Azure DevOps Services and Server are not affected by the PHP vulnerabilities, but pipelines, containers, and deployed applications may require separate patching.
What you should do
Review and update the security settings for pipelines, containers, and deployed applications to ensure they are patched against the PHP vulnerabilities. AI-suggested
On October 21, 2026, PHP disclosed two critical vulnerabilities that can allow remote code execution. Neither Azure DevOps Services, our cloud-hosted offering, nor Azure DevOps Server, our on-premises product, uses PHP to handle customer requests. PHP runtimes used by pipelines, containers, and deployed applications have their own patching requirements. Deployment scope: cloud and on-premises Azure […] The post PHP2Shell and Azure DevOps: what to check appeared first on Azure DevOps Blog.
Dynamics 365 Business Central now offers AI resources through Copilot and agents, simplifying AI integration and management for publishers and customers.
What you should do
Review the new AI resource management methods and consider their use for extending Copilot in Business Central. AI-suggested
Using the AI resources provides several benefits: Reduced operational overhead: Avoid the need to handle infrastructure management, updates, monitoring, troubleshooting, or maintenance of custom Azure OpenAI subscriptions. This benefit frees up resources to focus on core business operations and provides value-adding intellectual property (IP) to customers. Simplified onboarding: Quickly integrate AI capabilities into your solutions without having to navigate the complexities of setting up and managing your own Azure OpenAI subscription. Improved reliability: Proactive scaling, throttling, load…
Type
M365 Roadmap
Services
Entra ID
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Dynamics 365 Business Central, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Administrators can now manage Dynamics 365 Contact Center users through Microsoft Entra ID security groups, simplifying role assignment and access management.
What you should do
Review the new role assignment process to ensure it meets your organization's needs and streamline user management. AI-suggested
Administrators configure team-based access for representatives through Microsoft Entra ID security groups. They link an Entra security group to a Dataverse team of type Microsoft Entra ID Security Group and assign at the team level the required security roles such as: Basic user Customer Service Representative Omnichannel agent Every member of the linked group inherits the roles automatically with no per user role assignment, including: Queue participation Presence Conversation handling When a representative belongs to more than one team, they receive the combined privileges of their teams. Ex…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Contact Center, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365, Entra ID · verify against the original
This enhancement enables automatic clearing of bridge transactions generated by centralized vendor payments when bank statements are matched with records in Dynamics 365 Finance during the bank reconciliation process. The system posts the required clearing journals in the centralized legal entity, ensuring that general ledger balances are updated accurately. Business Value: Automatic clearing of centralized vendor payments streamlines the bank reconciliation process by eliminating manual clearing of bridge transactions, reducing reconciliation errors and ensuring general ledger balances are ac…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Finance, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
This enhancement enables automatic clearing of bridge transactions generated by centralized vendor payments when bank statements are matched with records in Dynamics 365 Finance during the bank reconciliation process. The system posts the required clearing journals in the centralized legal entity, ensuring that general ledger balances are updated accurately. Business Value: Automatic clearing of centralized vendor payments streamlines the bank reconciliation process by eliminating manual clearing of bridge transactions, reducing reconciliation errors and ensuring general ledger balances are ac…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, GCC, GCC High, DoD, Dynamics 365 Finance, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
Severity
Critical · CVSS 10.0
Type
Security updates
Tags
Azure Kubernetes Configuration Service, Elevation of Privilege, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Azure · verify against the original
A vulnerability in VM Inspector for Azure Virtual Machines allows unauthorized attackers to elevate privileges over a network due to improper link resolution before file access.
What you should do
Apply the security update as soon as possible to mitigate the vulnerability. AI-suggested
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
Severity
Critical · CVSS 10.0
Type
Security updates
Tags
VM Inspector for Azure Virtual Machines, Elevation of Privilege, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Azure · verify against the original
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
Severity
Critical · CVSS 9.1
Type
Security updates
Tags
Azure Pipelines, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Azure · verify against the original
Microsoft Purview Data Loss Prevention policies will now filter sensitive files at the network layer via integration with Entra Global Secure Access Internet Access, helping prevent sensitive data from being shared with untrusted cloud applications.
What you should do
Review the new integration settings and update DLP policies as necessary to ensure compliance. AI-suggested
Extend Microsoft Purview Data Loss Prevention (DLP) policies to filter sensitive files at the network layer by integrating with Entra Global Secure Access Internet Access. This integration enables organizations to intercept and inspect files at the network layer and enforce restrictive actions based on DLP policy conditions. It helps prevent sensitive data from being shared with untrusted cloud applications through browsers, apps, APIs, add-ins, and more - including generative AI platforms, cloud storage, and content-sharing services - while managing alerts and incidents through Purview and Mi…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Purview, Web
AI analysis
Medium priority · generated by qwen2.5:7b · verify against the original
Microsoft Purview now integrates with Entra GSA to extend data security controls to the network layer, enabling organizations to detect and protect sensitive data in text and AI interactions.
What you should do
Review the new integration to understand how it can enhance data security and compliance measures. AI-suggested
Extend Microsoft Purview data security controls to the network layer to detect and protect sensitive data in text and prompts by integrating with Entra Internet Access. This integration enables organizations to intercept and inspect text and AI interactions at the network layer, enforce restrictive actions based on DLP policies, and detect risky user activity through Insider Risk Management. It helps prevent sensitive data from being shared with untrusted cloud applications through browsers, apps, APIs, add-ins, and more - including generative AI platforms, social media, collaborative platform…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Purview, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Security · verify against the original
Dynamics 365 Business Central introduces the Expense Agent, which automatically creates expense reports based on business trips. Administrators can configure the feature to group expenses by trip or period.
What you should do
Review the Expense Agent setup to ensure it aligns with your company's expense reporting policies. AI-suggested
Expense Agent can automatically create expense reports based on identified business trips. You just need to configure the feature on the Expense Agent Setup page. Instead of manually collecting and organizing individual expense entries, you can use the agent to group relevant expenses and generate a dedicated expense report for each trip. Key capabilities include: Administrators can specify whether the company wants to group expenses by trip and not only by period. Automated expense report creation without requiring you to manually start and organize reports after a travel requisition is appro…
Type
M365 Roadmap
Services
Entra ID
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Dynamics 365 Business Central, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Dynamics 365 Business Central introduces interim approval for expense reports, allowing a designated approver to review expenses before final approval.
What you should do
Review the new interim approval process to ensure it aligns with your organization's approval workflows. AI-suggested
This feature introduces support for a simple interim approval scenario for expense reports. When someone submits an expense report, organizations can designate an interim approver to review and approve expenses before the final approver can review and approve. Interim approver must review expense reports to confirm whether they're complete and compliant before final approver. GA date: November CY2026 Preview date: November CY2026
Type
M365 Roadmap
Services
Entra ID
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Dynamics 365 Business Central, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Dynamics 365 Business Central is adding subcontracting capabilities to its supply chain management solution, allowing for better handling of external vendors in production processes. This feature is enabled by admins/makers/marketers for end users.
What you should do
Review the new subcontracting capabilities and decide when to enable them for your end users. AI-suggested
The standard Dynamics 365 Business Central solution already meets many global needs. We expand that solution to meet local needs by adding capabilities that include: Logistics flows that manage subcontractor transfers for raw materials and components, along with warehouse handling and item tracking. Flexible pricing that considers the work center, item, dates, and quantity. Finished goods receipts with item tracking and warehouse handling from purchase orders. Logistics flows that manage subcontractor transfers of finished goods. Enhanced usability and more transparency in production processes…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Business Central, Web
AI analysis
Medium priority · generated by qwen2.5:7b · verify against the original
New read-only APIs are introduced for analyzing approval workflows in Dynamics 365 Business Central, allowing integration with Power BI and other tools. A new permission set is also available.
What you should do
Review the new APIs and permission set to determine if they are needed for your auditing and reporting requirements. AI-suggested
In this release wave, we're introducing read-only APIs on the (workflow) approval system. This allows for establishing security and auditing analytics and reporting outside Business Central—for example, creating reports with Power BI or agents with Microsoft Copilot Studio and MCP Server for Business Central. The APIs are read-only and allow querying for: Workflow Workflow and User mappings Workflow, User, and Action history We're also introducing a new permission set that allows a user to use approval APIs. This shouldn't be granted to standard users, but might be included in security-related…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Business Central, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Organizations can securely deploy AI agents to access and interact with Dataverse data by using enterprise‑managed Microsoft Entra agent identities. This feature enables agents to be provisioned as Dataverse agent users with dedicated, least‑privileged security roles based on their intended capabilities. This feature ensures agents have only the access required to perform tasks autonomously or on behalf of users. By using identity‑based role assignment and full auditing of agent‑driven actions, organizations can enforce security and compliance policies across both human users and AI agents whi…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Copilot (Microsoft 365), Microsoft Dataverse, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Entra ID · verify against the original
Dynamics 365 Business Central updates its UK localization to include new data points for payment practices, helping organizations comply with new UK regulations.
What you should do
Review the new features to ensure compliance with the updated UK regulations. AI-suggested
Business Central extends UK localization to support the updated Reporting on Payment Practices and Performance (Amendment) Regulations 2024. The system introduces new data points to the existing Payment Practices page, including the total value of payments made during the period, late payments relative to agreed terms, and the percentage of late payments caused by disputes. A dispute mechanism is added to purchase invoices to link delayed payments directly to dispute status. The report can be exported in CSV format for submission or further processing. Business Value: New legislation in the UK…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Business Central, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Dynamics 365 · verify against the original
Dynamics 365 Business Central's Shopify Connector now supports B2B features on all Shopify plans, previously restricted to Plus plans. Admins need to update the connector settings to enable these features.
What you should do
Admins should update the Shopify connector settings by turning it off and then back on to enable B2B features on all Shopify plans. AI-suggested
Shopify expanded its B2B capabilities to all plans, and the Shopify Connector for Business Central is updated accordingly. Core B2B features that previously required a Shopify Plus subscription now work on Basic, Grow, and Advanced plans. The following capabilities are available on all Shopify plans: Company sync: Import Shopify B2B companies and company locations and map them to customers in Business Central. B2B order processing: When a B2B order arrives, the connector identifies the company and resolves the correct bill-to and ship-to customer based on the company location. Market catalogs:…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Business Central, Web
AI analysis
Low priority · generated by qwen2.5:7b · verify against the original
Administrators must choose an email review policy for the Payables Agent, which affects accounts payable teams by allowing them to automatically process emails from known senders, reducing manual approval requirements.
What you should do
Select an email review policy for the Payables Agent before the August 2026 release. AI-suggested
This feature introduces email review policy and a Known Senders list page to give accounts payable teams more control over which incoming emails require human approval before the Payables Agent processes them. A new Email review field in the Payables Agent setup lets administrators choose when incoming emails require human approval. The following options are available: Always: Every email requires approval, regardless of the sender. Never: No emails require approval. Only if untrusted (recommended): Only emails from senders who aren't on the list of known senders require review. This is the re…
Type
M365 Roadmap
Services
Entra ID
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), Dynamics 365 Business Central, Web
AI analysis
Medium priority · generated by qwen2.5:7b · verify against the original
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
Severity
Critical · CVSS 9.6
Type
Security updates
Tags
Azure Cosmos DB, Elevation of Privilege, 2026-Sep
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Azure · verify against the original