(Updated) 2026 Microsoft 365 Packaging Update

🚨 The Signal: Microsoft 365 packaging updates will roll out new security features, including advanced phishing protection, URL time-of-click, Intune remote help, endpoint privilege management, and cloud PKI. This enhances device and email security posture.

The Impact

Security teams and IT admins are affected by new security capabilities that reduce endpoint and email-based attack vectors.

• Security Teams: Reduced phishing and malware risk due to enhanced email protection.
• IT Admins: Improved device security and management through new Intune features.
• Security Teams: Stronger identity posture with endpoint privilege management.
• IT Admins: Streamlined certificate management with Cloud PKI.

The Action

1. Review Microsoft Defender for Office 365 Plan 1 policies for advanced phishing and malware protection.
2. Evaluate and plan deployment of Intune Remote Help for secure remote support.
3. Assess and configure Intune Endpoint Privilege Management policies for least-privilege access.
4. Plan and implement Microsoft Cloud PKI for certificate lifecycle management.
5. Review and update relevant security documentation and incident response plans to incorporate new capabilities.

Domain: Defender · Impact: high · Workload: Microsoft Defender · Essential Eight: Restrict Administrative Privileges, User Application Hardening, Multi-Factor Authentication · ISM: ISM-0109, ISM-0123, ISM-0140, ISM-0445, ISM-0974, ISM-1173, ISM-1175, ISM-1228, ISM-1380, ISM-1401, ISM-1412, ISM-1485, ISM-1486, ISM-1504, ISM-1505, ISM-1507, ISM-1508, ISM-1509, ISM-1542, ISM-1585, ISM-1647, ISM-1648, ISM-1650, ISM-1667, ISM-1668, ISM-1669, ISM-1670, ISM-1679, ISM-1680, ISM-1681, ISM-1682, ISM-1683, ISM-1686, ISM-1688, ISM-1689, ISM-1815, ISM-1819, ISM-1823, ISM-1824, ISM-1859, ISM-1860, ISM-1872, ISM-1873, ISM-1874, ISM-1883, ISM-1892, ISM-1893, ISM-1894, ISM-1897, ISM-1898, ISM-1906, ISM-1907