The window to rely on legacy SharePoint guest passcodes is officially closing in October 2026. At the same time, security teams face a new OAuth client ID spoofing technique that silently enumerates Entra ID accounts, while Copilot Studio reaches general availability with dedicated autonomous agent identities.
Microsoft announced that SharePoint One-Time Passcode (SPO OTP) authentication for external sharing will be fully retired between October 1 and October 31, 2026. External collaboration will transition entirely to Microsoft Entra B2B integration.
Why it matters
For consultants managing tenant-to-tenant collaboration or client site access, this requires an immediate audit of legacy external sharing links. Any guest accounts relying on ad-hoc email passcodes will lose access unless Entra B2B guest invitation flows and Conditional Access policies are explicitly configured before October.
Microsoft announced a September 2026 preview for a new Purview Information Protection report that measures per-policy file coverage against simulation snapshots across SharePoint and OneDrive locations.
Why it matters
Unlabeled sensitive files remain one of the largest data-leakage risks when rolling out Microsoft 365 Copilot. This report provides administrative proof of which document libraries are successfully evaluated by auto-labeling policies, allowing governance leads to patch classification gaps before opening content to AI search indexing.
Building on the Copilot Agent Builder updates and Agent 365 governance expansions we've been tracking, Microsoft has brought its rebuilt Copilot Studio platform, Workflow Designer, and Foundry Hosted Agents to general availability. The release introduces run-only agent sharing and native Entra agent identity previews.
Why it matters
The shift from simple conversational bots to managed agent harnesses with dedicated Entra identities redefines Power Platform architecture. It provides the structured lifecycle management required to build compliance-ready autonomous workflows in regulated environments.
Details published on Microsoft's new Copilot Credits billing model clarify how advanced autonomous agents in Copilot Studio and Cowork will charge against tenant consumption pools alongside seat-based M365 Copilot licenses.
Why it matters
Enterprise IT managers must re-evaluate their AI budget forecasts. While standard user productivity chat remains tied to seat licenses, scaling custom agent workflows now introduces direct cloud consumption charges that require cost-center tracking.
Architectural analysis demonstrates how centralized AI gateways are replacing direct API calls to manage authentication, model routing, token throttling, and safety policies across multi-model deployments.
Why it matters
Connecting line-of-business applications directly to underlying LLM APIs creates severe observability and security gaps. Establishing a central gateway pattern gives enterprise architects a single control plane to enforce data guardrails and audit agent API usage.
Validating the enterprise survey data we tracked last week—which identified poor data foundations as the leading barrier to scaling AI—Infosys reported reaching 91% monthly active usage across 100,000 Microsoft 365 Copilot seats. The firm noted that further value creation now depends on standardizing those underlying data repositories and centralizing agent frameworks rather than simply expanding seat access.
Why it matters
This deployment provides concrete evidence that seat rollout alone hits a plateau without clean data architectures. Enterprises looking for sustained productivity gains must focus engineering effort on underlying knowledge layers and governed agent permissions.
Security researchers identified an attack technique in Microsoft Entra ID where threat actors supply spoofed client IDs in OAuth 2.0 requests. This allows attackers to perform account enumeration and password validation without generating standard sign-in log events.
Why it matters
This silent enumeration technique bypasses baseline log alerting and primary security monitoring tools. Security teams must expand Conditional Access policies to evaluate application-agnostic authentication requests and monitor for anomalous token request patterns.
Microsoft Threat Intelligence detailed an active campaign named EtherHiding that retrieves command-and-control payloads from smart contracts on the BNB Chain using fake CAPTCHAs and terminal scripts.
Why it matters
Hosting attack commands on a decentralized blockchain renders traditional domain blocklists and server takedowns ineffective. Defenders must rely on endpoint host protection to block unauthorized PowerShell and Terminal executions rather than network infrastructure indicators.
Charging network operator Chaevi extended its deployment of mobile energy storage and fast-charging trucks at unserved rest stops to handle peak summer highway travel demand through September.
Why it matters
Mobile fast-charging rigs offer a flexible short-term solution for seasonal highway travel spikes, bypassing long utility grid interconnection queues for permanent fixed stations.
Data center operators within the ISO-New England grid area are navigating compressed 6-to-12-week execution windows to structure hybrid virtual and physical power purchase agreements amid regional transmission constraints.
Why it matters
Soaring load demand driven by AI model training and regional cloud expansion is clashing directly with regional grid capacity and state clean-energy mandates, driving up long-term energy procurement costs.
Researchers at Nankai University created a neuromorphic bionic nerve device capable of translating acoustic signals directly into semantic neural patterns to bypass damaged auditory nerve pathways.
Why it matters
Unlike traditional cochlear implants that simply stimulate acoustic frequencies, encoding semantic acoustic information directly could dramatically enhance speech comprehension for individuals with severe sensorineural hearing loss.
Performance testing showed that the built-in Windows 11 Weather application regularly exceeds 1.2GB of RAM usage due to underlying Microsoft Edge WebView2 processes loading web scripts and dynamic advertising.
Why it matters
Heavy memory bloat in basic operating system utilities impacts overall system performance, particularly on legacy client hardware or baseline 8GB business laptops running multiple enterprise background agents.
Legacy Authentication Cutoffs Accelerate Entra B2B Shifts The upcoming phase-out of SharePoint OTP and Exchange Web Services is compelling enterprise tenants to formalize guest identities within Microsoft Entra B2B before autumn deadlines.
Identity Control Planes Target Stealth Authentication Exploits New attack vectors exploiting OAuth client ID spoofing and local Windows Hello session keys highlight the need for strict conditional access and continuous device-state verification.
Purview Reporting Closes Copilot Data Boundary Blind Spots Granular auto-labeling coverage tracking gives compliance teams the visibility required to inspect unclassified sensitive data before exposing it to Graph-grounded chat.
Enterprise AI Shifts to Managed Runtime Scaffolding Organizations are moving past simple prompt interfaces toward structured AI gateways, hosted agent harnesses, and consumption-based credit models to govern autonomous execution.
Regional Infrastructure Constraints Dictate Clean Energy Expansion From mobile highway fast chargers to tight New England PPA execution windows, physical power and grid delivery timelines are shaping modern technology deployments.
What to Expect
2026-08-12—Total solar eclipse path moves across Greenland, Iceland, and Spain.
2026-09-01—Targeted preview availability for Microsoft Purview Information Protection auto-labeling per-policy coverage reports.
2026-10-01—Microsoft begins SPO OTP deprecation rollout for Entra B2B guest access and starts phased shutdown of Exchange Web Services.
2026-11-03—Microsoft officially ends preview support for 'MemberOf' dynamic group rules in Entra ID.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
290
📖
Read in full
Every article opened, read, and evaluated
55
⭐
Published today
Ranked by importance and verified across sources
12
— The Tenant Desk
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste