2026-09

This release tracker is LLM-curated and based on the official Microsoft product sources listed below. It provides an architect-grade summary of recent features, changes, and announcements. Always verify critical details against the official documentation. List of all raw markdown files for the releases are at https://github.com/pisinger/pisinger.github.io/tree/main/_ms_release_radar

Microsoft Security Release Radar - September 2026

Reporting window: September 2026. Sources: Microsoft Learn what’s-new pages, the Microsoft Release Communications Azure Updates API, the Azure/AKS release feed, and the GitHub App changelog. Category definitions were applied as supplied; items are prioritized by impact on security posture and operations (High / Medium / Low).

🎯 Microsoft Defender XDR

Indicator	Feature	Type	Description	Priority
🟡	Integrated Security Operations Center (ISOC) in Microsoft Defender	Preview	Brings XDR, SIEM, threat intelligence, automation, and AI together in the Defender portal; available from September 23, 2026 to eligible Microsoft 365 E5 and E7 customers without an active Microsoft Sentinel workspace.	High
🟢	Identity Security dashboard and Coverage & Maturity	GA	Centralized view of identity-related risk and posture, plus coverage and maturity scoring across on-premises, cloud, SaaS, identity providers, and partner technologies to prioritize posture work.	Medium

🆔 Microsoft Defender Identity

Indicator	Feature	Type	Description	Priority
🟡	Sensor v2.x installation restriction for new workspaces	Preview	From October 2026, new workspaces restrict sensor v2.x to Windows Server 2016 or earlier; sensor v3.x becomes the supported onboarding option for Windows Server 2019 or later.	Medium
🔵	Automatic sensor v3.x activation and Windows auditing by default	New/Updated	Eligible licensed organizations get automatic sensor v3.x activation and automatic Windows event auditing enabled by default after a 30-day banner notice, including settings currently set to Off; opt out during the notice period to keep current settings.	High
🔵	Identity Security dashboard and Coverage & Maturity	New/Updated	Defender for Identity surfaces the new identity security dashboard and coverage/maturity views for on-premises, cloud, and SaaS identity estates.	Medium
🟡	Sensor v3.x onboarding without Defender for Endpoint deployment	Preview	Sensor v3.x can now be activated directly on eligible domain controllers running Windows Server 2019 or later without first onboarding them to Defender for Endpoint; new deployments only.	Medium
🟡	Sensor v3.x support for AD CS, AD FS, and Entra Connect roles	Preview	Extends sensor v3.x coverage to eligible AD CS, AD FS, and Microsoft Entra Connect servers that are not domain controllers and have no existing Defender for Identity sensor.	High
🔵	Combined Sensor management tab	New/Updated	The Onboarding and Sensors tabs on the identity On-premises settings page are merged into a single Sensor management tab; automatic sensor activation now lives on Advanced features.	Low

🔍 Microsoft Defender Endpoint

Indicator	Feature	Type	Description	Priority
🟢	MDE plug-in support for WSL containers (WSLc)	GA	[Windows] Extends Defender for Endpoint protection to workloads in WSL containers, with device inventory, alerts, incidents, timeline, and advanced hunting visibility (plugin 2.26.921.1).	High
🟡	Defender support for Linux desktops	Preview	[Linux] Extends Defender for Endpoint to Linux desktops using the same distributions, deployment methods, and capabilities as Linux servers.	Medium
🟢	macOS release build 101.26072.0017	GA	[macOS] Release version 20.126072.17.0 shipped with EDR, DLP/device control, security, and stability improvements.	Low
🟢	New Secure Score recommendations for AI-Readiness	GA	[Windows] Adds a six-recommendation AI-Readiness collection (TPM 2.0 root of trust, VBS isolation, HVCI, Windows LAPS, plus existing internet-exposure and secure-boot guidance) surfaced under Exposure Management recommendations.	High
🟡	Memory scan for Linux	Preview	[Linux] Inspects process memory for known malicious behaviors and memory-resident threats, adding protection against fileless and injected code; requires Defender 101.26071.0005 or later on the Insiders-slow channel.	Medium
🟡	MDE plug-in support for WSL containers (WSLc)	Preview	[Windows] Public preview of WSL container protection with device inventory, alerting, and advanced hunting; enrollment requires the WSLc preview registration form.	Medium

💿 MDE Release Notes

Windows

Indicator	Feature	Type	Description	Priority
🔵	Windows Antivirus platform 4.18.26090.9 / engine 1.1.26090.9	New/Updated	[Windows] September 2026 antivirus platform and engine release with security intelligence 1.461.1.0, in the Security and Critical Updates support phase; listed with an October 12, 2026 release date.	Medium

macOS

Indicator	Feature	Type	Description	Priority
🔵	EDR reliability and performance improvements	New/Updated	[macOS] Improved reliability and performance of endpoint detection and response in build 101.26072.0017.	Low
🔵	DLP and Device Control improvements	New/Updated	[macOS] Improved reliability, performance, and health reporting for data loss prevention and device control.	Low
🔴	Security fixes and hardening	Security	[macOS] Security fixes and hardening included in build 101.26072.0017.	High
🔵	General quality and stability improvements	New/Updated	[macOS] Other quality and stability improvements in build 101.26072.0017.	Low

Linux

Indicator	Feature	Type	Description	Priority
🔵	Cloned VM device identity fix	New/Updated	[Linux] Fixed cloned Linux virtual machines retaining the source image machine identifier, which caused multiple endpoints to share one Defender for Endpoint device identity; each clone is now unique.	High
🔵	SIGILL crash fix on non-SSE4.1 processors	New/Updated	[Linux] Fixed SIGILL crashes on systems whose processors do not support SSE4.1.	Medium
🔵	Reliability and quality improvements (101.26081.0010)	New/Updated	[Linux] General reliability and quality improvements in version 101.26081.0010.	Low
🟡	Memory scanning	Preview	[Linux] Adds process memory scanning to detect known malicious behaviors and memory-resident threats, strengthening protection against in-memory attacks.	Medium
🔵	Platform support for Ubuntu 26.04, openSUSE Leap 16, Fedora 44	New/Updated	[Linux] Added support for Ubuntu 26.04, openSUSE Leap 16, and Fedora 44 in version 101.26072.0005.	Low
🔵	wdavdaemon restart fix	New/Updated	[Linux] Fixed an issue that could cause the wdavdaemon process to restart in rare cases while scanning running processes.	Low
🔵	MDVM detection for Node.js, Python, and Java libraries	New/Updated	[Linux] Defender Vulnerability Management expanded vulnerability detection to critical third-party libraries across Node.js, Python, and Java.	Medium
🔵	Reliability and quality improvements (101.26072.0005)	New/Updated	[Linux] General reliability and quality improvements in version 101.26072.0005.	Low

🩹 MDVM Fixed Inaccuracies

Indicator	Feature	Type	Description	Priority
🔴	Fixed incorrect detections in Apple iMovie (ID 152264)	Security	Corrected vulnerability detection logic for Apple iMovie; fix dated 07-September-26.	Low
🔴	Fixed incorrect detections in Google Earth (ID 152487)	Security	Corrected vulnerability detection logic for Google Earth; fix dated 07-September-26.	Low
🔵	Added MDVM support for FastTrack Admin By Request (ID 152303)	New/Updated	Added vulnerability assessment support for FastTrack Admin By Request; fix dated 07-September-26.	Low
🔵	Improved version detection for Teams for Android	New/Updated	Improved version detection logic for Teams for Android; fix dated 12-September-26.	Low
🔴	Fixed incorrect recommendations for CVE-2024-47611	Security	Excluded liblzma evidence to remove false-positive recommendations for CVE-2024-47611; fix dated 23-September-26.	Medium

🛡️ Microsoft Defender Cloud

Indicator	Feature	Type	Description	Priority
🔵	Upcoming billing updates for Defender for Servers	New/Updated	Effective November 1, 2026, desktop and mobile devices are no longer billed as servers under Plan 1, and billable server identification becomes more granular (online checks multiple times per hour, golden-image clones counted separately) for Plan 1 and Plan 2.	High
🟢	Enhanced agent for Defender for SQL Servers on Machines in Azure Government	GA	The enhanced agent is fully available in Azure Government for resource- and subscription-level enablement, removing the Azure Monitor Agent dependency; existing plans need configuration updates and protection verification.	Medium
⚫	Deprecation of “Machines should have a vulnerability assessment solution” recommendation	Deprecation	The grouped vulnerability assessment recommendation is retired on December 14, 2026 in favor of individual recommendations.	Medium
🟢	AWS GuardDuty coverage status on the S3 asset page	GA	Shows GuardDuty Extended Threat Detection and Malware Protection enablement per S3 bucket in Cloud security details without leaving the Defender portal.	Low
🟢	Defender for Cosmos DB in Azure Government	GA	Aligns Azure Government feature coverage and runtime protection with the commercial Defender for Cosmos DB offering.	Medium

📧 Microsoft Defender Office 365

Indicator	Feature	Type	Description	Priority
🔵	Separating Teams user reporting settings from email settings	New/Updated	Worldwide tenants on Defender for Office 365 Plan 1/2 or E5 can now manage Teams user reporting settings on a separate page, allowing different reporting destinations for Teams and Outlook reports.	Medium
🔵	User reporting in Teams expanded to group calls	New/Updated	Users can report completed or missed Teams group calls as scam or non-scam from call history, routed to the reporting mailbox, Microsoft, or both per user-reported settings.	Medium

🔐 Microsoft Sentinel

Indicator	Feature	Type	Description	Priority
🔵	Integrated Sentinel SIEM and data lake onboarding	New/Updated	The data lake is now integrated with Sentinel onboarding and billing; no separate data lake onboarding is required, and retention is extended per table after the workspace is connected to the Defender portal.	High
🔵	Enable the data lake tier using Table management	New/Updated	Table management in the Defender portal now exposes retention settings to mirror Analytics-tier data into the data lake tier and apply lake-only retention for historical data.	High
🔵	Interactive KQL in advanced hunting	New/Updated	Interactive KQL queries over data lake data are available in Advanced Hunting under Investigation & Response, letting analysts query Sentinel and Defender XDR data without switching contexts.	High
🔵	Mirror the data lake tier to Microsoft Fabric OneLake	New/Updated	Azure Monitor mirroring exposes selected Sentinel workspace tables in Fabric without copying data or extra charge; data stays in the Log Analytics workspace.	Medium
🔵	Fabric data federation for external sources	New/Updated	Data federation and OneLake shortcuts (AWS S3, Google Cloud Storage, ADLS Gen2) plus metadata mirroring for Azure Databricks let teams query external data in place.	Medium
🔵	Fabric custom security analytics	New/Updated	KQL, notebooks, scheduled jobs, and graphs in Fabric can analyze and enrich lake tables, with selected findings published back to Sentinel via DCR.	Medium
🔵	Interactive KQL queries and jobs in Fabric	New/Updated	Fabric supports interactive KQL lake queries across Sentinel tables and federated sources, plus pipelines running Lookup or KQL activities on a schedule.	Medium
🔵	Fabric notebooks for Sentinel analytics	New/Updated	Apache Spark notebooks provide an interactive environment to explore, transform, and enrich Sentinel data, runnable interactively, through pipelines, or on a schedule.	Low
🔵	Custom graphs with Fabric Graph	New/Updated	Fabric Graph models relationships across Sentinel data lake tier data and queries them with GQL to identify connected entities and activity patterns.	Medium

🏢 Microsoft Entra ID

Indicator	Feature	Type	Description	Priority
🟡	Device signals added to Continuous Access Evaluation in Global Secure Access	Preview	Universal CAE now reacts to user-risk and device-revocation signals, including deleted, disabled, or noncompliant devices.	High
🟢	Improved Windows device registration during sign-in	GA	Users protected by Conditional Access token protection policies can complete device registration inline during sign-in instead of a separate workflow.	Medium
🟢	ServiceNow access request workflows for entitlement management	GA	Users can request access packages and view request history in ServiceNow, and approvers can approve or deny there, while packages and policies stay managed in Entra ID Governance.	Medium
🟡	B2B guest access with Global Secure Access	Preview	Guests signed in with their home tenant can switch to the customer tenant context and route private traffic through the customer’s Global Secure Access service.	Medium
🟢	Guided migration from Entra Connect Sync to Cloud Sync	GA	A guided tool consolidates readiness assessment, provisioning agent setup, controlled activation, and post-activation validation into one workflow.	Medium
🟢	Workload identity authentication for SAP SuccessFactors provisioning	GA	Replaces long-lived usernames and passwords with Entra-managed credentials and short-lived tokens, upgradable in place ahead of SAP’s November 2026 basic authentication deprecation.	High
🟡	Clear null or empty attribute values in provisioning	Preview	Null-value provisioning clears target attributes when the source is null or empty for API-driven, Workday, and SAP SuccessFactors inbound flows to Entra ID and AD.	Low
🟢	Custom call-outs with Azure Logic Apps in provisioning	GA	Custom call-outs enable advanced attribute transformations, such as generating unique aliases, for create events in HR inbound, SaaS outbound, and cross-tenant synchronization.	Low
🟡	Discover and govern application groups and memberships	Preview	Entra ID Governance discovers groups and memberships in connected applications, flagging local or orphaned groups and objects without application assignments.	Medium
🟡	Microsoft-managed certificates for TLS inspection in Global Secure Access	Preview	Microsoft now provisions the inspection certificate, removing the need to operate a customer certificate authority or PKI for TLS inspection, which previously required customer-managed certificates and trust chains.	Medium

📱 Microsoft Intune

Indicator	Feature	Type	Description	Priority
🔵	Microsoft Cloud PKI support for US Government GCC High	New/Updated	Cloud PKI is available for GCC High tenants, automating certificate issuance, renewal, and revocation for Windows, Android, iOS/iPadOS, and macOS without on-premises CA infrastructure; DoD is not supported.	Medium
🔵	Remote Help support for GCCH environments	New/Updated	Remote Help extends to GCC High tenants for Android, macOS, and Windows with Intune RBAC and Entra ID sign-in for helpers and sharers; DoD is not supported.	Medium
🔵	Faster delivery of Win32 apps	New/Updated	Push notifications for admin-initiated and service-side app changes shorten device check-in intervals and reduce Win32 app delivery delays on Windows.	Low
🔵	Microsoft Dragon Copilot available as a protected app	New/Updated	The app can now receive Intune app protection policies on Android and iOS/iPadOS to protect organizational data used by its AI-assisted documentation features.	Low
🔵	Require Managed Home Screen authentication for protected app activities	New/Updated	MAM-integrated apps redirect users to Managed Home Screen for sign-in or session PIN before granting access to protected content on Android Enterprise dedicated devices in shared device mode.	Medium
🔵	Faster Win32 app delivery after Windows enrollment	New/Updated	The Intune Management Extension checks for Windows app assignments immediately after the Enrollment Status Page completes, reducing install delay for required Win32 apps.	Low
🔵	New Apple settings in the Settings Catalog	New/Updated	Adds iOS/iPadOS and macOS controls for app settings, Apple Intelligence, network and web-content filtering, and the macOS login window.	Low
🔵	Assignment filters for Android Settings Catalog policies	New/Updated	Assignment filters now work with Android Enterprise and Android AOSP Settings Catalog policies for device-property-based include and exclude targeting.	Medium
🔵	Windows 11, version 26H2 Settings Catalog update	New/Updated	Day-zero support for validated Windows 11 26H2 policy settings lets admins manage new and updated endpoint controls immediately.	Medium
🔵	Automatically launch Defender for Endpoint during Android Enterprise setup	New/Updated	Intune can open Defender for Endpoint during out-of-box setup on COBO and COPE devices so users finish initial configuration as part of enrollment.	Medium
🔵	Skip the Device Features Tour during Apple enrollment	New/Updated	Adds the Apple OS 27 Setup Assistant skip key for the device features tour in Automated Device Enrollment profiles on iPhone and iPad.	Low
🔵	Upgrade Android Enterprise connection to a managed Google domain	New/Updated	Tenants connected with a Gmail account can link the enterprise to a managed Google domain and manage the Google-Intune connection with an Entra work account.	Medium
🔵	Updated minimum supported version for iOS and iPadOS	New/Updated	Intune now requires iOS/iPadOS 18 or later for standard device management, Company Portal, and app protection scenarios; userless ADE devices follow a separate statement.	High
🔵	New single device page becomes the default experience	New/Updated	The single device page is now default across platforms and the previous device page is no longer available; existing device-management capabilities remain.	Low
🔵	Configure MDE AI agent runtime protection for Windows	New/Updated	New endpoint security template settings add Audit or Block modes for unsafe AI agent activity on Intune- and MDE-managed Windows devices.	High
🔵	Self-service onboarding for MDM compliance partners	New/Updated	Bring-your-own connector functionality lets partners build and validate compliance connectors and admins opt in with vendor details in the Intune admin center.	Medium
🔵	Stage app and policy rollout with deployment plans	New/Updated	Deployment plans stage app and configuration rollouts across multiple rings, control timing, and integrate with Multiple Admin Approval to reduce fleet-wide change risk.	Medium
🔵	Faster compliance updates for Windows devices	New/Updated	Client-driven compliance evaluation lets Windows devices detect changes to firewall, antivirus, BitLocker, Defender, OS build, real-time protection, and Secure Boot signals and request immediate reevaluation.	Medium
🔵	New Remote Help for Windows version 5.2.1040.0	New/Updated	Updates subscription metadata for E3, E5, and E7 licenses with no feature changes from 5.2.1037.0.	Low

🔎 Microsoft Purview

Indicator	Feature	Type	Description	Priority
🟢	Entra Global Secure Access integration with Purview DLP	GA	Protects text, files, and AI interactions at the network layer, enforces restrictive actions from DLP policies, and surfaces risky activity to Insider Risk Management across browsers, apps, APIs, and add-ins, including generative AI platforms.	High
🔵	Information Barriers policy compliance report	New/Updated	A new report identifies SharePoint sites, OneDrive accounts, and SharePoint Embedded containers that no longer comply after Information Barriers policy changes.	Medium

🚨 Microsoft Security Exposure Management

Indicator	Feature	Type	Description	Priority
🔵	Improved MDASH onboarding experience	New/Updated	Onboarding is reorganized into guided tasks with progress tracking instead of a single setup panel, defaulting to the Standard scan configuration before remote repository scans.	Low
🔵	MDASH scan progress monitoring	New/Updated	Scan progress shows whether a scan is waiting, processing code, validating findings, or publishing results, with completed work, elapsed time, and output availability.	Low

⚡ Azure Functions

Indicator	Feature	Type	Description	Priority
⚫	Retirement: support for PowerShell 7.4	Deprecation	Support ends November 10, 2026; apps keep running but receive no security patches, and Linux Consumption apps must first move to Flex Consumption before upgrading to PowerShell 7.6.	High
⚫	Retirement: support for .NET 8 and .NET 9	Deprecation	Support ends November 10, 2026; in-process apps must migrate to the isolated worker model, then to .NET 10, and Linux Consumption apps must move to Flex Consumption first.	High
⚫	Retirement: support for Node.js 22	Deprecation	Support ends April 30, 2027 with no further security patches; upgrade to Node.js 24 to remain support-eligible.	Medium
🟢	Azure Functions support for PowerShell 7.6	GA	PowerShell 7.6 is generally available, so apps can be developed locally and deployed to Functions plans on the current supported runtime.	Medium
🟢	TLS/SSL certificates and end-to-end TLS for Flex Consumption	GA	A site-scoped certificate model allows up to three private (.pfx) and three public (.cer) certificates per app (uploaded, Key Vault-imported, or App Service Managed Certificates) plus end-to-end TLS between front ends and workers.	High

📦 Azure Container Apps

Indicator	Feature	Type	Description	Priority
⚫	Retirement: Functions on Azure Container Apps V1	Deprecation	Functions on ACA V1 is retired September 29, 2027; existing apps stop running and no longer process requests or triggers, requiring migration to the V2 hosting model via the migration assistant or a manual rebuild.	High
🟢	Azure Container Apps Sandboxes	GA	A first-class resource type providing hardware-isolated microVM sandboxes with sub-second starts and suspend/resume snapshots for untrusted or AI-generated code, scaling from zero to thousands.	High
🟢	Azure Container Apps Express	GA	An opinionated, fastest path to production apps and agents with autoscaling, per-second billing, managed identity, secrets management, custom domains, registry integration, revisions, and built-in observability.	Medium

⛵ AKS

Indicator	Feature	Type	Description	Priority
⚫	Automatic migration of deprecated Availability Sets (VMAS) clusters	Deprecation	From September 30, 2026 the auto-upgrader migrates VMAS clusters to Virtual Machines node pools; migrate earlier with az aks update --migrate-vmas-to-vms to control timing.	High
⚫	Windows Server 2022 unsupported on Kubernetes 1.37 and later	Deprecation	Windows Server 2022 node pools are not supported from Kubernetes 1.37 onward, requiring an OS SKU migration path.	High
⚫	Flatcar Container Linux node images removed	Deprecation	Flatcar node images are removed, so scaling and remediation (reimage and redeploy) operations on affected node pools now fail.	High
⚫	Azure Linux with OS Guard retirement	Deprecation	Retires December 10, 2026 with no new node images or security patches; existing images are removed March 10, 2027, breaking scaling and remediation. Transition to Azure Container Linux.	High
🟢	Identity bindings	GA	Extends workload identity to overcome federated identity credential scale limits on user-assigned managed identities.	High
🟢	Autoscaling for Virtual Machines node pools	GA	VM node pool autoscaling, including multi-SKU autoscaling, is generally available.	Medium
🟡	Ubuntu 26.04	Preview	Ubuntu Minimal-based node image for Kubernetes 1.36 and later; register the Ubuntu2604Preview flag and use --os-sku Ubuntu2604 on Generation 2 VM sizes.	Low
🟡	Windows Server OS SKU migration	Preview	Migrates node pools from Windows Server 2022 to 2025 via a node pool update that triggers an automatic reimage where both versions are supported.	Medium
🟡	Convert existing clusters to a managed system node pool	Preview	Supported regions can convert existing clusters to a managed system node pool after registering the preview feature.	Medium
🟡	Switch blue-green upgrades to rolling	Preview	Node pools with an in-progress blue-green upgrade can now safely switch to the rolling upgrade strategy.	Low
🟡	On-Demand Monitor	Preview	New Cluster Health Monitor capability for node health checks and remediation.	Medium
🟡	AKS Hyperscale Configuration	Preview	Preprovisions control plane capacity with H2, H4, and H8 profiles for predictable API responsiveness and scheduling throughput on large AI, HPC, and batch workloads.	Low
🟡	Kubernetes 1.37 preview rollout	Preview	Kubernetes 1.37 is rolling out in preview alongside patch releases 1.36.3, 1.35.7, and 1.34.10.	Medium
🔵	LocalDNS enabled automatically on Kubernetes 1.37	New/Updated	LocalDNS turns on automatically where networking supports it; bring-your-own CNI, unsupported network policy, and custom DNS configurations are unchanged.	Medium
🔵	Namespace-scoped secret access for ama-metrics on Kubernetes 1.37	New/Updated	Azure Monitor managed Prometheus now uses namespace-scoped Kubernetes secret access for PodMonitor and ServiceMonitor; basicAuth and bearerToken configurations need scoped access configured before upgrading.	High
🔵	KMS secrets encryption requires a versionless Key Vault key ID on 1.37	New/Updated	Enabling KMS encryption-at-rest for Kubernetes API secrets with a versioned Key Vault key ID now returns a validation error; use a versionless key ID.	Medium
🔵	Managed namespace prefix restrictions	New/Updated	Managed namespace creation rejects names beginning with reserved kube- or aks-istio- prefixes to prevent conflicts with system components.	Low
🔵	35 KB CA certificate limit for HTTP proxy and custom CA	New/Updated	New clusters reject CA certificate content larger than 35 KB to keep node bootstrap data within platform limits; existing clusters are unaffected.	Low
🔵	Dual-stack to single-stack migration rejected	New/Updated	AKS rejects updates that remove IPv6 from an existing dual-stack cluster; migration to single-stack is not supported.	Low
🔵	Azure Policy Kubernetes-native validation enabled by default	New/Updated	When the Azure Policy add-on is enabled, its Kubernetes-native validation path is on by default across regions.	Low
🔵	Static Egress Gateway deregistration before reimage	New/Updated	Static Egress Gateway nodes deregister from the load balancer before node-image upgrades, reducing interrupted egress traffic.	Low
🔵	Reserved label rejection and stricter LoadBalancer IP validation	New/Updated	AKS rejects customer-supplied kubernetes.azure.com/managedby and control-plane values on platform-owned namespaces, and on 1.37 invalid or non-public LoadBalancer IPs fail early; the azure-pip-tags annotation no longer overrides cloud-controller-manager public IP tags.	Medium
🔵	Release-order batch change	New/Updated	Central US moves to release batch 3 and East US to batch 6, changing release timing only.	Low
🔵	Release status site and Windows VHD changes	New/Updated	The AKS release status site now lists Windows Server 2025 and drops Windows Server 2019 and 23H2 because no VHDs are produced for them, showing only the default VHD per version.	Low
🔵	Node pool, upgrade, and identity bug fixes	New/Updated	Fixed incompatible Capacity Reservation Group attachment, CoreDNS replica co-location after rolling updates, workload identity webhook certificate reload, node image bootstrap settings, repeated reimaging from automatic patching, leftover VMSS surge nodes, versionless CMK overriding infrastructure encryption, and the PDB deletion error message.	Medium
🔵	Container insights and Defender for Containers fixes	New/Updated	Fixed the Defender for Containers collector blocking CSI volume detach and missing Windows node metrics caused by an incorrect exporter port.	Medium
🔵	Platform and add-on component updates	New/Updated	Cloud Provider Azure, Azure CNI/CNS, Azure File/Blob/Disk CSI drivers, Secrets Store CSI driver, KEDA, Ratify, Tigera Operator, Cilium/Hubble/ACNS images, Envoy sidecars, App Routing, and Windows/Azure Linux/Azure Container Linux/Ubuntu node images were refreshed.	Medium
🔴	Istio service mesh security patches (ISTIO-SECURITY-2026-006)	Security	Istio add-on revisions asm-1-29 and asm-1-30 were updated to security-patched builds 1.29.7-2 and 1.30.4-2; workload pods must be restarted to reinject the updated istio-proxy sidecar.	High
🔴	AKS-2026-0006: OpenSSL end-of-life scanner findings	Security	Bulletin explains that OpenSSL 3.3 EOL findings in AKS-managed add-on images (CoreDNS, metrics-server, CSI components) reflect upstream EOL, while Azure Linux 3.0 still backports fixes such as CVE-2026-45447 and CVE-2026-54874; verify package revision and SBOM rather than the upstream version string.	Medium
🟡	AppNet public preview expansion and fixes	Preview	Azure Kubernetes Application Network reached additional regions and fixed mesh control plane certificate rotation, cross-cluster gateway labeling, Entra-authenticated member updates, orphaned resources, and missing diagnostic logs; AppNet 1.0-1.2 are retired and 1.5 (Istio 1.30.3) is available.	Low

🔬 Defender Container Sensor

Indicator	Feature	Type	Description	Priority
🟢	Sensor v0.11.7	GA	September 2026 release for Helm or Arc-enabled Kubernetes deployments with security vulnerability fixes and dependency updates.	Medium
🟢	Sensor v0.10.10	GA	September 2026 release for Helm or Arc-enabled Kubernetes deployments with security vulnerability fixes and dependency updates.	Medium
🟢	Sensor v0.9.68	GA	September 2026 release for AKS 1.35 or Helm deployments with security vulnerability fixes and dependency updates.	Medium
🟢	Sensor v0.8.61	GA	September 2026 release for AKS 1.34 and earlier with security vulnerability fixes and dependency updates.	Medium

🧠 Microsoft Copilot Studio

Indicator	Feature	Type	Description	Priority
🔵	Extract node for workflows	New/Updated	Pulls named values and tables out of documents such as invoices, contracts, and financial statements so later workflow steps can use the extracted data.	Medium
🟡	Copilot node for workflows	Preview	Runs Copilot Chat or a Cowork task grounded in the connected user’s mail, files, calendar, and chats, and can call Researcher, Analyst, or custom Agent Builder agents.	Medium
🔵	Model selection via the GitHub Copilot harness	New/Updated	A dropdown lets makers choose the model powering an agent and try experimental models before they are production-ready.	Medium
🔵	Content safety test method	New/Updated	Evaluates agent responses for hateful, sexual, violent, or self-harm content with configurable severity thresholds as part of agent evaluation.	High
🟢	File attachments in conversations	GA	Agents can read, summarize, and reason over attached files, now including Excel, PowerPoint, and Word documents.	Medium
🔵	Dataverse tables as a knowledge source	New/Updated	Grounds agents in organizational Dataverse data, with preview unstructured reasoning over Multiline Text and File columns so answers can come from notes, descriptions, and attached documents.	Medium
🟢	Workflows and MCP servers as agent tools	GA	Agents can now use workflows (multistep deterministic automation) and MCP servers (external services) as tools in production; previously preview for the GitHub Copilot harness.

Top 5 Action Items

Priority	Action	Due	Affected Product(s)
🔴 High	Patch Istio service mesh add-on revisions and restart workload pods to reinject the fixed istio-proxy sidecar.	Immediately	AKS
🔴 High	Upgrade Azure Functions apps off .NET 8, .NET 9, and PowerShell 7.4.	November 10, 2026	Azure Functions
🔴 High	Migrate Functions on Azure Container Apps V1 apps to the V2 hosting model.	Before September 29, 2027	Azure Container Apps, Azure Functions
🔴 High	Move Azure Linux with OS Guard node pools to Azure Container Linux.	December 10, 2026	AKS
🔴 High	Configure namespace-scoped Kubernetes secret access for ama-metrics PodMonitor and ServiceMonitor configurations.	Before upgrading to Kubernetes 1.37	AKS

Security Architect Observations

• Deprecation debt is clustering around runtime and OS lifecycles. Azure Functions .NET 8/9, PowerShell 7.4, Node.js 22, Functions on ACA V1, AKS Windows Server 2022, Flatcar, and Azure Linux with OS Guard all reach end of support within the planning horizon. A single platform-lifecycle register covering compute runtimes and node images would prevent these from arriving as separate emergencies.
• Sovereign cloud parity is improving but uneven. Defender for SQL Servers enhanced agent, Defender for Cosmos DB, Cloud PKI, and Remote Help expanded into Azure Government or GCC High, while DoD remains excluded for Cloud PKI and Remote Help. Architecture standards for regulated clouds should record these gaps explicitly.
• Identity defaults are shifting toward agent-aware, signal-driven control. Universal CAE now consumes user-risk and device-revocation signals, the Identity Security dashboard adds coverage scoring, and Defender for Identity enables sensor v3.x and Windows auditing by default. Default-on telemetry changes reduce blind spots but bypass change control, so opt-out windows must be governed.
• Network-layer data security is consolidating. Purview DLP via Global Secure Access and Microsoft-managed TLS inspection certificates move enforcement from endpoint agents to the network path, which changes where inspection, breakage, and certificate trust risks sit in the architecture.
• Automation and agent execution need explicit trust boundaries. AKS Sandboxes, WSL container protection, MDE AI agent runtime protection, and Copilot agent tool permissions all extend execution of untrusted or AI-generated content. Architectures should define isolation tier, egress control, and audit trail per execution surface rather than per product.
• SIEM and lake architecture is converging on the Defender portal. Integrated Sentinel onboarding, lake-tier retention via Table management, and Fabric mirroring remove the separate data lake onboarding step but change retention, cost, and data-residency assumptions that compliance owners previously documented.

Security Operations Observations

• High-priority detection coverage changes arrive as previews. Linux memory scanning, Linux desktop support, WSL container visibility, and sensor v3.x coverage for AD CS/AD FS/Entra Connect all alter what the SOC can see. Update detection coverage matrices and tuning baselines before enabling, and expect a temporary rise in low-fidelity memory and container alerts.
• Default-on Defender for Identity auditing will change event volume. Automatic sensor v3.x activation and Windows event auditing can materially increase domain controller telemetry and identity alerts in tenants that had these disabled; confirm ingestion capacity and alert routing during the 30-day notice window.
• AKS upgrade work has direct detection impact. LocalDNS auto-enable, namespace-scoped Prometheus secrets, reserved label rejection, and stricter LoadBalancer validation can silently break monitoring or admission pipelines; SOC should verify Prometheus scrape health and Defender for Containers coverage after each cluster upgrade.
• Scanner noise needs a documented exception workflow. The AKS OpenSSL end-of-life bulletin and the MDVM inaccuracy fixes (including CVE-2024-47611 false positives) show that distribution-aware matching and time-bound exceptions are required to keep vulnerability queues actionable.
• Insider and user-reporting signals broaden. Teams group-call reporting, separated Teams versus email reporting destinations, and Purview network DLP events add triage paths that must be mapped to existing incident queues to avoid orphaned reports.
• Deprecated grouped recommendation splits the vulnerability workflow. The retirement of “Machines should have a vulnerability assessment solution” on December 14, 2026 means dashboards, Workbooks, and automation keyed to that recommendation ID must move to the individual recommendations before the cutoff.

References

Product	URL
Defender XDR	https://learn.microsoft.com/en-us/defender-xdr/whats-new
Defender Unified RBAC	https://learn.microsoft.com/en-us/defender-xdr/whats-new-in-microsoft-defender-urbac
Defender Endpoint	https://learn.microsoft.com/en-us/defender-endpoint/whats-new-in-microsoft-defender-endpoint
Defender Endpoint Releases	https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-endpoint-releases
Defender Identity	https://learn.microsoft.com/en-us/defender-for-identity/whats-new
Microsoft Sentinel	https://learn.microsoft.com/en-us/azure/sentinel/whats-new
Microsoft Entra ID	https://learn.microsoft.com/en-us/entra/fundamentals/whats-new
Microsoft Entra ID (monthly blog)	https://techcommunity.microsoft.com/category/microsoft-entra/blog/microsoft-entra-blog
Microsoft Intune	https://learn.microsoft.com/en-us/intune/whats-new/
Defender Cloud Apps	https://learn.microsoft.com/en-us/defender-cloud-apps/release-notes
Defender Office 365	https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new
Defender Cloud	https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes
AKS	https://github.com/Azure/AKS/releases
AKS security bulletins	https://learn.microsoft.com/en-us/azure/aks/security-bulletins/overview
Azure Container Apps	https://www.microsoft.com/releasecommunications/api/v2/azure?search=Azure%20Container%20Apps&$orderby=created%20desc&$top=100
Azure Container Instances	https://www.microsoft.com/releasecommunications/api/v2/azure?search=Azure%20Container%20Instances&$orderby=created%20desc&$top=100
Azure Functions	https://www.microsoft.com/releasecommunications/api/v2/azure?search=Azure%20Functions&$orderby=created%20desc&$top=100
Azure Logic Apps	https://www.microsoft.com/releasecommunications/api/v2/azure?search=Logic%20Apps&$orderby=created%20desc&$top=100
Azure API Management	https://www.microsoft.com/releasecommunications/api/v2/azure?search=API%20Management&$orderby=created%20desc&$top=100
Azure Monitor	https://learn.microsoft.com/en-us/azure/azure-monitor/fundamentals/whats-new
Defender Container Sensor	https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-sensor-change-log
Security Copilot	https://learn.microsoft.com/en-us/copilot/security/whats-new-copilot-security
Defender Exposure Management	https://learn.microsoft.com/en-us/security-exposure-management/whats-new
MDVM Fixed Inaccuracies	https://learn.microsoft.com/en-us/defender-vulnerability-management/fixed-reported-inaccuracies
Microsoft Purview	https://learn.microsoft.com/en-us/purview/whats-new
Microsoft Foundry	https://www.microsoft.com/releasecommunications/api/v2/azure?search=Azure%20Foundry&$orderby=created%20desc&$top=100 and https://www.microsoft.com/releasecommunications/api/v2/azure?search=Microsoft%20Foundry&$orderby=created%20desc&$top=100
Microsoft Copilot Studio	https://learn.microsoft.com/en-us/microsoft-copilot-studio/whats-new
Microsoft Copilot Studio (Copilot blog)	https://www.microsoft.com/en-us/copilot/blog/copilot-studio/search/?ep_filter_content-type=feature-releases,monthly-updates&s=
Microsoft Fabric	https://learn.microsoft.com/en-us/fabric/fundamentals/whats-new
GitHub Security	https://github.blog/changelog/
Microsoft Defender Cloud - Recommendations & Alerts	https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes-recommendations-alerts

Release-specific references: AKS https://github.com/Azure/AKS/releases/tag/2026-09-25 and https://github.com/Azure/AKS/releases/tag/2026-09-04; Azure Container Apps Sandboxes https://azure.microsoft.com/updates?id=561262, Express https://azure.microsoft.com/updates?id=559242, Functions on ACA V1 retirement https://azure.microsoft.com/updates?id=570800; Azure Functions PowerShell 7.6 https://azure.microsoft.com/updates?id=572219, Flex Consumption TLS https://azure.microsoft.com/updates?id=570940, .NET retirement https://azure.microsoft.com/updates?id=572838, PowerShell 7.4 retirement https://azure.microsoft.com/updates?id=572770, Node.js 22 retirement https://azure.microsoft.com/updates?id=572771.