Security

Microsoft Security November 2026: Key Updates

3 min read

Summary

Microsoft’s November 2026 security updates introduce new controls for AI agents, expanded least-privilege management in Intune, improved Defender Experts visibility, and simpler SQL Server protection in Azure Government. These changes help security and IT teams reduce risk, tighten access, and streamline operations across endpoints, identities, and AI workloads.

Need help with Security?Talk to an Expert

Introduction

Microsoft’s November 2026 security updates focus on a growing challenge for IT and security teams: controlling AI agents, enforcing least privilege, and simplifying protection across complex environments. For administrators, the latest changes bring more practical ways to limit access, improve visibility, and reduce deployment overhead.

What’s new

Secure AI controls for agent access

Microsoft introduced several new capabilities to govern AI agents more safely:

  • Dynamic Permissions gives agents task-scoped access for only as long as needed.
  • Dynamic Agent Risk continuously evaluates whether an agent’s behavior still matches its assigned task.
  • Dynamic Conditional Access can reduce permissions, block resource access, or require human approval when risk changes.

Together, these features are designed to help organizations prevent over-permissioned AI agents and respond when an agent moves outside expected behavior.

Microsoft Execution Containers now generally available

Microsoft Execution Containers (MXC) is now GA and provides OS-level containment for local AI agents on Windows.

Key benefits include:

  • Least-privilege boundaries across files, network, processes, and user interaction
  • Additional isolation options for higher-risk scenarios
  • Policy tuning and validation before broad enforcement

Microsoft also signaled future integration with Intune, Entra, and Microsoft Agent 365.

Intune Endpoint Privilege Management expands

Microsoft Intune Endpoint Privilege Management now supports elevation for additional system settings tasks.

Admins can allow standard users to update:

  • IPv4 settings
  • IPv6 settings
  • DNS server values on network adapters

For user-confirmed changes, organizations can require business justification, Windows authentication, or both. Microsoft also added onboarding improvements to simplify tenant adoption.

Defender improvements for operations and SQL protection

Microsoft Defender now includes:

  • A new Defender Experts MDR experience in the Defender portal with consolidated visibility into active and completed hunts, findings, and follow-up actions
  • General availability of the enhanced agent for Defender for SQL Servers on machines in Azure Government at resource and subscription scope, removing the need for Azure Monitor Agent in this scenario
  • Expanded discovery of local AI agents and configured MCPs across Windows and macOS, with support for more than 50 local AI agents

Exposure Management adds Secure Now context

Microsoft Security Exposure Management now links recent threat intelligence with Secure Now initiatives. This helps teams prioritize foundational controls such as reducing excessive permissions, protecting authentication flows, and addressing exposed systems.

Why this matters for IT admins

These updates are especially relevant for organizations balancing AI adoption with governance. Security teams gain better controls for agent behavior, while endpoint and infrastructure admins get more flexible least-privilege options and easier SQL protection deployment.

Next steps

  • Review Intune Endpoint Privilege Management settings for newly supported network configuration tasks
  • Assess whether MXC fits your AI agent containment strategy
  • Explore Defender portal updates for Defender Experts MDR workflows
  • Validate Azure Government SQL Server protection plans with the enhanced Defender agent
  • Use Secure Now to prioritize remediation of high-impact exposure areas

Need help with Security?

Our experts can help you implement and optimize your Microsoft solutions.

Talk to an Expert

Stay updated on Microsoft technologies

Read the original article by Alym Rayani
Microsoft SecurityIntuneDefenderAI securityleast privilege

Related Posts

Security

Email Threat Landscape Q3 2026: Key Microsoft Trends

Microsoft reported 7.3 billion email-based phishing threats in Q3 2026, with September alone reaching nearly 3 billion detections. The latest threat data shows shifting attacker tactics across spoofed sender domains, CAPTCHA-gated phishing, QR code lures, and Microsoft Teams social engineering, giving IT teams clear areas to review in their defenses.

Security

On-Premises Security Initiative: Microsoft Hardens Servers

Microsoft has announced a new on-premises security initiative focused on reducing risk for server workloads that must remain outside the cloud. The effort combines migration guidance, Secure Now recommendations, and product changes such as Baseline Security Mode, faster patching, hardened defaults, and expanded emergency mitigations for Exchange, SharePoint, and Skype for Business Server.

Security

Fake Download Campaign Delivers Trojanized Installers

Microsoft Threat Intelligence detailed a fake-download campaign that uses trojanized Inno Setup-style installers to silently deliver multiple monetization payloads in a single session. The activity matters to IT and security teams because it can turn devices into proxy, compute, or adware assets without informed user consent, increasing privacy, performance, and security risk.

Security

Microsoft Agent 365 Named Leader in Gartner 2026

Microsoft has been named a Leader in Gartner’s inaugural 2026 Magic Quadrant for AI Agent Management Platforms, highlighting momentum behind Microsoft Agent 365. For IT and security teams, the news underscores Microsoft’s push to bring identity, governance, discovery, and risk-based controls to enterprise AI agents across Microsoft and third-party ecosystems.

Security

Exploited Vulnerabilities: Key Patterns Defenders Must Know

Microsoft Security’s latest analysis shows that only about 0.5% of disclosed CVEs are exploited in the wild, but attackers consistently favor high-impact flaws such as remote code execution, privilege escalation, and authentication bypass. The findings matter for defenders because patching critical systems often takes weeks or longer, while weaponization can happen within days of disclosure.

Security

Claude Code Extension Attack: SSH Backdoor Findings

Microsoft Threat Intelligence analyzed a malicious Claude Code-branded extension briefly distributed through the Cursor marketplace that attempted to install an SSH backdoor, create reverse tunnels, and establish persistence. The incident appears limited to Cursor marketplace, but organizations should identify affected systems, preserve evidence, remove artifacts, and review endpoint and network telemetry for signs of compromise.