Microsoft brings natural-language orchestration to Copilot Studio, federal courts issue a new restraining order against Postal Service ballot directives, and CISA warns of a fresh wave of zero-day exploits hitting self-hosted SharePoint servers.
Following last week's release of public proof-of-concept exploits against self-hosted SharePoint Servers, the Cybersecurity and Infrastructure Security Agency issued an urgent advisory Saturday on three newly flagged vulnerabilities (CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164). Threat actors are actively exploiting these fresh flaws to exfiltrate IIS machine keys, deploy web shells, bypass local security controls, and execute arbitrary code on internal networks.
Why it matters
This advisory expands the surface area of active zero-day chains targeting on-premises infrastructure beyond the authentication bypasses seen days ago. Stolen IIS machine keys allow attackers to forge viewstate payloads and maintain persistent access even after basic software patches are applied. Administrators managing self-hosted environments must immediately isolate internet-facing web applications, apply emergency security updates, and audit IIS logs for compromised machine key artifacts.
Under Message Center notification MC1462922, Microsoft confirmed on Friday that it is retiring the lightweight Admin app built for small business management in Teams, Outlook, and Microsoft365.com. Pre-installation for new administrators stops in late August 2026, with complete application deprecation set for October 15, 2026. Microsoft is directing administrators to transition their management operations to the standard Microsoft 365 Admin Center or adopt the Microsoft 365 Admin Agent.
Why it matters
Retiring client-embedded admin applets eliminates redundant management surfaces across the Microsoft 365 ecosystem. For consultants supporting small-to-medium enterprise tenants, this change requires updating client administrative documentation and retraining delegable staff before October. It also accelerates Microsoft's push to position the Microsoft 365 Admin Agent as the primary conversational interface for routine tenant maintenance.
As Microsoft transitions Copilot Studio away from rigid topic flows toward the skill-based execution we've been tracking, the company introduced a GitHub Copilot harness on Saturday. Rather than relying on deterministic decision trees, this alternative authoring environment interprets natural-language instructions to dynamically select tools and knowledge sources. The unified Build tab consolidates instructions, memory, and model selection, with billing calculated via Copilot Credits.
Why it matters
Moving from deterministic decision trees to natural-language orchestration changes the underlying maintenance model for custom enterprise agents. Because agents built on the GitHub Copilot harness cannot be ported back to standard Copilot Studio topic flows, solution architects must choose the appropriate runtime before deployment. While this approach dramatically reduces initial workflow design overhead, it requires tighter evaluation frameworks to monitor non-deterministic tool selection in production.
GitHub altered its global model policy for Copilot Business and Enterprise on Wednesday, changing the default administration setting so that newly available language models are enabled automatically unless explicitly opted out. Concurrently, GitHub announced the complete retirement of six specific models on August 31, including Gemini 3.1 Pro alongside select Claude Opus and Sonnet builds.
Why it matters
The shift to opt-out model activation complicates governance for regulated organizations that require formal vendor security reviews before new AI models touch enterprise repositories. Furthermore, because model endpoints will shut down on August 31, development teams have only days to update hardcoded model references in custom developer extensions, scripts, and CI/CD pipelines to prevent pipeline failures.
The legal standoff over mail-in ballot delivery rules continues, as U.S. District Judge Indira Talwani issued a 14-day temporary restraining order late Thursday against the U.S. Postal Service. Responding to the lawsuit filed last week by 25 states after the Supreme Court lifted a prior injunction on procedural grounds, Judge Talwani ruled that immediate implementation of the USPS rules—which mandate specific ballot envelopes and federal barcodes—would cause irreparable voter disenfranchisement.
Why it matters
The injunction temporarily stops the federal effort to compel state election authorities to submit voter lists to a validation portal just weeks before early voting starts. State election directors successfully argued that modifying ballot paper formats and software integration on short notice was logistically impossible. The scheduled September 3 hearing will determine if a full preliminary injunction holds through the election.
Mississippi County's 'Work Here. Live Here.' homeownership initiative is set to reach its 250th completed home this fall, supported by $550,000 in new commitments from local steel manufacturers including Big River Steel and Atlas Tube. Launched in 2022, the program combines contributions from 16 private employers to provide workers with up to $50,000 toward new home construction or $25,000 for existing purchases, generating $65.9 million in residential real estate investment.
Why it matters
Direct employer contributions toward home equity represent a practical model for resolving rural housing shortages in expanding industrial corridors. By tying manufacturing retention directly to housing grants, the initiative has successfully drawn 57% of participating buyers from outside the county. This public-private partnership provides a scalable template for industrial regions seeking to build working-class family wealth without relying entirely on federal housing block grants.
Adding to the surge of Adversary-in-the-Middle (AiTM) Microsoft 365 attacks like the NovaCookies and EvilTokens campaigns we've covered, security researchers reported Friday that a new operation dubbed Mirage2FA has compromised more than 4,500 organizations across 94 countries. Operated by the threat group LinX Coders, the campaign uses malicious `.htm` and `.svg` attachments alongside QR codes to proxy live sign-in traffic, heavily targeting the U.S. technology and manufacturing sectors.
Why it matters
Mirage2FA highlights the complete failure of legacy MFA methods against real-time session proxies. Because the attack intercepts and relays valid session cookies directly to the adversary, standard password resets do not terminate the intrusion. Security teams must actively revoke active token grants in Entra ID and enforce device-bound FIDO2 credentials to neutralize fileless AiTM session theft.
Microsoft confirmed on Saturday that beginning September 1, 2026, Microsoft Entra ID will automatically prompt users who rely on SMS or voice verification to register FIDO2 passkeys upon sign-in. The policy is the first phase of a complete deprecation roadmap that will fully disable SMS and telephony-based multi-factor authentication on February 1, 2027.
Why it matters
Phishing-resistant authentication is transitioning from a recommended security baseline to an enforced platform configuration across all Entra tenants. Administrators must audit user authentication methods immediately to prevent login friction when automated registration prompts go live on Tuesday. Establishing hardware key deployment plans or platform passkey policies now will protect identity directories against automated session hijacking before telephony channels are retired.
Following recent J.D. Power data showing DC fast charger failure rates falling to 12% nationwide, the Joint Office of Energy and Transportation confirmed Saturday that the total number of public fast-charging ports has more than doubled since 2023. Parallel metrics from Paren's charging reliability index show a corresponding reduction in station downtime and higher first-attempt session success rates.
Why it matters
Quantitative gains in network uptime and charger density indicate that public infrastructure investments are beginning to resolve early EV adoption bottlenecks. Higher success rates on first plug-in attempts reduce long-distance road trip friction for non-Tesla drivers. Continued reliability improvements are essential as more automakers transition their vehicle fleets to native NACS connectors over the next model year.
The Massachusetts Bay Transportation Authority announced a suite of transit affordability updates on Friday. Beginning September 1, riders will receive an expanded two-hour unlimited transfer window across subway, bus, and ferry lines, alongside the elimination of higher express bus surcharges. Additionally, Governor Maura Healey extended the 50% discount on monthly Commuter Rail passes and the $1 Weekend Companion Fare through November 2026.
Why it matters
Standardizing transfer rules and removing express bus fare penalties directly lowers monthly commuting costs for workers across Greater Boston. These policy adjustments aim to boost system-wide ridership while reducing financial friction for multi-segment transit commutes. For regional employers and municipal planners, predictable and affordable transit fares help stabilize regional workforce mobility.
Follow-up spectroscopic observations conducted by Uppsala University researchers using the James Webb Space Telescope have disproved two previously flagged Dyson sphere candidates from Project Hephaistos. High-resolution mid-infrared imaging revealed that earlier observations by NASA's WISE satellite had blended the light of background galaxies with foreground M-dwarf stars, creating false signatures of infrared excess.
Why it matters
Eliminating these anomalies demonstrates the necessity of high-resolution space observatories in refining astronomical survey data. Lower-resolution sky maps frequently conflate distant background galactic dust emissions with foreground stellar systems, producing false technosignature leads. JWST's precise angular resolution ensures researchers can rule out optical blending before drawing exotic conclusions about distant star systems.
Microsoft issued optional preview update KB50120998 for Windows 11 on Friday, adding long-requested interface updates such as a movable taskbar and a resizable Start menu. However, early adopters report widespread visual bugs, including mouse pointers locking into an enlarged Windows 98-style white cursor and desktop backgrounds defaulting to solid black screens.
Why it matters
While optional preview builds allow power users to test upcoming user interface features, these cosmetic regressions force users to choose between desktop customization and visual stability. Because there is no simple in-place toggle for the pointer bug, affected users must uninstall the update entirely. IT support teams should expect calls regarding corrupted wallpapers and retro cursor glitches if users manually check for updates.
Natural-Language Orchestration Expands Beyond Explicit Flow Canvas Architectures in Copilot Studio and GitHub are shifting toward instruction-driven execution runtimes that rely on dynamic model reasoning rather than fixed step-by-step decision trees.
Adversary-in-the-Middle Attacks Force Hard Identity Sunset Dates Widespread token theft from session-hijacking campaigns like Mirage2FA is driving Microsoft to enforce hardware-bound passkeys and retire SMS and voice verification entirely.
Emergency Injunctions Enforce Administrative Readiness in Federal Directives Federal district courts continue to strike down unilateral executive regulations when agency timelines conflict directly with state election mechanics and statutory deadlines.
Private Industrial Capital Subsidizes Regional Workforce Housing Manufacturing hubs are increasingly pooling employer contributions into direct down-payment assistance to secure local labor forces amid national housing deficits.
High-Resolution Mid-Infrared Spectroscopy Refines Exoplanetary Models Follow-up space telescope observations are systematically disentangling background galactic emissions from stellar targets, correcting lower-resolution survey anomalies.
What to Expect
2026-08-30—Scheduled launch of NASA's $4B Nancy Grace Roman Space Telescope aboard a SpaceX Falcon Heavy.
2026-08-31—GitHub enforcement deadline to update hardcoded references for six deprecated Copilot LLMs.
2026-09-01—Microsoft Entra ID begins mandatory automatic passkey registration prompts for SMS and voice MFA users.
2026-09-03—Federal court hearing in Boston on permanent injunction against USPS mail-in voting rules.
2027-02-01—Final retirement deadline for SMS and voice authentication protocols across Microsoft Entra ID.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
335
📖
Read in full
Every article opened, read, and evaluated
107
⭐
Published today
Ranked by importance and verified across sources
12
— The Tenant Desk
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste