Skip to content

What's new in Microsoft Security: June 2026

Every Microsoft Security update in June 2026: 120 documentation changes and 91 official posts across Sentinel, Defender, Entra, Intune, Purview and Security Copilot, with GA and preview releases, retirements and links to the sources.

← May 2026 July 2026 Patch Tuesday June 2026
120Documented changes
32Generally available
28In preview
91Official blog posts

Announcements

Official Microsoft blog and Tech Community posts, newest first

Retirements and deprecations

All retirements
EffectiveWhat's changingProductTypeSource
Jun 15, 2026passedCall to action: update older Microsoft Sentinel content as code (Sentinel repositories) API versions before June 15, 2026

Starting June 15, 2026 , older API versions used by Microsoft Sentinel repositories will no longer be supported.

Action may be required		SentinelRetirementMicrosoft Learn
Jan 6, 2027File policies retiring January 6, 2027

File policies retiring January 6, 2027.

Defender for Cloud AppsRetirementMicrosoft Learn
—not statedContainer-level misconfiguration recommendations for Kubernetes (Preview)

Cluster-level recommendations will be deprecated at GA.

Defender for CloudDeprecationMicrosoft Learn
—not statedNew Microsoft Edge settings in the Windows settings catalog

This policy is temporary and will be removed in a future release.

IntuneRetirementMicrosoft Learn
—not statedUse DDM to manage Apple Intelligence settings on devices running 26.4 and later

[Custom top bar elements on Managed Home Screen] With the release of 26.4, Apple deprecated several intelligence-related settings in the MDM restrictions payload.

IntuneDeprecationMicrosoft Learn

Microsoft Sentinel

2 changes · product page
  1. Preview

    Reason over Microsoft Sentinel graphs with graph tool (Preview)

    The graph tool collection in the Microsoft Sentinel Model Context Protocol (MCP) server provides visual graph-based exploration of relationships across identities, devices, threats, and signals to assess coverage, dependencies, and configuration gaps. For more information, see Explore Microsoft Sentinel graphs…

    DocsData Exploration Tool Collection in Microsoft Sentinel MCP Server

    Data Exploration Tool Collection in Microsoft Sentinel MCP Server Learn how to search tables, run KQL queries, analyze entities, and explore graphs by using the data exploration tools in the Microsoft Sentinel MCP server.

    Listed under June 2026 on Microsoft Learn
  2. Preview

    Link behavior results to incidents in advanced hunting (Preview)

    You can now link behavior-based query results from the BehaviorInfo table to new or existing incidents in advanced hunting. This feature lets you enrich incident context with behavior records from Microsoft Sentinel UEBA. The wizard automatically populates alert metadata and…

    DocsLink query results to an incident

    Link query results to an incident Use the link to incident feature in Microsoft Defender XDR to attach advanced hunting query results to a new or existing incident for richer investigation context.

    Listed under June 2026 on Microsoft Learn

Posts this month: What’s new in Microsoft Sentinel: June 2026 · The AI-first SOC: Copilot, UEBA, threat intelligence, and SOC optimization · Your readiness playbook: adoption helper, costs, APIs, and the checklist · Understand your Sentinel tables at a glance: Monitor with table insights · The governance shift: RBAC, URBAC, data lake, and MSSP · A guide to innovating threat hunting with Microsoft Sentinel custom graph

Microsoft Defender XDR

7 changes · product page
  1. GA

    (Preview) The AgentsInfo table in advanced hunting is now available in preview. The AIAgentsInfo table is tran

    (Preview) The AgentsInfo table in advanced hunting is now available in preview. The AIAgentsInfo table is transitioning to this new table, which provides a unified schema that supports agent inventory and governance for all agent types, including Copilot Studio, Microsoft…

    DocsAgentsInfo table in the advanced hunting schemaUpdatedNaming changes in the Microsoft Defender XDR advanced hunting schemaUpdated

    AgentsInfo table in the advanced hunting schema Learn about agent information in the AgentsInfo table of the advanced hunting schema

    Listed under June 2026 on Microsoft Learn
  2. GA

    (GA) The following advanced hunting schema tables are now generally available: The DisruptionAndResponseEvents

    (GA) The following advanced hunting schema tables are now generally available: The DisruptionAndResponseEvents table contains information about automatic attack disruption events in Microsoft Defender XDR. The CloudAuditEvents table contains information about cloud audit events for various cloud platforms protected by…

    DocsCloudDnsEvents table in the advanced hunting schemaUpdatedDisruptionAndResponseEvents table in the advanced hunting schemaCloudAuditEvents table in the advanced hunting schemaCloudProcessEvents table in the advanced hunting schema

    CloudDnsEvents table in the advanced hunting schema Learn about the CloudDnsEvents table in the advanced hunting schema, which contains information about DNS activity events from cloud infrastructure environments.

    Listed under June 2026 on Microsoft Learn
  3. New feature

    Email & collaboration content: Emails associated with alerts (read)

    The Phishing Triage Agent and Security Alert Triage Agent now use the more limited Email & collaboration content: Emails associated with alerts (read) permission instead of the broader Email & Collaboration content: All Emails (read) permission. This least-privilege permission restricts…

    DocsMicrosoft Security Copilot Phishing Triage Agent in Microsoft DefenderMicrosoft Security Copilot Security Alert Triage Agent in Microsoft …

    Microsoft Security Copilot Phishing Triage Agent in Microsoft Defender Learn how the Security Copilot Phishing Triage Agent in Microsoft Defender uses AI to triage and classify user-reported phishing emails, set up the agent, provide feedback, and monitor its performance.

    Listed under June 2026 on Microsoft Learn
  4. Preview

    Entity enrichments with threat intelligence

    (Preview) Entity enrichments with threat intelligence : Entity pages for IP addresses, domains, URLs, and files now include a Threat Intelligence Insights tab that surfaces enrichment data from Microsoft Threat Intelligence directly in the investigation workflow. Enrichments include reputation scores…

    DocsView threat intelligence in entity pages in Microsoft Defender

    View threat intelligence in entity pages in Microsoft Defender Learn how to view threat intelligence from Microsoft Threat Intelligence on IP, domain, URL, and file entity pages in the Microsoft Defender portal.

    Listed under June 2026 on Microsoft Learn
  5. Preview

    Coverage and maturity

    (Preview) On the Coverage and maturity page, the Review and improve coverage side panel for SaaS Identities now includes an Observed column and a Show Only Observed Applications toggle. By default, the panel shows only SaaS applications detected in your…

    DocsView your identity coverage and maturityNew

    View your identity coverage and maturity Learn how to use the Coverage and maturity page in Microsoft Defender to check your identity protection status and close coverage gaps in your environments.

    Listed under June 2026 on Microsoft Learn
  6. Preview

    (Preview) Local AI agent runtime protection on Windows endpoints: as part of the Defender AI agents experience

    (Preview) Local AI agent runtime protection on Windows endpoints: as part of the Defender AI agents experience , runtime protection for supported local AI agents on Windows endpoints is now available in public preview. Microsoft Defender inspects the agent loop…

    DocsSet up AI agent runtime protection with Microsoft Defender for …NewProtect AI assets from emerging threats and vulnerabilities using …

    Set up AI agent runtime protection with Microsoft Defender for Endpoint (Preview) Learn how to configure Microsoft Defender for Endpoint AI agent runtime protection to detect, audit, and block prompt injection on Windows devices.

    Listed under June 2026 on Microsoft Learn
  7. Preview

    (Preview) Local AI agent discovery on Windows endpoints: as part of the Defender AI agents experience , Micros

    (Preview) Local AI agent discovery on Windows endpoints: as part of the Defender AI agents experience , Microsoft Defender now automatically discovers supported local AI agents running on onboarded Windows devices - including coding agents and IDE extensions, desktop AI…

    DocsDiscover local AI agents with Microsoft Defender for EndpointNewProtect AI assets from emerging threats and vulnerabilities using …

    Discover local AI agents with Microsoft Defender for Endpoint Learn how to discover, view, and investigate local AI agents on Windows and macOS devices by using Microsoft Defender.

    Listed under June 2026 on Microsoft Learn

Posts this month: The next frontier in endpoint security: Securing local AI agents with Microsoft Defender · Securing the invisible workforce

Microsoft Security Exposure Management

6 changes · product page
  1. GA

    New Microsoft Secure Score recommendation

    New Microsoft Secure Score recommendation. Microsoft Secure Score now includes the Reduce unnecessary inbound internet exposure on internet-facing devices recommendation, which helps identify devices that are accessible from the public internet and may represent unnecessary attack surface. Internet-facing devices are…

    Listed under June 2026 on Microsoft Learn
  2. GA

    Enhanced exposure score in Defender Vulnerability Management

    Enhanced exposure score in Defender Vulnerability Management. The new exposure score model in Defender Vulnerability Management is now generally available. This model improves risk prioritization and recommendation impact accuracy by incorporating exploit prediction data (EPSS) and asset context factors such…

    DocsExposure score in Defender Vulnerability ManagementSecurity recommendations

    Exposure score in Defender Vulnerability Management Learn how the Microsoft Defender Vulnerability Management exposure score measures your organization's vulnerability to cybersecurity threats and how to reduce it.

    Listed under June 2026 on Microsoft Learn
  3. New feature

    New predefined classifications for AI agents

    The following predefined AI agent classification rules were added to the critical assets list: Classification Description Executive-Sponsored AI Agent This rule applies to AI agents that are created or owned by senior executives in the organization. As such, these agents…

    DocsPredefined classifications in Microsoft Security Exposure ManagementUpdated

    Predefined classifications in Microsoft Security Exposure Management Lists of all the current predefined classifications in Microsoft Security Exposure Management.

    Listed under June 2026 on Microsoft Learn
  4. New feature

    New predefined classifications

    The following predefined SaaS application classification rules were added to the critical assets list. These classifications require onboarding to Microsoft Defender for Cloud Apps. Classification Description Microsoft Entra ID Core identity and access control plane for the tenant. Compromise can…

    DocsPredefined classifications in Microsoft Security Exposure ManagementUpdated

    Predefined classifications in Microsoft Security Exposure Management Lists of all the current predefined classifications in Microsoft Security Exposure Management.

    Listed under June 2026 on Microsoft Learn
  5. New feature

    New predefined classifications

    The following predefined Identity classification rules were added to the critical assets list: Classification Description Widespread Local Admin on Servers This rule applies to identities that are configured as local administrators on a high number of servers in the environment…

    DocsPredefined classifications in Microsoft Security Exposure ManagementUpdated

    Predefined classifications in Microsoft Security Exposure Management Lists of all the current predefined classifications in Microsoft Security Exposure Management.

    Listed under June 2026 on Microsoft Learn
  6. Preview

    Overview dashboard (preview)

    The updated Microsoft Security Exposure Management overview dashboard is now in preview. The dashboard consolidates signals from cloud resources and devices into a single, action-oriented view of exposure risk, organized around two core actions: Resolve Now and Monitor Exposure …

    DocsStart using Microsoft Security Exposure ManagementUpdated

    Start using Microsoft Security Exposure Management Learn how to start using the Microsoft Security Exposure Management dashboard to resolve prioritized exposure risks and monitor internet-facing assets.

    Listed under June 2026 on Microsoft Learn

Microsoft Defender for Endpoint

16 changes · product page
  1. GA

    macOS release: Build 101.26042.0020

    macOS release: Build 101.26042.0020. Release version 20.126042.20.0 released: See enhancements and features for this release .

    DocsMicrosoft Defender for Endpoint release notesNew

    Microsoft Defender for Endpoint release notes Find release details for Microsoft Defender for Endpoint on Windows, macOS, Linux, Android, and iOS from the past six months.

    Listed under June 2026 on Microsoft Learn
  2. GA

    Windows release: Windows Defender Antivirus: Platform 4.18.26050.15 / Engine 1.1.26050.11

    Windows release: Windows Defender Antivirus: Platform 4.18.26050.15 / Engine 1.1.26050.11. See enhancements and features for this release .

    DocsMicrosoft Defender for Endpoint release notesNew

    Microsoft Defender for Endpoint release notes Find release details for Microsoft Defender for Endpoint on Windows, macOS, Linux, Android, and iOS from the past six months.

    Listed under June 2026 on Microsoft Learn
  3. GA

    Selective Response Actions

    Selective Response Actions. Selective Response Actions enables organizations to tailor high-impact security operations on devices during onboarding. It provides precise control over how response actions are applied on Tier-0 systems and other high-value assets, helping maintain operational stability while delivering…

    DocsSelective response actions on critical assets in Microsoft Defender …

    Selective response actions on critical assets in Microsoft Defender for Endpoint Learn how to onboard Tier-0 and high-value assets with restricted security operations in Microsoft Defender for Endpoint to reduce operational risk.

    Listed under June 2026 on Microsoft Learn
  4. GA

    Linux release: Build 101.26042.0009

    Linux release: Build 101.26042.0009. Release version 30.126042.0009.0 - see considerations and updates for this release .

    DocsMicrosoft Defender for Endpoint release notesNew

    Microsoft Defender for Endpoint release notes Find release details for Microsoft Defender for Endpoint on Windows, macOS, Linux, Android, and iOS from the past six months.

    Listed under June 2026 on Microsoft Learn
  5. GA

    Enhanced Defender deployment tool for Windows

    Enhanced Defender deployment tool for Windows. The new version of the tool streamlines onboarding and enhances security by: - Bundling the onboarding package directly into the tool's executable. - Generating a key during deployment package creation that is required for…

    DocsUse the Microsoft Defender deployment tool for WindowsNew

    Use the Microsoft Defender deployment tool for Windows Learn how to use the Microsoft Defender deployment tool to onboard, update, stage, and offboard supported Windows devices.

    Listed under June 2026 on Microsoft Learn
  6. GA

    Android release: Build 1.0.9029.0101

    Android release: Build 1.0.9029.0101. Release version 1.0.9029.0101 released: See enhancements and features for this release .

    DocsMicrosoft Defender for Endpoint release notesNew

    Microsoft Defender for Endpoint release notes Find release details for Microsoft Defender for Endpoint on Windows, macOS, Linux, Android, and iOS from the past six months.

    Listed under June 2026 on Microsoft Learn
  7. Preview

    Local AI agent runtime protection

    Local AI agent runtime protection. Runtime protection for supported local AI agents on Windows endpoints is now available in public preview. Microsoft Defender inspects the agent loop (user prompts, tool calls, and tool responses) and can block risky activity before…

    DocsSet up AI agent runtime protection with Microsoft Defender for …New

    Set up AI agent runtime protection with Microsoft Defender for Endpoint (Preview) Learn how to configure Microsoft Defender for Endpoint AI agent runtime protection to detect, audit, and block prompt injection on Windows devices.

    Listed under June 2026 on Microsoft Learn
  8. Preview

    Local AI agent discovery — macOS support and new agents

    Local AI agent discovery — macOS support and new agents. Local AI agent discovery now supports macOS endpoints in addition to Windows. This update also adds discovery support for new agents including Junie CLI, Kiro CLI, Warp, Hermes Agent, Goose…

    DocsLocal AI agent discovery with Microsoft Defender for EndpointNew

    Local AI agent discovery with Microsoft Defender for Endpoint Learn how Microsoft Defender discovers local AI agents and MCP servers configured on your devices through inventory and investigation capabilities.

    Listed under June 2026 on Microsoft Learn
  9. Preview

    Local AI agent discovery

    Local AI agent discovery. Microsoft Defender for Endpoint now automatically discovers supported local AI agents running on onboarded Windows devices — including coding agents and IDE extensions, desktop AI assistants, local AI runtimes, and agent platforms. Discovered agents appear as…

    DocsDiscover AI agents and assess security posture using Microsoft …NewDiscover local AI agents with Microsoft Defender for EndpointNew

    Discover AI agents and assess security posture using Microsoft Defender Learn how to discover AI agents, review their risk and security posture, and access recommendations, incidents, alerts, and Advanced Hunting in Microsoft Defender.

    Listed under June 2026 on Microsoft Learn
  10. Release

    iOS · June 2026 · Platform Version: 1.1.78020101

    Release details Platform version Release Date 1.1.78020101 June 11, 2026 Enhancements and features Feature Area Update Summary Improvements Performance improvements and general bug fixes.

    Listed under June 2026 on Microsoft Learn
  11. Release

    iOS · June 2026 · Platform Version: 1.1.77280101

    Release details Platform version Release Date 1.1.77280101 June 1, 2026 Enhancements and features Feature Area Update Summary Feature Enhancements The Trust this network option is now only applicable to unsecure networks. Suspicious/rogue networks can't be trusted by users. Improvements Performance…

    Listed under June 2026 on Microsoft Learn
  12. Release

    Windows Antivirus · June 2026 · Platform 4.18.26060.3008 · Engine 1.1.26060.3008

    Release details Component Version Date Platform 4.18.26060.3008 June 30, 2026 Engine 1.1.26060.3008 June 30, 2026 Security intelligence 1 1.455.25.0 June 30, 2026 Support phase Security and Critical Updates - 1 The security intelligence version listed here is relevant to the…

    DocsSecurity intelligence updates for Microsoft Defender Antivirus and …

    Listed under June 2026 on Microsoft Learn
  13. Release

    Linux · June 2026 · 101.26042.0011

    Release details Release version Engine version Signature version 30.126042.0011.0 1.1.26040.3001 1.449.136.0 Enhancements and features Feature area Update summary Resolved build issue This release contains a fix for a previously reported issue where Microsoft Defender for Endpoint on Linux could become…

    DocsConfigure offline security intelligence updates for Microsoft Defender …UpdatedDeviceFileEvents table in the advanced hunting schemaDeviceProcessEvents table in the advanced hunting schemaDeviceNetworkEvents table in the advanced hunting schema

    Configure offline security intelligence updates for Microsoft Defender for Endpoint on Linux Configure offline security intelligence updates for Microsoft Defender for Endpoint on Linux devices with limited or no internet connectivity.

    Listed under June 2026 on Microsoft Learn
  14. Release

    Android · June 2026 · Platform: 1.0.9029.0101

    Release details Platform version Release Date 1.0.9029.0101 June 30, 2026 Enhancements and features Feature Area Update Summary General Performance improvements and general bug fixes.

    Listed under June 2026 on Microsoft Learn
  15. Release

    Android · June 2026 · Platform: 1.0.9014.0101

    Release details Platform version Release Date 1.0.9014.0101 June 19, 2026 Enhancements and features Feature Area Update Summary General Performance improvements and general bug fixes.

    Listed under June 2026 on Microsoft Learn
  16. Release

    Android · June 2026 · Platform: 1.0.9003.0101

    Release details Platform version Release Date 1.0.9003.0101 June 8, 2026 Enhancements and features Feature Area Update Summary Feature Enhancements The Trust this network option is now only applicable to unsecure networks. Suspicious/rogue networks can't be trusted by users. Fixes The…

    Listed under June 2026 on Microsoft Learn

Posts this month: Reduce unnecessary internet exposure with Microsoft Defender · Microsoft Defender now monitors RPC activity · Elevate your telemetry using custom data collection in Microsoft Defender · How Microsoft Defender used predictive shielding to proactively disrupt a ransomware attack

Microsoft Defender for Identity

5 changes · product page
  1. GA

    Identity risk score is now generally available

    The identity risk score is now generally available. The score ranges from 0 to 100 and reflects how likely an identity is to be compromised and how much damage a compromise could cause, based on the identity's criticality level and…

    DocsInvestigate IdentitiesUpdated

    Investigate Identities Learn how to use the Identity page in Microsoft Defender. Investigate user identities, review alerts, analyze activity timelines, and assess security risks across linked accounts.

    Listed under June 2026 on Microsoft Learn
  2. New feature

    New Defender for Identity security alerts

    These new alerts were added to the Defender for Identity security alerts: New alerts related to Entra ID : Anomalous activity following Global Administrator elevation Reciprocal Temporary Access Pass creation between users Suspicious service principal sign-in following credential addition Suspicious…

    DocsMicrosoft Defender for Identity XDR security alertsUpdated

    Microsoft Defender for Identity XDR security alerts Learn about security alerts issued by Defender for Identity in the extended detection and response (XDR) format.

    Listed under June 2026 on Microsoft Learn
  3. Preview

    Identity Security dashboard

    (Preview) The Identity Security dashboard now includes a new Human identities card that shows your human identities by source (Entra ID, SaaS, and on-premises), giving you a single view of where your human identities live. For more information, see Identity…

    DocsIdentity Security dashboard in Microsoft Defender for Identity …

    Identity Security dashboard in Microsoft Defender for Identity (Preview) Learn how to work with the Identity Security dashboard in Microsoft Defender for Identity to monitor identity-related security risks.

    Listed under June 2026 on Microsoft Learn
  4. Preview

    Visibility into service principals used by AI agents (Preview)

    The non-human identity inventory now identifies which Entra ID service principals are used by AI agents. A new "Used by AI agents" column and insight card help you find and prioritize these identities. For more information, see View the Identity…

    DocsView the Identity inventoryUpdated

    View the Identity inventory View and manage all identities across your organization from the Identity inventory page in Microsoft Defender. Investigate identity types, domains, and attributes.

    Listed under June 2026 on Microsoft Learn
  5. Preview

    NHI inventory enhancements (Preview)

    Expanded Entra ID inventory : The non-human identity inventory now includes all Microsoft Entra service principals, not just those with API permissions. For more information, see View the Identity inventory . Microsoft Entra roles visibility : The Permissions tab now…

    DocsView your OAuth app details with app governanceNewView the Identity inventoryUpdated

    View your OAuth app details with app governance Learn how to view OAuth app risk, permissions, usage, and connected AI agents with app governance in Microsoft Defender.

    Listed under June 2026 on Microsoft Learn

Microsoft Entra

11 changes · product page
  1. GA

    Generally available - Jailbreak/Root Detection in Authenticator App

    Type: New feature Service category: Microsoft Authenticator App Product capability: Identity Security & Protection Microsoft Authenticator introduced jailbreak/root detection for Microsoft work or school accounts in the Authenticator app. Users with rooted/jailbroken devices will be blocked from adding/using work or…

    Listed under June 2026 on Microsoft Learn Action may be required
  2. GA

    General availability - Microsoft Entra Kerberos key rotation improved reliability for incoming trust referral flows

    Type: Changed feature Service category: Authentications (Logins) Product capability: User Authentication General availability of Microsoft Entra Kerberos key rotation improved reliability particularly for environments using incoming trust referral flows. Previously, authentication failures could occur during Kerberos key rotation if referral…

    DocsConfigure Microsoft Entra Kerberos trustNew

    Configure Microsoft Entra Kerberos trust Learn how to configure and manage Microsoft Entra Kerberos trust between Microsoft Entra ID and Active Directory Domain Services.

    Listed under June 2026 on Microsoft Learn
  3. GA

    General Availability - SCIM 2.0 APIs for Microsoft Entra ID in US Gov cloud

    Type: New feature Service category: Provisioning Product capability: Identity Lifecycle Management SCIM 2.0 APIs are now generally available in the US Gov cloud, giving customers, developers, and partners a standards-based option for managing users and groups in Microsoft Entra using…

    DocsEnable the SCIM Provisioning API in Microsoft Entra ID

    Enable the SCIM Provisioning API in Microsoft Entra ID Learn how to enable the SCIM Provisioning API feature in the Microsoft Entra admin center and link an Azure subscription for billing.

    Listed under June 2026 on Microsoft Learn
  4. GA

    General Availability - Microsoft Entra Backup and Recovery is now available

    Type: New feature Service category: Entra Backup and Recovery Product capability: Entra Backup and Recovery Microsoft Entra Backup and Recovery is a built-in solution to help restore your tenant after accidental changes or malicious updates. Always on by default, it…

    DocsMicrosoft Entra Backup and Recovery overviewUpdated

    Microsoft Entra Backup and Recovery overview Learn how Microsoft Entra Backup and Recovery helps you recover from malicious attacks or accidental changes to tenant objects

    Listed under June 2026 on Microsoft Learn Roadmap 567885Related post
  5. GA

    General Availability - External users can be directly assigned to Access Packages

    Type: New feature Service category: Entitlement Management Product capability: Identity Governance This feature allows Entitlement Management admins to directly assign external users who are not in the directory to an access package using the user's email. Users are invited into…

    Listed under June 2026 on Microsoft Learn
  6. GA

    General Availability - Domainless SAML IdP federation for workforce tenants

    Type: New feature Service category: B2B Product capability: B2B/B2C Domainless SAML federation with a SAML Identity Provider allows external users to authenticate into your apps or workforce resources using their IdP-managed credentials, regardless of their email domain. Domainless federation removes…

    DocsAdd a SAML/WS-Fed identity providerNew

    Add a SAML/WS-Fed identity provider Set up direct federation with SAML 2.0 or WS-Fed identity providers so users can sign in with work accounts. Understand attributes and claims for federation.

    Listed under June 2026 on Microsoft Learn
  7. GA

    General Availability - BYOD support for Windows client using Entra registration

    Type: New feature Service category: BYOD Product capability: Network Access We are excited to announce Bring Your Own Device (BYOD) support for Windows client using Entra-registered devices is now generally available. You can now enable users and partners to access…

    DocsLearn about bring your own device (BYOD) with the Global Secure Access …

    Learn about bring your own device (BYOD) with the Global Secure Access clients for Microsoft Entra Private Access and Microsoft Entra Internet Access - Global Secure Access Learn about bring your own device (BYOD) with the Global Secure Access clients for Microsoft Entra Private Access and Microsoft Entra Internet Access.

    Listed under June 2026 on Microsoft Learn
  8. New feature

    Upcoming change - Improved restore experience for device-bound Authenticator app passkeys on iOS

    Type: Plan for change Service category: Microsoft Authenticator App Product capability: Identity Security & Protection No action is required. What is changing? Starting August 2026, users will see an improved restore experience for device-bound Authenticator app passkeys for iOS users…

    Docsback-up-account-credentials-in-microsoft-authenticator-bb939936-7a8d-4 …

    Listed under June 2026 on Microsoft Learn Action may be required
  9. Preview

    Public Preview - Prevent unauthorized changes to AD groups with AD group enforcement

    Type: New feature Service category: Provisioning Product capability: Entra Cloud Sync For customers leveraging group provisioning to AD, this capability ensures that changes to AD groups remain consistent with those managed in Microsoft Entra. With this preview, you can designate…

    DocsAD group enforcement documentation

    Listed under June 2026 on Microsoft Learn
  10. Preview

    Public Preview - New built-in Entra role for SOC identity response in Microsoft Defender

    Type: New feature Service category: RBAC Product capability: Identity Security & Protection Starting June 8 we're introducing a new built-in role in Microsoft Entra— SOC Identity Responder —to further improve how security teams execute identity containment actions initiated from Microsoft…

    Listed under June 2026 on Microsoft Learn
  11. Preview

    Public Preview - Extended Conditional Access protections for Agent's user accounts

    Type: New feature Service category: Conditional Access Product capability: Identity Security & Protection Conditional Access now provides broader controls to secure AI agents that have a user account. Administrators can: Target agent's user accounts with greater precision by including or…

    DocsTarget agents in Microsoft Entra Conditional Access policiesUpdated

    Target agents in Microsoft Entra Conditional Access policies Learn how to select and target agent identities in Microsoft Entra Conditional Access policies using the object picker, blueprints, and custom security attributes.

    Listed under June 2026 on Microsoft Learn

Posts this month: Bring business logic into PIM role activation workflows · Microsoft Entra Backup and Recovery is now generally available · Protect sensitive data in motion across SaaS and AI apps with Microsoft Purview and Microsoft Entra · Secure AI at scale: Join the Microsoft Entra + Purview webinar series · AI is accelerating cyberattacks—here’s how to stay ahead · Tools for Azure AD B2C migration now available

Microsoft Intune

35 changes · product page
  1. Deprecation

    Use DDM to manage Apple Intelligence settings on devices running 26.4 and later

    [Custom top bar elements on Managed Home Screen] With the release of 26.4, Apple deprecated several intelligence-related settings in the MDM restrictions payload. To manage these settings, use the DDM configurations released in March 2026 instead. In the settings catalog…

    DocsWhat's new in previous months in the Microsoft IntuneNewCreate a policy using settings catalog in Microsoft IntuneNewApple device restriction settings in Microsoft IntuneUpdated

    What's new in previous months in the Microsoft Intune Review older announcements from the Intune what's new page

    Listed under 8–14 Jun 2026 on Microsoft Learn
  2. GA

    Updated security baseline for Microsoft 365 Apps for Enterprise

    An updated security baseline for Microsoft 365 Apps for Enterprise is now available in Microsoft Intune. This baseline aligns with the most recent Microsoft 365 Apps security guidance and includes updated policy recommendations to help protect against evolving…

    DocsList of settings for the Microsoft 365 Apps for Enterprise security …Configure security baseline policies in Microsoft IntunePost Security Baseline for M365 Apps for enterprise v2512

    List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune View a list of the settings in the Microsoft Intune security baseline for Microsoft Office apps. This list includes the default values for settings as found in the default configuration of the baseline.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  3. GA

    Newly available protected app for Intune

    ChatGPT is now available as a protected app for Microsoft Intune. For more information about protected apps, see Microsoft Intune protected apps .

    DocsSupported Microsoft Intune AppsUpdated

    Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  4. GA

    Enrollment time grouping for new Apple ADE enrollment policies generally available

    Enrollment time grouping is now generally available for Apple automated device enrollment (ADE) on iOS/iPadOS and macOS. With enrollment time grouping, you can identify a device's Microsoft Entra security group during enrollment, so policies, apps, and settings can…

    DocsSet up enrollment time groupingPost New iOS/iPadOS, visionOS, tvOS and macOS ADE enrollment policies …

    Set up enrollment time grouping Overview and setup of the enrollment time grouping feature in Microsoft Intune.

    Listed under 15–21 Jun 2026 on Microsoft Learn
  5. GA

    Newly available protected apps for Intune

    The following protected apps are now available for Microsoft Intune: Caju AI by Caju AI eYACHO for Biz 7 Intune by MetaMoJi Corporation (iOS) eYACHO Viewer 7 Intune by MetaMoJi Corporation (iOS) Harvey AI by Harvey AI (Android)…

    DocsSupported Microsoft Intune AppsUpdated

    Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

    Listed under 8–14 Jun 2026 on Microsoft Learn
  6. New feature

    Support for WPA3-Personal in iOS/iPadOS Wi-Fi profiles

    Intune supports WPA3-Personal as a security-type option when configuring Wi-Fi device configuration profiles for iOS/iPadOS. Admins can now select WPA3-Personal alongside existing options such as WPA2-Personal. This feature: Allows managed iOS/iPadOS devices to connect to networks that require…

    DocsConfigure Wi-Fi Settings for Apple Devices in Intune

    Configure Wi-Fi Settings for Apple Devices in Intune Add or create a Wi-Fi configuration profile on iOS/iPadOS and macOS devices using Wi-Fi configuration settings in Microsoft Intune. Configure the connection details, authentication methods, SSIDs, security types, and proxy settings.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  7. New feature

    Remote Help support for RemoteApp in Azure Virtual Desktop

    Remote Help supports RemoteApp in Azure Virtual Desktop (AVD), enabling help desk agents to securely view and control apps running within RemoteApp sessions. For more information, see Launch Remote Help .

    DocsUsing Remote Help on Windows to Assist Authenticated Users

    Using Remote Help on Windows to Assist Authenticated Users Use the Remote Help app to provide remote assistance to authenticated users who also run the Remote Help app, and to troubleshoot for frontline workers (FLW).

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  8. New feature

    New supported OEMConfig apps for Android Enterprise

    The following OEMConfig apps are available in Intune for Android Enterprise: FCNT | com.fcnt.arrowsconfig FCNT | com.fcnt.arrowsconfig_test For more information about OEMConfig, see Use and manage Android Enterprise devices with OEMConfig in Microsoft Intune . Applies to: Android…

    DocsUse OEMConfig on Android Enterprise devices in Microsoft IntuneNew

    Use OEMConfig on Android Enterprise devices in Microsoft Intune Use Microsoft Intune to manage and use devices running Android Enterprise with OEMConfig. See all the steps, including an overview, see the prerequisites, create the configuration profile in Intune, and see a list of supported OEMConfig apps.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  9. New feature

    New setting added to the Windows security baseline version 25H2

    The Intune security baseline for Windows, version 25H2, is updated to include one new setting, Disable Internet Explorer 11 Launch Via COM Automation , with a baseline default of Enabled . This setting was excluded from the version…

    DocsDefault configuration of Intune's Windows security baselinesNew

    Default configuration of Intune's Windows security baselines Review the default settings in each Microsoft Intune Windows security baseline version and compare recommended configurations for managed devices.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  10. New feature

    New Microsoft Defender Antivirus settings for Linux Server devices

    The existing endpoint security Antivirus policy for the Microsoft Defender Antivirus profile on Linux Server now includes new settings you can configure and deploy to your managed Linux devices: Offline security intelligence update - Manage how Microsoft Defender…

    DocsLearn about using Intune to manage Microsoft Defender settings on …UpdatedConfigure security settings in Microsoft Defender for Endpoint on …UpdatedManage antivirus settings with endpoint security policies in Microsoft …

    Learn about using Intune to manage Microsoft Defender settings on devices that aren't enrolled with Intune Learn how to use Intune policy to manage Microsoft Defender security settings on devices that aren't enrolled with Microsoft Intune.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  11. New feature

    New Android Enterprise settings in the Intune settings catalog

    The settings catalog lists all the settings you can configure in a device policy, and all in one place. The following new Android Enterprise settings are available in the Microsoft Intune settings catalog ( Devices > Manage devices…

    DocsAndroid settings catalog in Microsoft Intune

    Android settings catalog in Microsoft Intune Review Android settings available in the Microsoft Intune settings catalog, including supported enrollment types, values, defaults, and requirements.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  12. New feature

    Microsoft Tunnel adds support for Red Hat Enterprise Linux 9.7

    Microsoft Tunnel Gateway now supports Red Hat Enterprise Linux (RHEL) 9.7 as a Linux server distribution. This support requires the use of Podman 5.8.2 as its default container engine. Customers upgrading from environments using Podman v3 containers should…

    DocsPrerequisites the Microsoft Tunnel VPN for Microsoft IntuneNew

    Prerequisites the Microsoft Tunnel VPN for Microsoft Intune Review the prerequisites for installation and use of the Microsoft Tunnel Gateway. These include Linux servers, network, and firewall configurations.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  13. New feature

    Intune support for Trustd Mobile as a mobile threat defense partner

    You can now use Trustd Mobile as a mobile threat defense partner (MTD) for enrolled devices that run the following platforms: Android 9.0 and later iOS/iPadOS 15.0 and later To learn more about this support, see Use Trustd…

    DocsTrustd Mobile Threat Defense with Microsoft Intune

    Trustd Mobile Threat Defense with Microsoft Intune Set up Trustd Mobile Threat Defense with Microsoft Intune to control mobile device access to your corporate resources.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  14. New feature

    Enterprise App Management support for GCC High and DoD

    Microsoft Intune now extends Enterprise App Management (EAM) to the GCC High (GCCH) and DoD cloud environments. Government organizations can use the EAM enterprise catalog to discover, deploy, and keep prepackaged Microsoft and third-party apps up to date…

    DocsMicrosoft Intune Enterprise Application ManagementNew

    Microsoft Intune Enterprise Application Management Learn about Enterprise App Management and the Enterprise App Catalog in Microsoft Intune.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  15. New feature

    Available macOS PKG apps update automatically when you upload a new version

    For available macOS PKG apps, updates now deploy to devices automatically when the same app policy was updated with a new app version, so users no longer need to select Install or Reinstall in Company Portal to get…

    DocsAdd an Unmanaged macOS PKG App to Microsoft IntuneUpdated

    Add an Unmanaged macOS PKG App to Microsoft Intune Learn about how to add an unmanaged macOS PKG app to Microsoft Intune.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  16. New feature

    Auto-update for Enterprise App Management applications

    Microsoft Intune now supports automatic updates for Enterprise App Management (EAM) applications. When you enable auto-update for an EAM app with a required assignment, Intune detects when a newer version is available in the EAM catalog and automatically…

    DocsMicrosoft Intune Enterprise Application ManagementNew

    Microsoft Intune Enterprise Application Management Learn about Enterprise App Management and the Enterprise App Catalog in Microsoft Intune.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
  17. New feature

    Advanced Intune capabilities are being added to Microsoft 365 E3 and E5

    Microsoft is adding several Intune Suite capabilities to Microsoft 365 E3 and Microsoft 365 E5 to enable more organizations to use advanced endpoint management and security without a separate add-on. The following capabilities are added to Microsoft Enterprise…

    DocsMicrosoft Intune Government Service overviewNewMicrosoft Intune advanced capabilitiesPost Microsoft 365 adds advanced Microsoft Intune solutions at scale

    Microsoft Intune Government Service overview Learn more about the Intune government service offerings and features. This article is designed to serve as an overview of the Microsoft Intune offering for government community cloud (GCC) High and United States Department of Defense (DoD) environments.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn Related post
  18. New feature

    Multi Admin Approval now enforces on API calls made by automation

    Multi Admin Approval (MAA) now applies to API calls made by automation through the Microsoft Graph API, not just interactive admin actions. If your tenant has MAA access policies configured and you use service principals, automation scripts, or…

    DocsUse Multi Admin Approval with the Microsoft Graph API

    Use Multi Admin Approval with the Microsoft Graph API Learn how to update your automation scripts and applications to work with Multi Admin Approval enforcement on app-authenticated API calls in Microsoft Intune.

    Listed under 22–28 Jun 2026 on Microsoft Learn
  19. New feature

    Microsoft Intune app for Android requires version 2025.11.01 or later

    The minimum supported version of the Microsoft Intune app for Android is now version 2025.11.01 . This change took effect on May 1, 2026. Users running an older version might experience sign-in failures. Most users have app updates…

    Listed under 22–28 Jun 2026 on Microsoft Learn
  20. New feature

    Microsoft Windows 11 STIG SCAP Benchmark audit baseline

    Intune now includes a STIG audit baseline that assesses Windows devices against the recommended configurations defined in the Security Technical Implementation Guides (STIGs) published by the Defense Information Systems Agency (DISA). The initial baseline audits against the Microsoft…

    DocsMicrosoft Intune Government Service overviewNewUse Security Technical Implementation Guide audit baselines to assess …NewAdvanced Analytics Overview

    Microsoft Intune Government Service overview Learn more about the Intune government service offerings and features. This article is designed to serve as an overview of the Microsoft Intune offering for government community cloud (GCC) High and United States Department of Defense (DoD) environments.

    Listed under 15–21 Jun 2026 on Microsoft Learn
  21. New feature

    Managed Win32 app content now requires HTTPS delivery

    Intune now requires HTTPS delivery for managed Win32 app content. This change primarily affects organizations that use Microsoft Connected Cache and haven't configured their cache nodes for HTTPS delivery. Clients that previously pulled content from Connected Cache can…

    DocsPost How to enable HTTPS support for Microsoft Connected Cache for …HTTPS Support for Microsoft Connected Cache OverviewConfigure HTTPS Support for WindowsConfigure HTTPS Support for Linux

    How to enable HTTPS support for Microsoft Connected Cache for Enterprise and Education By: Aditya Middha | Product Manager 2 - Microsoft Connected Cache Starting on June 16th, 2026, or soon after, Intune will enforce HTTPS content delivery...

    Listed under 15–21 Jun 2026 on Microsoft Learn
  22. New feature

    Android Enterprise personally owned devices with a work profile uses Android Management API (AMAPI)

    When users enroll their personally owned Android devices in Intune, a work profile is created with a separate partition on the device for the user's work account. These devices are referred to as personally owned devices with a…

    DocsPost New policy implementation and web enrollment for Android personally …UpdatedAndroid Management API for personally owned work profiles

    New policy implementation and web enrollment for Android personally owned work profile is now GA We’re happy to announce two improvements for the management of Android personally owned work profile devices with Microsoft Intune, which is now generally...

    Listed under 15–21 Jun 2026 on Microsoft Learn
  23. New feature

    Strict Tunnel Mode for Microsoft Tunnel on Android

    Microsoft Tunnel now supports Strict Tunnel Mode on Android Enterprise devices. When Strict Tunnel Mode is enabled, all network traffic is forced through the VPN tunnel. If the VPN connection is unavailable or drops, all network traffic on…

    DocsLearn about the Microsoft Tunnel VPN solution for Microsoft Intune

    Learn about the Microsoft Tunnel VPN solution for Microsoft Intune Learn about the Microsoft Tunnel Gateway, a VPN server for Intune that runs on Linux. With Microsoft Tunnel, cloud-based devices you manage with Intune can reach your on-premises infrastructure.

    Listed under 8–14 Jun 2026 on Microsoft Learn
  24. New feature

    Silence apps on Managed Home Screen to prevent session PIN bypass

    [Custom top bar elements on Managed Home Screen] For devices using Managed Home Screen (MHS), you can now silence apps whenever MHS prompts the user for authentication, such as during sign-in or at the session PIN screen. When silenced, apps…

    DocsConfigure the Microsoft Managed Home Screen AppNew

    Configure the Microsoft Managed Home Screen App Learn how to configure the Microsoft Managed Home Screen app.

    Listed under 8–14 Jun 2026 on Microsoft Learn
  25. New feature

    New Wired Networks device configuration profile for iOS/iPadOS

    [Custom top bar elements on Managed Home Screen] There's a new 802.1x Wired Networks device configuration profile for iOS/iPadOS devices. The feature supports 802.1x Ethernet access controls, which is ideal for M-series iPads that support native resolution screen extension. It…

    DocsConfigure 802.1x wired network settings for Apple and Windows devices …

    Configure 802.1x wired network settings for Apple and Windows devices in Microsoft Intune Create or add a wired network device configuration profile or policy using the IEEE 802.1X standard for macOS, iOS/iPadOS, Windows 10, and Windows 11 devices and computers. See the different settings, add certificates, choose an EAP type, and select an…

    Listed under 8–14 Jun 2026 on Microsoft Learn
  26. New feature

    New Microsoft Edge settings in the Windows settings catalog

    [Custom top bar elements on Managed Home Screen] There are new Microsoft Edge 148 settings in the Windows settings catalog. To see and configure these settings in Intune, create a Windows settings catalog profile ( Devices > Manage devices >…

    DocsMicrosoft Edge Browser Policy Documentation …NewMicrosoft Edge Browser Policy Documentation DeveloperToolsAvailabilityNewMicrosoft Edge Browser Policy Documentation CopilotPageContextUpdatedMicrosoft Edge Browser Policy Documentation SetNTPDefaultFeedTab

    Microsoft Edge Browser Policy Documentation DeveloperToolsAvailabilityBlocklist Windows and Mac documentation for supported Microsoft Edge Browser policy: List of URL patterns for which developer tools are blocked

    Listed under 8–14 Jun 2026 on Microsoft Learn
  27. New feature

    New Block Bluetooth sharing setting in the Android Enterprise settings catalog

    [Custom top bar elements on Managed Home Screen] There's a new Block Bluetooth sharing setting in the settings catalog ( Devices > Manage devices > Configuration > Create > New policy > Android Enterprise for platform > Settings catalog for…

    DocsCreate a policy using settings catalog in Microsoft IntuneNewAndroid settings catalog in Microsoft Intune

    Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

    Listed under 8–14 Jun 2026 on Microsoft Learn
  28. New feature

    Managed Home Screen exit lock task mode password now requires a device configuration profile

    [Custom top bar elements on Managed Home Screen] You can no longer configure the Managed Home Screen exit lock task mode password by using an app configuration policy. To set or update the lock task mode password for Managed Home…

    DocsConfigure the Microsoft Managed Home Screen AppNew

    Configure the Microsoft Managed Home Screen App Learn how to configure the Microsoft Managed Home Screen app.

    Listed under 8–14 Jun 2026 on Microsoft Learn
  29. New feature

    In-place renewal of Cloud PKI issuing certification authorities (CAs)

    Microsoft Intune now supports in-place renewal of eligible Cloud PKI issuing certification authorities (CAs). Previously, renewing an issuing CA required creating a new CA and manually updating dependent SCEP certificate profiles, which increased operational overhead and configuration risk…

    DocsRenew a Certificate Authority in Cloud PKI

    Renew a Certificate Authority in Cloud PKI Learn how to renew a certificate authority (CA) in Microsoft Cloud PKI to maintain continuous certificate issuance.

    Listed under 8–14 Jun 2026 on Microsoft Learn
  30. New feature

    Grant enhanced security permissions to a Mobile Threat Defense app on Android

    A new Mobile Threat Defense role category is available on the Mobile Threat Defense connector configuration page in the Microsoft Intune admin center. The Grant MTD role permissions to <MTD partner name> on enrolled Android COBO and COPE…

    DocsEnable Mobile Threat Defense connector in Microsoft IntuneUpdated

    Enable Mobile Threat Defense connector in Microsoft Intune Enable the connector between your Mobile Threat Defense (MTD) partner and Microsoft Intune.

    Listed under 8–14 Jun 2026 on Microsoft Learn
  31. New feature

    APP Multiple Managed Accounts

    Microsoft Intune mobile application management now supports Multiple Managed Accounts, letting users add and manage more than one managed account within the same app. App protection policies apply separately to each account, so you can tailor protection based…

    DocsMultiple Managed Accounts for App Protection Policies

    Multiple Managed Accounts for App Protection Policies Learn how the Multiple Managed Accounts (MMA) feature in Microsoft Intune MAM enables users to manage more than one work or school account within a single app.

    Listed under 8–14 Jun 2026 on Microsoft Learn Roadmap 109560
  32. New feature

    Remote Help for Windows updated with performance improvements

    The latest version of Remote Help for Windows (version 5.2.1037.0) includes general bug fixes and performance improvements to enhance reliability.

    Listed under 1–7 Jun 2026 on Microsoft Learn
  33. Preview

    Improvements to the new Intune single device page (preview)

    In the Intune admin center, the Devices > All Devices > select a device page is redesigned and available for you to preview. This feature was available in the 2604 service release . After the initial 2604 release…

    DocsWhat's new in previous months in the Microsoft IntuneNewUse Multi Admin Approval in Intune

    What's new in previous months in the Microsoft Intune Review older announcements from the Intune what's new page

    Listed under 15–21 Jun 2026 on Microsoft Learn
  34. Preview

    Vulnerability Remediation Agent now uses Microsoft Entra agentic identity (preview)

    This feature is rolling out to tenants gradually and may take several weeks to become available in your environment. The Vulnerability Remediation Agent is now available to all customers in preview. Previously, the agent was available only to…

    DocsMicrosoft Entra Agent ID documentationUpdatedVulnerability Remediation Agent Overview and Set Up

    Microsoft Entra Agent ID documentation Build, secure, and manage agent identities with Microsoft Entra Agent ID. Integrate AI agents with enterprise workflows, apply Zero Trust principles, and govern agent access at scale.

    Listed under 8–14 Jun 2026 on Microsoft Learn Action may be required
  35. Preview

    Detect and block Shadow AI using the properties catalog, device query, and a security baseline (preview)

    Using Intune, you can detect and block a Local AI Agent, like OpenClaw, on Windows devices enrolled in Intune. Specifically, you can: Use a Properties catalog policy to collect the Local AI Agent entity. Admins can use this…

    DocsCollect Device Properties With Intune Properties CatalogUpdatedDevice Query for Multiple DevicesSettings list for the Local AI Agent Baseline - OpenClaw security …Public preview overview in Microsoft Intune

    Collect Device Properties With Intune Properties Catalog Use Microsoft Intune properties catalog to collect device properties—including hardware, registry values, and security signals—from Windows devices.

    Listed under 8–14 Jun 2026 on Microsoft Learn

Posts this month: Streamlining macOS security: Automatically enable AutoFill after Platform SSO registration · Microsoft Intune and Apple platform updates: What to expect after WWDC 2026 · How to Configure macOS Privacy Preferences Policy Control (PPPC) Using the Intune Settings Catalog · Exporting all Microsoft Intune Enterprise App Management catalog apps to CSV using Microsoft Graph · New Platform SSO with registration during Automated Device Enrollment on macOS · MDOP is out of support: What to do next with Microsoft Intune

Microsoft Edge

11 changes · product page
  1. Security update

    Edge security update: Android and iOS 149.0.4022.96

    Microsoft released the latest Microsoft Edge for Android and iOS (Version 149.0.4022.96) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide

    DocsSecurity Update Guide

    Listed under June 29, 2026 on Microsoft Learn
  2. Security update

    Edge security update: Stable 149.0.4022.98

    Microsoft released the latest Microsoft Edge for Stable (Version 149.0.4022.98) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide

    DocsSecurity Update Guide

    Listed under June 26, 2026 on Microsoft Learn
  3. Security update

    Edge security update: Stable 149.0.4022.96

    Microsoft released the latest Microsoft Edge for Stable (Version 149.0.4022.96) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide

    DocsSecurity Update Guide

    Listed under June 25, 2026 on Microsoft Learn
  4. Security update

    Edge security update: Android and iOS 149.0.4022.80

    Microsoft released the latest Microsoft Edge for Android and iOS (Version 149.0.4022.80) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide

    DocsSecurity Update Guide

    Listed under June 22, 2026 on Microsoft Learn
  5. Security update

    Edge security update: Stable 149.0.4022.80

    Microsoft released the latest Microsoft Edge for Stable (Version 149.0.4022.80) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide

    DocsSecurity Update Guide

    Listed under June 18, 2026 on Microsoft Learn
  6. Security update

    Edge security update: Android 149.0.4022.67

    Microsoft released the latest Microsoft Edge for Android (Version 149.0.4022.67) and iOS (Version 149.0.4022.68) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide

    DocsSecurity Update Guide

    Listed under June 15, 2026 on Microsoft Learn
  7. Security update

    Edge security update: Stable 149.0.4022.69

    Microsoft released the latest Microsoft Edge for Stable (Version 149.0.4022.69) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide .

    DocsSecurity Update Guide

    Listed under June 12, 2026 on Microsoft Learn
  8. Security update

    Edge security update: Microsoft has released the latest Microsoft Edge Stable Channel (149.0.4022.62) , which incorporates the latest Security (1 CVE)

    Microsoft has released the latest Microsoft Edge Stable Channel (149.0.4022.62) , which incorporates the latest Security Updates of the Chromium project. This update contains a fix for CVE-2026-11645, which has been reported by the Chromium team as having an exploit…

    DocsSecurity Update Guide

    Listed under June 9, 2026 on Microsoft Learn
  9. Security update

    Edge security update: Android and iOS 149.0.4022.53

    Microsoft released the latest Microsoft Edge for Android and iOS (Version 149.0.4022.53) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide .

    DocsSecurity Update Guide

    Listed under June 8, 2026 on Microsoft Learn
  10. Security update

    Edge security update: Stable 149.0.4022.52

    Microsoft released the latest Microsoft Edge for Stable (Version 149.0.4022.52) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide .

    DocsSecurity Update Guide

    Listed under June 4, 2026 on Microsoft Learn
  11. Security update

    Edge security update: Android and iOS 148.0.3967.97

    Microsoft released the latest Microsoft Edge for Android and iOS (Version 148.0.3967.97) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide .

    DocsSecurity Update Guide

    Listed under June 1, 2026 on Microsoft Learn

Posts this month: Security Review for Microsoft Edge version 149

Microsoft Defender for Cloud

16 changes · product page
  1. GA

    Serverless protection for Azure and AWS is now generally available

    June 1, 2026 Serverless protection for Azure and Amazon Web Services (AWS) is now generally available in Defender for Cloud. This capability helps you discover serverless resources and assess them for misconfigurations, vulnerabilities, and insecure dependencies across Azure Web Apps…

    DocsWhat is Serverless protection?Serverless protection recommendationsInteroperability with Azure services, Azure clouds, and client …

    What is Serverless protection? Learn how Serverless protection in Microsoft Defender for Cloud helps secure serverless resources across Azure and AWS.

    Listed under June 2026 on Microsoft Learn
  2. GA

    SQL Vulnerability Assessment Express Configuration is now generally available for Azure SQL Managed Instance and Azure Synapse Analytics workspaces

    June 8, 2026 Defender for SQL Vulnerability Assessment (SQL VA) Express Configuration is now generally available for Azure SQL Managed Instance and Azure Synapse Analytics workspaces. Express Configuration is already generally available for Azure SQL Database, and is now available…

    DocsEnable SQL Vulnerability Assessment Express Configuration for Azure …UpdatedScan your Azure SQL databases for vulnerabilities

    Enable SQL Vulnerability Assessment Express Configuration for Azure SQL Learn how to enable the express configuration of SQL vulnerability assessment on Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics.

    Listed under June 2026 on Microsoft Learn
  3. GA

    General availability of Microsoft Defender for Open-Source Relational Databases on AWS RDS

    June 1, 2026 Microsoft Defender for Open-Source Relational Databases is now generally available for Amazon Web Services Relational Database Service (AWS RDS) instances. As of June 1, 2026, the plan bills for AWS RDS instances that were previously onboarded to…

    DocsOverview of Defender for Open-Source Relational DatabasesEnable Defender for Open-source Relational Databases on Amazon Web …Updated

    Overview of Defender for Open-Source Relational Databases Learn about the benefits and features of Microsoft Defender for Open-Source Relational Databases such as PostgreSQL and MySQL.

    Listed under June 2026 on Microsoft Learn Related post
  4. GA

    General availability of Defender for Key Vault in Azure Government cloud

    June 30, 2026 With this general availability announcement, the Defender for Key Vault plan in Azure Government cloud now aligns with the commercial cloud offering in feature coverage and runtime protection capabilities. For more information about Microsoft Defender for Key…

    DocsMicrosoft Defender for Key Vault - the benefits and featuresInteroperability with Azure services, Azure clouds, and client …

    Microsoft Defender for Key Vault - the benefits and features Learn about the benefits and features of Microsoft Defender for Key Vault.

    Listed under June 2026 on Microsoft Learn
  5. GA

    Expanded multicloud security coverage is now generally available

    June 30, 2026 Microsoft Defender for Cloud's expanded multicloud security coverage is now generally available. This release significantly broadens posture assessment for AWS and GCP environments, adding support for about 90 new resource types and over 200 new security recommendations…

    DocsReference table for all identity and access security recommendations …UpdatedNew and upcoming changes in recommendations, alerts, and incidentsReference table for all compute security recommendations in Microsoft …Reference table for all container security recommendations in …

    Reference table for all identity and access security recommendations in Microsoft Defender for cloud This article lists all Microsoft Defender for Cloud identity and access security recommendations that help you harden and protect your resources.

    Listed under June 2026 on Microsoft Learn
  6. GA

    Cloud security reporting is now generally available

    June 30, 2026 Cloud security reporting in Microsoft Defender portal is now generally available. You can create, customize, and share cloud security insights across your organization using built-in and custom reports. With this release, you can also customize cards when…

    DocsCloud Security Reporting in Microsoft Defender PortalUpdated

    Cloud Security Reporting in Microsoft Defender Portal Learn how to create, customize, and export cloud security reports in Microsoft Defender portal, including built-in reports and custom report options.

    Listed under June 2026 on Microsoft Learn
  7. GA

    API security posture management for Function Apps and Logic Apps is now generally available

    June 18, 2026 API discovery and security posture management in the Defender cloud security posture management (Defender CSPM) plan for APIs hosted in Azure Function Apps and Azure Logic Apps is now generally available. This capability extends API security posture…

    DocsEnable API Security Posture with Defender CSPMUpdatedAPI security posture overview

    Enable API Security Posture with Defender CSPM Discover and secure APIs for API Management, Function Apps, and Logic Apps with prioritized risk insights and API security recommendations.

    Listed under June 2026 on Microsoft Learn
  8. New feature

    Support for additional Azure regions in the UAE geography for Defender for APIs and API security posture management with Defender CSPM

    June 30, 2026 Microsoft Defender for APIs and API security posture management with Defender CSPM has expanded to provide its capabilities in the following Azure regions: UAE North UAE Central Customers who have Azure API Management services in these regions…

    DocsOverview of the Microsoft Defender for APIs planAPI security posture overview

    Overview of the Microsoft Defender for APIs plan Learn about the benefits of the Microsoft Defender for APIs plan in Microsoft Defender for Cloud

    Listed under June 2026 on Microsoft Learn
  9. New feature

    Expanded container support for cloud scopes

    June 17, 2026 Microsoft Defender for Cloud has expanded the supported environment primitives for cloud scopes to include additional container-related resources. Cloud scopes now support the following new environment types: K8s namespace : Organize resources by Kubernetes namespace for granular…

    DocsManage cloud scopes and unified role-based access control in Microsoft …New

    Manage cloud scopes and unified role-based access control in Microsoft Defender for Cloud Learn how to configure cloud scopes and unified role-based access control for granular permissions management across your cloud environments.

    Listed under June 2026 on Microsoft Learn
  10. Preview

    Vulnerability assessment extended to runtime-discovered container images on EKS and GKE (Preview)

    June 4, 2026 Defender for Cloud now extends vulnerability assessment to runtime-discovered container images on Amazon Elastic Kubernetes Service (EKS) and Google Kubernetes Engine (GKE). Previously, vulnerability assessment covered registry-based images. With this update, images discovered at runtime that weren't…

    DocsView and Remediate Vulnerabilities for Running ContainersUpdated

    View and Remediate Vulnerabilities for Running Containers Learn how to view and remediate vulnerability findings for running containers in Microsoft Defender for Cloud.

    Listed under June 2026 on Microsoft Learn
  11. Preview

    New multicloud security recommendations now in public preview

    June 9, 2026 More than 60 multicloud security recommendations are now available in public preview. These recommendations add coverage across AWS services including AppFlow, AppStream, AppSync, Athena, Auto Scaling, CodeBuild, Cognito, Comprehend, DMS, DataSync, FSx, Kendra, Keyspaces, Kinesis, MQ, Neptune…

    DocsSecurity Recommendations

    Security Recommendations Learn about security recommendations in Microsoft Defender for Cloud to improve the security posture of your environments.

    Listed under June 2026 on Microsoft Learn
  12. Preview

    New actionable recommendation to upgrade AKS for system pod vulnerabilities (Preview)

    June 01, 2026 Defender for Cloud now provides a new, actionable recommendation, Upgrade Azure Kubernetes Service Version (preview) that helps you remediate vulnerabilities in AKS-managed system pods. This replaces the previous non-actionable recommendation with a resolvable remediation path, helping teams…

    DocsReview and Remediate Kubernetes Node VulnerabilitiesUpdatedReference table for all container security recommendations in …

    Review and Remediate Kubernetes Node Vulnerabilities Learn how to review and remediate vulnerability findings for Kubernetes nodes in Microsoft Defender for Cloud.

    Listed under June 2026 on Microsoft Learn
  13. Preview

    Kubernetes node vulnerability assessment extended to EKS and GKE (Preview)

    June 2, 2026 Defender for Cloud now extends Kubernetes node (host) vulnerability assessment to Amazon Elastic Kubernetes Service (EKS) and Google Kubernetes Engine (GKE), bringing parity with the existing Azure Kubernetes Service (AKS) capability. This feature detects OS-level vulnerabilities in…

    DocsReview and Remediate Kubernetes Node VulnerabilitiesUpdated

    Review and Remediate Kubernetes Node Vulnerabilities Learn how to review and remediate vulnerability findings for Kubernetes nodes in Microsoft Defender for Cloud.

    Listed under June 2026 on Microsoft Learn
  14. Preview

    Kubernetes misconfiguration enforcement in Defender for Containers (Preview)

    June 3, 2026 Kubernetes misconfiguration enforcement is now available in public preview in Microsoft Defender for Containers. This feature extends Kubernetes security from audit to audit or block mode at deployment time, preventing risky Kubernetes deployments before they reach production…

    DocsConfigure gated deployment rules for Kubernetes container imagesUpdated

    Configure gated deployment rules for Kubernetes container images Learn how to configure gated deployment rules in Microsoft Defender for Containers to audit or block Kubernetes deployments based on container image vulnerability findings.

    Listed under June 2026 on Microsoft Learn
  15. Preview

    Discovery and posture for serverless container workloads (Preview)

    June 4, 2026 Microsoft Defender for Cloud now includes discovery and posture coverage for supported serverless container workloads in preview. This capability adds inventory visibility, security recommendations for misconfigurations and vulnerability assessment findings, and attack path analysis for Azure Container…

    DocsDiscovery and posture for serverless container workloads

    Discovery and posture for serverless container workloads Learn how Microsoft Defender for Cloud uses Defender cloud security posture management (Defender CSPM) to provide inventory, recommendations, and attack path visibility for serverless containers.

    Listed under June 2026 on Microsoft Learn
  16. Preview

    Container-level misconfiguration recommendations for Kubernetes (Preview)

    June 1, 2026 Defender for Cloud now introduces agentless, container-level Kubernetes Security Posture Management (KSPM) misconfiguration recommendations, replacing the previous cluster-level findings with more granular, actionable insights integrated into Defender CSPM. The new recommendations assess individual containers rather than entire…

    DocsReference table for all container security recommendations in …

    Reference table for all container security recommendations in Microsoft Defender for Cloud This article lists all Microsoft Defender for Cloud container security recommendations that help you harden and protect your resources.

    Listed under June 2026 on Microsoft Learn

Posts this month: Microsoft Defender for Cloud expands multicloud coverage across AWS and Google Cloud · Closing the loop on container security: From code to runtime in the AI era · Public Preview: Microsoft Foundry agent security capabilities in Microsoft Defender for Cloud are transitioning to a Microsoft Agent 365 license · Microsoft Defender for Cloud Customer Newsletter · The end of patching era for containers: Microsoft Defender for Cloud expands hardened image support · Start Secure, Stay Secure: How Microsoft is Closing the Gap from Code to Runtime

Microsoft Defender for Cloud Apps

2 changes · product page
  1. Preview

    Salesforce connector enhancements (Preview)

    Modern Salesforce attacks increasingly abuse OAuth tokens, connected apps, sessions, and APIs, often bypassing MFA and traditional controls. The Salesforce connector for Microsoft Defender for Cloud Apps is now better equipped to detect these attacks. The connector ingests Salesforce Real-Time…

    DocsApplication inventoryNewView your OAuth app details with app governanceNewView the Identity inventoryUpdatedProtect your Salesforce environment

    Application inventory Learn how the Applications page in Microsoft Defender centralizes SaaS and OAuth app inventory so you can review risk, permissions, and usage.

    Listed under June 2026 on Microsoft Learn
  2. Retirement

    File policies retiring January 6, 2027

    File-based data protection is moving from Defender for Cloud Apps to Microsoft Purview. File policies retire on January 6, 2027 . Review your existing file policies and recreate them as Microsoft Purview DLP or auto-labeling policies before the retirement date…

    DocsMigrate file policies to Microsoft PurviewUpdated

    Migrate file policies to Microsoft Purview Migrate your Microsoft Defender for Cloud Apps file policies to Microsoft Purview DLP or auto-labeling policies before the January 6, 2027 retirement deadline.

    Listed under June 2026 on Microsoft Learn

Microsoft Purview

9 changes · product page
  1. GA

    Insider Risk Management

    General availability (GA) : Select which generative AI apps to monitor in Insider Risk Management policy indicators. For Microsoft Copilot experiences and Enterprise AI apps, you can now select or deselect generative AI apps for monitoring, reducing alert noise, and…

    DocsConfigure policy indicators in Insider Risk Management

    Configure policy indicators in Insider Risk Management Configure policy indicators in Microsoft Purview Insider Risk Management to define the type of risk activities that you want to detect and investigate.

    Listed under June 2026 on Microsoft Learn Roadmap 545063
  2. GA

    Data Security Investigations

    In preview : Endpoint DLP evidence collection is now available as a data source in Data Security Investigations. Investigators can query data captured by endpoint Data Loss Prevention (DLP) policies on onboarded devices and add the associated content to an…

    DocsSearch, review, and refine results in Data Security InvestigationsUpdatedLearn about the Data Security Investigations workflowUpdatedLearn about AI analysis in Data Security Investigations

    Search, review, and refine results in Data Security Investigations Discover how to search, review, and refine results in Data Security Investigations, including audit search for activity-based content identification.

    Listed under June 2026 on Microsoft Learn Roadmap 561489
  3. GA

    Copilot Cowork

    General availability (GA) : Data security and compliance protections for Microsoft 365 Copilot Cowork

    DocsUse Microsoft Purview to manage data security & compliance for …New

    Use Microsoft Purview to manage data security & compliance for Microsoft 365 Copilot Cowork Use Microsoft Purview to help you protect and manage data security and compliance protections for Microsoft 365 Copilot Cowork.

    Listed under June 2026 on Microsoft Learn
  4. New feature

    eDiscovery

    New : A new Convert supported file formats to HTML option is available when adding search results to a review set and when exporting items from a review set in eDiscovery. When enabled, cloud-native file formats such as .loop and…

    DocsAdd search results to a review set in eDiscoveryExport items from a review set in eDiscovery

    Add search results to a review set in eDiscovery Learn about adding search results to a review set, including sampling options, for a case in eDiscovery in the Microsoft Purview portal.

    Listed under June 2026 on Microsoft Learn
  5. New feature

    Sensitivity labels

    Preview : Rolling out, the sensitivity label setting to prevent connected experiences that analyze content now prevents all connected experiences in Word, Excel, and PowerPoint for Windows, rather than a subset of these experiences. Preview : Rolling out, the sensitivity…

    DocsManage Sensitivity Labels in Office Apps

    Manage Sensitivity Labels in Office Apps Learn how to configure and manage sensitivity labels in Office apps for desktop, mobile, and the web to help classify and protect your organization's data.

    Listed under June 2026 on Microsoft Learn
  6. New feature

    Sensitive information types

    New : Added definitions for the following sensitive information types: China physical addresses Colombia national ID Colombia tax identification number Greenland physical addresses Russia physical addresses Russia taxpayer identification number Singapore physical addresses South Africa physical addresses Ukraine physical addresses

    DocsColombia national ID entity definitionUpdatedColombia tax identification number entity definitionUpdatedRussia taxpayer identification number entity definitionUpdatedChina physical addresses entity definition

    Colombia national ID entity definition Colombia national ID sensitive information type entity definition.

    Listed under June 2026 on Microsoft Learn
  7. New feature

    Device Onboarding

    New : Monitor device health with the device health reports dashboard . Use the device health reports dashboard to monitor device onboarding status, policy update readiness, and feature readiness for Endpoint DLP.

    DocsMonitor Endpoint DLP Device Health in Microsoft Purview

    Monitor Endpoint DLP Device Health in Microsoft Purview Use the Microsoft Purview device health reports dashboard to monitor device onboarding status, policy update readiness, and feature readiness for Endpoint DLP.

    Listed under June 2026 on Microsoft Learn
  8. New feature

    Data Loss Prevention

    New : Access Endpoint DLP device attribute data using Advanced Hunting . Query Endpoint DLP device configuration and policy sync attributes at scale through the DeviceInfo table's DlpInfo column in Advanced hunting in the Microsoft Defender portal, instead of relying…

    DocsMicrosoft Purview DLP for Microsoft 365 Copilot and CoworkNewGet started with Activity explorerUpdatedTroubleshooting endpoint data loss prevention configuration and policy …Create a DLP Policy Using Device Scoping

    Microsoft Purview DLP for Microsoft 365 Copilot and Cowork Learn how Microsoft Purview DLP protects Microsoft 365 Copilot, Copilot Chat, and Cowork by blocking sensitive prompts, web search, and labeled content.

    Listed under June 2026 on Microsoft Learn Roadmap 570845
  9. Preview

    Information Protection client

    In preview : View and label files with the Information Protection client using macOS.

    DocsInformation Protection client: Version release history and support …New

    Information Protection client: Version release history and support policy Version release history and support policy for the Microsoft Purview Information Protection client.

    Listed under June 2026 on Microsoft Learn

Posts this month: Introducing a unified alert experience for Microsoft Purview Insider Risk Management · Extend Microsoft Purview data protection to AWS Bedrock agents for cross-cloud AI governance · Enhancements to Device Status API & Logged-In User Email in Endpoint DLP · Microsoft Purview enables developers with strong data security across AI apps and agents

Built from the What's New and release-notes pages on Microsoft Learn. Entries are grouped by the month Microsoft lists them under (or, for changes detected later, the month we detected them). Every title links to the exact section on Microsoft Learn.

Type to search every update, post, CVE and roadmap item.

Try