This week: Action may be required: Review who can create agents in Microsoft Ent… + 1 more E8 change (Mon 26 Oct)

26 October 2026 · 10 changes that matter, 391 reviewed.

1. Microsoft Viva: Enhanced Microsoft Copilot in Viva Engage — Copilot in Viva Engage now offers deeper conversational analysis and cross-M365 integration, including PowerPoint generation. This expands AI's access to internal communications, increasing data exposure risks.
2. Action may be required: Review who can create agents in Microsoft Entra — Microsoft Entra will allow all users to create new agent blueprints by default starting November 2026. This expands the attack surface by enabling any user to provision autonomous agent identities, requiring immediate administrative review to restrict this capability. [Restrict Administrative Privileges] (act before 2026-11-04)
3. Copilot Studio: Computer Use for web browsing on GitHub Copilot Harness — Copilot Studio agents can now browse and interact with websites using natural language. This expands agent capabilities beyond configured knowledge sources, increasing potential for data exfiltration and unapproved information access.
4. Work IQ: Real Time Transcripts — Microsoft Teams meeting transcripts are now available in real-time to applications and agents. This increases data exposure risks and requires careful governance of AI agents accessing sensitive conversations.
5. Work IQ: Agent Policy Governance — New policy controls enable administrators to govern AI agents and their capabilities at scale. This enhances security posture by allowing granular control over autonomous agent actions, mitigating risks associated with unmanaged AI. [Restrict Administrative Privileges, Application Control]
6. Work IQ: Human in the loop — Copilot agents can now pause for human review or approval before continuing automated tasks. This introduces a critical control point for agentic AI workflows, mitigating risks of autonomous actions.
7. Microsoft Copilot Studio: Support for sensitive documents protected with Microsoft Purview Information Protection (MPIP) — Copilot Studio agents can now process Purview-protected sensitive documents, enforcing label protections end-to-end. This enables secure AI agent interaction with classified data, but requires careful governance.
8. Word: Legal plugins in Copilot — Copilot in Word now supports third-party legal plugins, allowing AI to process and generate legal documents using external data. This expands AI's access to sensitive legal information, increasing data leakage and compliance risks.
9. Deprecation of Citrix mVPN Support in Microsoft Edge for Android — Microsoft Edge for Android will no longer support Citrix Mobile VPN (mVPN) integration from September 2026 due to legacy component challenges. Organizations using this integration must plan for alternative secure mobile access solutions.
10. Microsoft Defender for Office 365: Remediation actions from the Teams message entity flyout — Microsoft Defender for Office 365 now allows security teams to directly block malicious Teams message senders and domains from the message flyout. This streamlines incident response for Teams-based threats, improving efficiency and reducing navigation.

What we ignored

• Dynamics 365 Sales: Create pricing rules for attribute-based and volume-based pricing — This is a business feature, not relevant to security posture or controls.
• Dynamics 365 Sales: Create product rules to guide sellers to valid product configurations — This feature is a business process improvement, not a security control.
• Microsoft Edge: Simplified Energy Saver — This is a power management feature, not a security control.
• Dynamics 365 Field Service: Keep Project Staffing and Field Service Scheduling Aligned — Operational feature with no direct security relevance.
• Dynamics 365 Business Central: Expense Agent - Use Expense Manager role center — Functional UI update, no security relevance.