Azure DevOps Services and Server are not affected by the PHP vulnerabilities, but pipelines, containers, and deployed applications may require separate patching.
What you should do
Review and update the security settings for pipelines, containers, and deployed applications to ensure they are patched against the PHP vulnerabilities. AI-suggested
On October 21, 2026, PHP disclosed two critical vulnerabilities that can allow remote code execution. Neither Azure DevOps Services, our cloud-hosted offering, nor Azure DevOps Server, our on-premises product, uses PHP to handle customer requests. PHP runtimes used by pipelines, containers, and deployed applications have their own patching requirements. Deployment scope: cloud and on-premises Azure […] The post PHP2Shell and Azure DevOps: what to check appeared first on Azure DevOps Blog.
Out-of-band security updates for .NET address the Brotli decoder vulnerability and tarball ownership vulnerability. The post .NET October 2026 Out-of-Band Security Updates appeared first on .NET Blog.
Row summaries are now available in US Government clouds, allowing users to access AI-generated insights in model-driven apps. Admins and makers need to enable and configure this feature.
What you should do
Admins and makers should review and enable row summaries for users in model-driven apps. AI-suggested
Row summaries are expanding to supported US Government clouds, giving users in regulated environments access to AI-generated insights that help them understand model-driven app records at a glance. This release brings the row summary experience available to commercial customers to supported government environments while meeting their applicable compliance and data-boundary requirements. Admins and makers enable and configure row summaries for users in their model-driven apps. Availability Field Value Release Channel Weekly Version 2611.1 Applies to Model-driven apps Feature Scope Users (enable…
Type
M365 Roadmap
Tags
In development, General Availability, GCC, GCC High, Power Apps, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Dynamics 365 Contact Center introduces overflow actions for direct inward calls, allowing administrators to define fallback actions based on specific events.
What you should do
Review and configure overflow actions to ensure a seamless customer experience during call overflow scenarios. AI-suggested
Overflow for direct inward dialing leverages conversation orchestration to detect key direct inward dialing-related events—such as the representative being busy, offline, rejecting the call, or failing to answer—and apply administrator-defined fallback actions. Administrators configure natural language playbooks using conversation orchestration at the global or inbound profile level to specify the action to run when a direct inward dialed call can't be attended to or completed. The actions include offering a direct callback to the caller, sending them to voicemail, transferring the call to ano…
Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Dynamics 365 Contact Center, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Dynamics 365 Customer Service now enforces governance policies on email attachments, blocking emails with non-compliant content. This affects administrators who need to configure and enforce these policies.
What you should do
Review and configure governance policies to include attachment checks for sensitive or non-compliant content. AI-suggested
This feature extends governance capabilities to evaluate email attachments, closing a critical gap where sensitive or non-compliant information may exist outside the email body. When a user sends an email with attachments, the system automatically scans each document and applies configured governance policies. In the initial release, analysis is focused on plain text content within supported document types, such as Word and PDF files. Non-text elements, including images or embedded content, are excluded in this phase to ensure predictable and efficient processing. Every attachment included in …
Type
M365 Roadmap
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Customer Service, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Admins can now configure the strictness level of governance policies in Dynamics 365 Customer Service to better align with compliance requirements and risk tolerance.
What you should do
Review and adjust the strictness levels of governance policies as needed to ensure they align with your organization's compliance and risk management strategies. AI-suggested
This feature introduces policy strictness control, enabling organizations to define how rigorously each governance policy evaluates and flags potential violations in outgoing emails. Governance policies serve as real-time guardrails, ensuring communications adhere to business, legal, and compliance standards before they are sent to customers. With this enhancement, supervisors can configure the strictness level for each policy. Lower strictness settings apply more lenient enforcement, reducing false positives and allowing borderline scenarios to pass, while higher settings perform more rigorou…
Type
M365 Roadmap
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Customer Service, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Admins can now personalize outreach emails generated by Dynamics 365 Sales Qualification Agent, allowing teams to define the purpose, tone, and messaging preferences.
What you should do
Review and configure the new personalization settings for the Sales Qualification Agent to ensure consistency with your brand voice and messaging goals. AI-suggested
Define outreach scenario/goal in natural language. Choose desired call-to-action to drive next steps. Provide subject line guidance: fixed suggestion or style recommendation. Set message length and brevity targets. Specify tone rules, including name-usage limits and preferred terminology. Configure brand language and voice guardrails: approved phrases and banned words. Set formatting preferences: bullets, paragraph length, and maximum bullet count. Business Value: This feature expands the Sales Qualification Agent outreach by letting teams define the outreach purpose, brand-aligned tone (match…
Type
M365 Roadmap
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Dynamics 365 Sales, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Admins can now enable enhanced screen recording controls in Dynamics 365 Customer Service, providing more granular management of recording settings and behaviors.
What you should do
Review the new settings and configure them as needed to ensure compliance and effective team management. AI-suggested
The enhanced screen recording capability offers greater flexibility and control, enabling organizations to manage recording behavior with more precision. Key enhancements include: Access all recording settings and configurations from Customer Service admin center > Quality Management. Enable or disable screen recording using a dedicated toggle. Capture call audio alongside screen recordings. Turn off the red border displayed around representative screens during active window recording. Allow users with the screen recording supervisor role to play recordings within the Customer Service workspac…
Type
M365 Roadmap
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Customer Service, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Dynamics 365 Sales introduces the ability to deploy multiple Sales Qualification Agents in a single environment, allowing for more targeted lead management and exclusive engagement.
What you should do
Review the new multi-agent configuration settings to align with your organization's sales structure and ensure proper lead routing and handoffs. AI-suggested
Segment-specific qualification: Each agent operates with its own ideal customer profile, knowledge sources, templates, and consent settings, ensuring qualification conversations reflect the nuances of each product, region, or team. Intelligent lead routing: The system evaluates incoming leads against agent selection criteria and assigns ownership based on configured priority, ensuring predictable and conflict-free lead management. A fallback agent handles leads that don't match any specialized criteria, ensuring no lead goes unprocessed. Exclusive engagement with coordinated handoff: Only one …
Type
M365 Roadmap
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Dynamics 365 Sales, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
The enhanced screen recording capability offers greater flexibility and control, enabling organizations to manage recording behavior with more precision. Key enhancements include: Access all recording settings and configurations from Customer Service admin center > Quality Management. Enable or disable screen recording using a dedicated toggle. Capture call audio alongside screen recordings. Turn off the red border displayed around representative screens during active window recording. Allow users with the screen recording supervisor role to play recordings within the Customer Service workspac…
Type
M365 Roadmap
Tags
In development, General Availability, GCC, Dynamics 365 Customer Service, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Gain insights into your Power Pages site with integrated telemetry and analytics. Use Application Insights to monitor page views, form interactions, session details, and client-side analytics. Detect server-side errors, performance issues, and access logs to resolve problems and optimize your site. To configure site analytics, makers must open the setup workspace and add the analytics provider script to enable traffic analytics. Business Value: You can monitor your Power Pages site traffic and user interactions with ease. Track page views, form interactions, and session details using client-si…
Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, Power Pages, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Quality Managers can now edit and override completed evaluations in Dynamics 365 Customer Service, ensuring more accurate assessment of agent performance. This feature is available for AI-assisted, AI-generated, and manual evaluations.
What you should do
Review the new feature settings and permissions to ensure only authorized users can override evaluations. AI-suggested
This feature enables Quality Managers to edit and override evaluation results even after they are marked as completed or expired. While completed evaluations remain read-only by default to preserve integrity, supervisors can initiate an Edit action when discrepancies are identified, such as incorrect AI predictions or errors in manual assessments. In edit mode, supervisors can update evaluation responses, adjust scores, and refine comments to reflect an accurate assessment. This ensures that evaluation records represent the final, validated view of agent performance and interaction quality. Th…
Type
M365 Roadmap
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Dynamics 365 Customer Service, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Admins can now enable custom voice capabilities for Dynamics 365 Contact Center, allowing the creation of a unique, branded voice for voice agents.
What you should do
Review the new custom voice integration process in the Copilot Service admin center to ensure compliance with Microsoft's Responsible AI practices. AI-suggested
Secure a voice talent that will represent the voice of your brand. After obtaining explicit consent, gaining Limited Access approval through Microsoft's Responsible AI practices, and building a custom voice model, it's time to integrate with Dynamics 365 Contact Center. In the Copilot Service admin center, create a connection between Dynamics 365 and Azure. Navigate to Channels > Custom AI Voices > Connect custom voice. You'll be prompted through a series of cascading dropdown boxes to select the speech resource and custom voice model to connect with. After the connection is established, you c…
Type
M365 Roadmap
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Dynamics 365 Contact Center, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Admins can now enforce governance policies to control AI-generated customer communications in Dynamics 365 Customer Service, ensuring compliance and reducing risk.
What you should do
Review and configure governance policies to ensure compliance with business, legal, and regulatory requirements. AI-suggested
Create and enforce policies that prevent risky or noncompliant customer communications. Governance policy checks serve as configurable safeguards that review AI‑generated and autonomous email responses before they are sent to customers. These checks enforce business, legal, and regulatory requirements by validating responses for relevance, prohibited content, and sensitive topics. If a response fails a policy check, delivery is blocked and the violation is clearly identified, enabling supervisors to review issues and take actions to improve outcomes. Governance policies are applied consistentl…
Type
M365 Roadmap
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Dynamics 365 Customer Service, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Dynamics 365 Commerce introduces a unified sign-in system for B2B web storefronts, allowing buyers to access multiple organizations and outlets with a single account.
What you should do
Review and configure organization and outlet relationships, and assign users to their respective organizations in the storefront settings. AI-suggested
The multioutlet B2B web storefront introduces a unified sign-in system that allows buyers to access all their associated organizations and outlets using a single account. The storefront UI is updated to display an organization selector during sign-in and provides outlet-specific navigation and catalog views. Buyers can place, track, and manage orders for multiple outlets within a single session, with real-time visibility into order status, inventory, and account information. This feature supports role-based access, ensuring that users only see the organizations and outlets they are authorized …
Type
M365 Roadmap
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), Dynamics 365 Commerce, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Dynamics 365 Customer Service introduces autonomous email resolution, allowing emails to be handled without manual intervention, creating cases only when necessary.
What you should do
Review and configure the automation level for email resolution in Dynamics 365 Customer Service. AI-suggested
Autonomous email resolution delivers end-to-end handling of customer emails without manual intervention or default case creation. When an email arrives, the system analyzes the request, identifies the underlying intent, and determines whether the information and actions needed to resolve it are available. Using enterprise knowledge, configured business instructions, connectors, and custom agents, the system constructs a resolution dynamically. It generates a response that's context-aware, compliant with business rules, and tailored to the request, then delivers it directly by email—completing …
Type
M365 Roadmap
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Dynamics 365 Customer Service, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Power Pages now allows administrators to manage external authentication providers with granular controls, enabling central enforcement and site-level exceptions.
What you should do
Review and configure the Power Platform admin center to manage external authentication providers for your Power Pages sites. AI-suggested
Power Pages now lets you manage external authentication providers with environment-level governance controls and optional site-level exceptions. You can centrally enforce which identity providers (IDPs) are allowed across all sites in an environment, while still enabling site-specific flexibility when needed. Makers will only see and select from the approved IDPs when setting up authentication, ensuring consistent governance and alignment with enterprise security policies. To enable this feature, go to the Power Platform admin center. Navigate to Manage > Power Pages > Governance settings > Au…
Type
M365 Roadmap
Services
Entra ID
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, Power Pages, Web
AI analysis
Medium priority · generated by qwen2.5:7b · verify against the original
Dynamics 365 Commerce adds support for multiple outlet B2B ordering via CSU, enabling unified sign-in and streamlined workflows for B2B buyers managing multiple outlets.
What you should do
Review the new B2B multi-outlet capabilities in Dynamics 365 Commerce to understand how they can be integrated into your B2B ordering processes. AI-suggested
Available for B2B scenarios in Dynamics 365 Commerce (including headless Commerce), this feature enables retailers to configure unified sign-in in Commerce headquarters and integrate third‑party storefronts using CSU APIs. The organization selector and related capabilities are exposed via CSU endpoints so that third-party sites can consume identities, organizational context, and ordering workflows without relying on native UI components. Functional enhancements Contact model transition: Replaces the customer account type "Person" with type "Contact" to better manage B2B partners. Single contac…
Type
M365 Roadmap
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), Dynamics 365 Commerce, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
As of today, whenever the user wants to enable email notifications the policy tips also need to be enabled and vice versa, but with this decoupling the admin can configure the following: 1) None of policy tips or email notification 2) Only policy tips 3) Only Email Notifications 4) Both Email Notifications and Policy tips GA date: August CY2026
Type
M365 Roadmap
Services
SharePoint
Tags
Launched, General Availability, GCC, GCC High, DoD, Microsoft Purview, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects SharePoint · verify against the original
New PowerShell setting (SpeakerAttributionBYOD in csTeamsAIPolicy), enabled by default, gives IT admins more control over speaker attribution in BYOD (bring your own device) meeting rooms. This enhances the experience for users by enabling clear speaker labels and richer in-meeting and post-meeting insights with Microsoft 365 Copilot. Users just enroll profiles via Teams Settings to be recognized. GA date: July CY2025
Type
M365 Roadmap
Services
Teams
Tags
Launched, General Availability, Targeted Release, Worldwide (Standard Multi-Tenant), GCC, Microsoft Teams, Desktop, Mac
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Teams · verify against the original
Microsoft Teams introduces default meeting templates that apply preferred settings automatically, reducing manual configuration for organizers. Only Teams Premium license holders can use these templates.
What you should do
Review the new default meeting templates feature to ensure it aligns with your organization's meeting settings requirements. AI-suggested
Default meeting templates enable IT admins to automatically apply their organization’s preferred meeting settings whenever users schedule a Teams meeting through Outlook or Teams calendar. This helps organizations apply meeting settings (including protection settings) at scale, and reduce the need for organizers to manually configure meeting options. Only organizers with a Teams Premium (T-Pre) license assigned can use Default Meeting Templates. GA date: November CY2026
Type
M365 Roadmap
Services
Microsoft 365 Apps, Teams
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, Microsoft Teams, Outlook, Desktop, Mac, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, Teams · verify against the original
Microsoft Teams Meetings now offer enhanced AI controls for Copilot, allowing organizers to manage access and IT admins to set policies for AI governance.
What you should do
Review the new policy model to ensure compliance and governance needs are met. AI-suggested
Teams Meetings offer enhanced AI controls for Copilot and AI experiences. Organizers manage who can enable and access AI, while IT admins get a simpler policy model for governing AI across meetings and post-meeting experiences. These updates provide more predictable administration and greater flexibility for compliance and governance scenarios. GA date: November CY2026
Type
M365 Roadmap
Services
Teams
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Teams, Android, Desktop, iOS, Mac, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, Teams · verify against the original
We’re expanding form fill assistance in Power Apps to use speech as a source, providing users a more natural way to fill forms. Users select the microphone icon, record their content, and the transcript is used as a source for the form entry. Recordings are transient and not saved. Availability Field Value Release Channel Monthly Version 2612.1 Applies to Model-driven apps Feature Scope Users (enabled by default) GA date: December CY2026
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Power Apps, Android, iOS, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Admins and makers can now connect their GitHub accounts to access additional model options for generative pages in Power Apps Maker Studio, expanding availability to regions without dedicated GPU capacity.
What you should do
Review the new GitHub integration for Power Apps generative pages to understand the impact on your organization's development processes. AI-suggested
Connect your GitHub account to access additional model options for the built-in gen page coding agent directly in the generative page designer in Maker Studio. Makers can use the agent to create and refine generative pages without leaving the Power Apps authoring experience. This integration also brings Maker Studio generative page authoring to regions without dedicated Power Apps GPU capacity. Model availability through GitHub may evolve over time, and requests made through this connection consume the maker’s GitHub credits. Availability Field Value Release Channel Weekly Version 2611.1 Appli…
Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Power Apps, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Microsoft Teams will require explicit consent from PSTN participants in one-to-one calls before recording or transcription can start. Participants can consent or decline via their phone keypad.
What you should do
Review the new Teams calling policy for explicit consent in one-to-one PSTN calls to ensure compliance. AI-suggested
Microsoft Teams will support explicit consent for participants connected through the public switched telephone network (PSTN) in one-to-one calls. When explicit consent is required, PSTN participants will hear an audio prompt when recording or transcription is started. They can use their phone keypad to consent or decline. Participants who decline can remain in the call but stay muted. This capability extends the existing Teams calling policy for explicit consent to one-to-one PSTN calls. GA date: December CY2026
Type
M365 Roadmap
Services
Teams, Teams Voice
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Teams, Android, iOS, Mobile
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, Teams · verify against the original