Configure Edge security update notifications in the Edge Management Service
Edge administrators can now set a severity threshold and get alerts only for Microsoft Edge updates with security fixes at or above that level, including zero-day fixes.
Security
Security Copilot is not auto-provisioned for some Microsoft 365 E5/E7 customers
Microsoft reverted the message about auto-provisioning Security Copilot for some Microsoft 365 E5/E7 customers. The original Message Center post (MC1478465) was published by mistake.
Microsoft Entra admin role changes for access to App Governance in the Defender admin portal
Microsoft is aligning access to App Governance in Defender with Defender XDR Unified RBAC. Some Microsoft Entra admin roles will gain or lose permissions in October 2026.
New Security Detection Report in the Teams Admin Center
Microsoft published a new Security Detection Report in the Teams admin center to provide unified visibility into messaging security detections across Microsoft Teams.
Unified RBAC becomes the default in Microsoft Defender
Microsoft Defender Unified RBAC is becoming the default access model in selected tenants. Tenants still using legacy RBAC will be automatically enabled for Unified RBAC, replacing legacy RBAC as the default authorization source. Security admins should verify their tenant status.
Meeting Bot Detection in Microsoft Teams
Microsoft is rolling out bot detection for Teams Meetings, requiring an additional approval step before external meeting assistant bots can be admitted from the lobby. Administrators can configure a new policy setting to control bot access tenant-wide, including blocking detected bots entirely.
Secure Boot assessment in Microsoft Defender
Microsoft Defender now flags devices still relying on the older Secure Boot 2011 certificates, helping organizations to identify which ones need attention before they begin expiring in June 2026.
Licensing updates for Microsoft Cloud products – May 2026
Microsoft has released the Microsoft 365 E7 and Agent 365 licenses, updated the pricing for Windows 365 Business and Dragon Copilot, and discontinued the Windows 365 Business with Windows Hybrid Benefit product.
Smart App Control in Windows 11 can now be re-enabled without reinstalling
Smart App Control in Windows 11 can now be enabled or disabled at any time without reinstalling the operating system. The April 2026 cumulative update removes the restriction that previously required a full Windows reset to re-enable it.
New External Domain Anomalies Report in the Teams admin center flags unusual external communication patterns
A new External Domain Anomalies report in the Teams admin center should provide an overview of how users in the tenant interact with people outside the organisation and flag sudden spikes or unusual engagement that fall outside normal patterns.