https://securitynews.ms/products/microsoft-defender-for-office-365/Microsoft Defender for Office 365 news and documented product changes, each linked to Microsoft's own source.enFri, 06 Nov 2026 13:48:48 +0000https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/enhancements-to-the-protection-and-posture-insights-report/ba-p/4568163https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/enhancements-to-the-protection-and-posture-insights-report/ba-p/4568163Fri, 06 Nov 2026 13:48:48 +0000Microsoft Defender for Office 365 BlogEarlier this year, we introduced the Protection & Posture Insights report: an on-demand, tenant-specific view of the email & collaboration threats targeting your organization, how well Microsoft Defender is stopping them, and where your configuration can be strengthened. Today, we're announcing the…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#october-2026--new-approverupn-field-in-the-emailpostdeliveryevents-tablehttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#october-2026--new-approverupn-field-in-the-emailpostdeliveryevents-tableThu, 01 Oct 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnNew ApproverUpn field in the EmailPostDeliveryEvents table : The EmailPostDeliveryEvents table in Microsoft Defender XDR Advanced Hunting now includes the ApproverUpn field. This field identifies the user or administrator who approved a remediation action, helping security teams investigate and audit…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#october-2026--hunt-across-activities-in-microsoft-teams-calls-and-meetingshttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#october-2026--hunt-across-activities-in-microsoft-teams-calls-and-meetingsThu, 01 Oct 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnHunt across activities in Microsoft Teams calls and meetings : The CallActivityEvents table in Microsoft Defender XDR advanced hunting contains details about activities performed during Microsoft Teams calls and meetings in your organization, helping security teams investigate suspicious call activity.https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#october-2026--expanding-user-reporting-in-teams-to-include-meetingshttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#october-2026--expanding-user-reporting-in-teams-to-include-meetingsThu, 01 Oct 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnExpanding user reporting in Teams to include meetings : Users can report scheduled or Meet now Microsoft Teams meetings or individual meeting participants as a security concern during or after the meeting. Users can also report a meeting participant that…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#september-2026--separating-teams-user-reporting-settings-from-email-settingshttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#september-2026--separating-teams-user-reporting-settings-from-email-settingsTue, 01 Sep 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnSeparating Teams user reporting settings from email settings : Customers in Worldwide (WW) environments with Defender for Office 365 Plan 1, Defender for Office 365 Plan 2, Microsoft 365 E5, or Office 365 E5 can now manage Teams user reporting…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#september-2026--expanding-user-reporting-in-teams-to-include-group-callshttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#september-2026--expanding-user-reporting-in-teams-to-include-group-callsTue, 01 Sep 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnExpanding user reporting in Teams to include group calls : Users can report completed or missed group Microsoft Teams calls from the call history as malicious (scam) or nonmalicious (non-scam). Depending on user reported settings , reported calls are sent…https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/defending-the-inbox-against-prompt-injection-attacks/ba-p/4534636https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/defending-the-inbox-against-prompt-injection-attacks/ba-p/4534636Wed, 22 Jul 2026 18:50:10 +0000Microsoft Defender for Office 365 BlogAI assistants are quickly becoming part of everyday work—summarizing emails, drafting responses, triaging requests, and even potentially acting across connected business systems. As email becomes an automated input to AI systems, it can also become a new attack surface. Attackers no longer…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#july-2026--unified-rbac-is-the-default-permission-model-for-new-defendehttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#july-2026--unified-rbac-is-the-default-permission-model-for-new-defendeWed, 01 Jul 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnUnified RBAC is the default permission model for new Defender for Office 365 Plan 2 organizations : Starting July 2026, new Microsoft Defender for Office 365 Plan 2 organizations use the Microsoft Defender unified role-based access control (Unified RBAC) model…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#july-2026--prompt-injection-protectionhttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#july-2026--prompt-injection-protectionWed, 01 Jul 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnPrompt injection protection : Microsoft Defender for Office 365 now detects prompt injection attacks hidden in inbound email. For more information, see Prompt injection protection in Microsoft Defender for Office 365 .https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#july-2026--microsoft-defender-for-office-365-plan-1-included-in-microsohttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#july-2026--microsoft-defender-for-office-365-plan-1-included-in-microsoWed, 01 Jul 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnMicrosoft Defender for Office 365 Plan 1 included in Microsoft 365 E3 : Microsoft 365 E3 now includes Microsoft Defender for Office 365 Plan 1. For more information about what's included in each plan, see Microsoft Defender for Office 365…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#july-2026--localized-default-mark-as-and-notify-email-templateshttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#july-2026--localized-default-mark-as-and-notify-email-templatesWed, 01 Jul 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnLocalized default Mark as and notify email templates : When automatic notifications use the default template, users receive notification emails in their preferred language based on their Outlook language settings. Custom notification templates configured by admins aren't affected. For more…https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/microsoft-defender-for-office-365-plan-1-is-now-rolling-out-to/ba-p/4527287https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/microsoft-defender-for-office-365-plan-1-is-now-rolling-out-to/ba-p/4527287Thu, 18 Jun 2026 16:29:24 +0000Microsoft Defender XDR BlogStarting today, Microsoft Defender for Office 365 Plan 1 is rolling out to customers with Microsoft 365 E3/G3 and Office 365 E3/G3 licenses, with rollout expected to complete by Fall 2026. For security teams, this means added protection against phishing, malware, and…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#april-2026--security-copilot-email-summary-on-the-email-entity-pagehttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#april-2026--security-copilot-email-summary-on-the-email-entity-pageWed, 01 Apr 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnSecurity Copilot email summary on the Email entity page : If you have a Microsoft Security Copilot subscription, you can generate an AI summary of email entity data directly from the Email entity page by selecting the Copilot action.https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#april-2026--remove-users-from-teams-chats-is-generally-availablehttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#april-2026--remove-users-from-teams-chats-is-generally-availableWed, 01 Apr 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnRemove users from Teams chats is generally available : The ability to remove internal users from Teams chats in the Teams message entity panel is now generally available.https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#april-2026--promotions-folder-for-bulk-email-previewhttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#april-2026--promotions-folder-for-bulk-email-previewWed, 01 Apr 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnPromotions folder for bulk email (preview) : You can configure anti-spam policies to deliver bulk mail below the BCL threshold to the Promotions folder in supported versions of Outlook. For more information, see Deliver bulk mail below the BCL threshold…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#april-2026--new-rbac-permission-for-email-content-associated-with-alertshttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#april-2026--new-rbac-permission-for-email-content-associated-with-alertsWed, 01 Apr 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnNew RBAC permission for email content associated with alerts : A new granular Unified RBAC permission Email & collaboration content: Emails associated with alerts (read) allows analysts to preview or download email messages associated with specific security alerts. For more…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#march-2026--expanding-user-reporting-in-teams-to-include-callshttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#march-2026--expanding-user-reporting-in-teams-to-include-callsSun, 01 Mar 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnExpanding User reporting in Teams to include Calls : Users can reported completed or missed one-to-one Microsoft Teams calls from the call history as malicious (scam) or non malicious (non-scam) to the specified reporting mailbox, or Microsoft and the reporting…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#march-2026--added-support-for-contextual-teams-messages-in-user-reportedhttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#march-2026--added-support-for-contextual-teams-messages-in-user-reportedSun, 01 Mar 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnAdded support for contextual Teams messages in User reported Teams Messages : When Users report Microsoft Teams messages from chats, channels (standard, shared, and private), and meeting conversations to Microsoft as malicious (security risk), up to fifteen messages before and…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#february-2026--expanding-user-reporting-in-teams-to-defender-for-office-365https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#february-2026--expanding-user-reporting-in-teams-to-defender-for-office-365Sun, 01 Feb 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnExpanding User reporting in Teams to Defender for Office 365 Plan 1 : Users can report external and intra-org Microsoft Teams messages from chats, standard, shared, and private channels, meeting conversations to Microsoft as malicious (security risk) the specified reporting…https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#january-2026--expanding-zap-and-teams-admin-quarantine-to-plan-1https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#january-2026--expanding-zap-and-teams-admin-quarantine-to-plan-1Thu, 01 Jan 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnExpanding ZAP and Teams Admin quarantine to Plan 1 : Zero-hour-auto-purge (ZAP) and admin management of quarantined Teams messages is available to Microsoft Defender for Plan 1 by default, bringing a post-delivery protection layer.https://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#january-2026--block-communication-from-sender-email-address-and-domains-inhttps://learn.microsoft.com/en-us/defender-office-365/defender-for-office-365-whats-new#january-2026--block-communication-from-sender-email-address-and-domains-inThu, 01 Jan 2026 00:00:00 +0000Defender for Office 365 · Microsoft LearnBlock communication from sender email address and domains in Teams : Admins can directly block malicious domains and email addresses from within the Microsoft Defender portal, seamlessly adding targeted entries to the Teams Admin Center (TAC) blocked domains and users…