container posture (ACA, ACI, ECS Fargate), Kubernetes misconfiguration enforcement at admission time, and multi-cloud container vulnerability assessment (EKS/GKE parity) signal shift toward proactive container security. Architects should integrate these capabilities into container lifecycle governance.
Supply chain security controls tighten across ecosystems: GitHub’s npm v12 install-time security defaults, malware scanning at publish time, Dependabot cooldown periods, and expanded OpenSSF malware advisory ingestion represent layered supply chain defenses. Architects must review CI/CD pipelines for compatibility and update dependency management policies.
Multicloud security coverage expansion accelerates: Over 200 new AWS and GCP recommendations spanning 90+ resource types, OT data connector support (Armis, Dragos, Forescout), and unified IT/OT visibility indicate Microsoft’s push toward comprehensive multicloud security posture management. Architects managing hybrid environments should evaluate consolidation opportunities.
Deprecation wave requires proactive migration planning: Legacy grouped recommendations retirement, Azure Diagnostics extension (WAD/LAD) retirement, Container Insights legacy authentication retirement, npm 2FA-bypass GAT deprecation, and five deprecated Defender plan blocks create significant migration overhead. Architects should inventory affected systems and establish migration timelines.
Zero-trust identity controls strengthen across platforms: Automatic RPC auditing on domain controllers, sensor v3.x migration GA, dedicated RBAC permissions for zero-touch enrollment, and role-group assignment expiration in Purview reflect continued zero-trust maturation. Architects should audit identity access patterns and privilege escalation paths.
Security Operations Observations
Istio security patches require immediate workload restart: ISTIO-SECURITY-2026-005 affects asm-1-28, asm-1-29, and asm-1-30 revisions. SOC teams must coordinate with platform teams to schedule pod restarts and verify istio-proxy patch version injection. Monitor for failed restarts indicating potential compatibility issues.
Ubuntu 22.04 kernel CVE inflation creates alert fatigue risk: Canonical’s reclassification of historical CVEs from “Needs evaluation” to “Vulnerable” status causes broad increase in scanner findings. SOC teams should tune vulnerability alerting to distinguish between actual exposure vs. classification changes, and verify findings against Ubuntu CVE Tracker for linux-azure packages.
AI agent telemetry visibility improves detection capabilities: Tracing for Agent Framework (OpenTelemetry-compatible spans), AI agent runtime protection network inspection for OpenClaw/Node.js agents, and Agent 365 observability logs provide new detection surfaces. SOC teams should develop detection rules for anomalous agent behavior, tool misuse, and prompt injection patterns.
Malware scanning delays impact CI/CD operations: npm publish-time scanning introduces 5-15+ minute delays before package availability. SOC teams should monitor for workaround attempts (direct registry uploads, mirror usage) and ensure legitimate publishers understand appeal processes for blocked packages.
GitHub Actions malicious workflow approval requirement creates operational friction: Public repository workflow runs now held for approval when identified as potentially malicious. SOC teams should establish approval workflows, monitor for approval bypass attempts, and review held workflows for false positives affecting legitimate automation.
Dependabot cooldown default may delay critical non-security updates: 3-day cooldown applies only to version updates (security updates remain immediate). SOC teams should monitor for developer workarounds and ensure security update pipelines remain unimpeded while evaluating cooldown effectiveness at catching compromised releases.
OT data connector integration expands detection surface: Armis, Dragos, and Forescout connectors bring OT asset and vulnerability data into Defender portal. SOC teams should develop OT-specific playbooks, calibrate alert thresholds for OT environments, and establish IT/OT incident response coordination procedures.
Legacy authentication retirement creates monitoring gaps: Container Insights legacy authentication retirement and Azure Diagnostics extension retirement may create visibility gaps if migration incomplete. SOC teams should audit affected clusters and VMs, verify new authentication paths, and update alerting rules for migration failures.
References
This post is licensed under CC BY 4.0 by the author.