This week: Microsoft Edge: Tab organization enhancements + 3 more E8 changes (Mon 7 Sept)

7 September 2026 · 10 changes that matter, 127 reviewed.

  1. Microsoft Edge: Tab organization enhancements — Microsoft Edge now suggests tab groupings and names using AI. This feature, enabled by default, could expose sensitive tab titles to Microsoft services, impacting data privacy and compliance for Australian government and critical infrastructure. [User Application Hardening]
  2. Microsoft Copilot Studio: Deliver rich interactive app experiences in Copilot Studio agents — Copilot Studio agents can now display interactive user interfaces directly within chat, allowing users to interact with data without leaving the conversation. This introduces new potential attack surfaces for data exfiltration and malicious content rendering.
  3. Microsoft Copilot Studio: Introducing an App- and Intent-First Agent Creation Experience — Copilot Studio now simplifies agent creation by starting with the application the agent will use. This streamlines configuration, potentially increasing agent deployment and the attack surface if not governed properly.
  4. Microsoft 365: Entra ID Backup & Recovery — Microsoft Entra ID now offers extended 30-day backup and point-in-time recovery for Entra objects. This significantly enhances an organisation's ability to recover from accidental deletions or malicious attacks affecting identity data. [Regular Backups]
  5. Microsoft Teams: Copilot Chat for chats, channels, calls, and meetings in GCC, GCC High, and DoD — Copilot Chat is now available across Teams chats, channels, calls, and meetings in GCC. This expands AI-driven summarization and information retrieval, increasing potential exposure of sensitive data if not properly governed.
  6. Excel: Excel canvas — Excel's new Copilot-generated canvas creates interactive data views that auto-update. This introduces new AI-driven data summarization and visualization, increasing potential for data exposure and prompt injection risks.
  7. Microsoft Copilot Studio: Streamlining experiences from Copilot Studio Agents in Microsoft 365 Copilot — Copilot Studio agents now integrate more smoothly with Microsoft 365 Copilot Chat, improving user experience with consistent formatting and interactive features. This change enhances agent usability but requires vigilance over agent permissions and data access.
  8. Microsoft 365: Organizational Data Service is now available in GCC-High — Microsoft 365 Organizational Data Service is now available in GCC-High. This service ingests HR data to power Copilot and M365 apps, centralizing organizational data for enhanced features and data quality checks.
  9. Microsoft Copilot Studio: Enabling makers to require human approval for tool calls — Copilot Studio now allows human approval for agent tool calls, enabling a 'human-in-the-loop' for high-risk actions like sending emails or processing payments. This provides a critical guardrail for autonomous agent operations. [Restrict Administrative Privileges]
  10. SharePoint: Site Skills in Copilot in SharePoint — SharePoint Copilot gains enhanced 'Site Skills' management, including editing, versioning, and duplication. This allows better governance and reuse of AI capabilities, but also introduces new vectors for information exposure if not managed securely. [Restrict Administrative Privileges]