Today on The Tenant Desk: Microsoft sets hard deprecation deadlines for legacy SharePoint external authentication, while new proxy-based frameworks offer a shortcut for fine-tuning AI agents without rewriting application code.
On Sunday, August 30, technical documentation for the August 2026 Microsoft 365 roadmap confirmed that Microsoft is mandating the transition of all SharePoint external sharing from legacy one-time code mechanisms to Microsoft Entra B2B guest accounts by October 2026. Simultaneously, price updates established on July 1, 2026, set commercial enterprise pricing at $39 per user per month for M365 E3 and $60 per user per month for E5, alongside new E7 licensing tiers containing specialized cost-governance tools.
Why it matters
External collaboration channels will experience immediate access denials in October 2026 if external partners lack provisioned Entra B2B guest accounts. IT consultants must audit external sharing usage reports across regulated client tenants immediately to establish automated B2B guest lifecycle workflows before the hard cutover. Concurrently, calculating license allocations against the E3/E5 pricing shifts is necessary to manage tenant budget adjustments.
As we covered over the weekend, Microsoft is phasing out the lightweight Admin App embedded within Microsoft Teams, Outlook, and Microsoft365.com under Message Center notification MC1462922. Pre-installation for new tenants halts in August 2026, with complete removal enforced by October 2026. Tenant administrators are instructed to redirect workflows to specialized admin centers or utilize the Microsoft 365 Admin Agent.
Why it matters
Deprecating the embedded Admin App removes a simplified management option often used by delegated helpdesk staff and small business consultants. IT teams must update internal administrative runbooks and reassign administrative entry points to the full Microsoft 365 admin center before access is cut off in October. The change coincides with a cluster of late-2026 administrative retirements across the suite.
On Saturday, August 29, Microsoft released Agent Lightning v1.0, an MIT-licensed reinforcement learning framework designed to optimize existing AI agents without altering underlying codebases. The platform places an API gateway between the agent harness and the model endpoint to intercept call loops and train execution policies via Proxied Policy Optimization (PPO) or Group Relative Policy Optimization (GRPO). In benchmark evaluations, a Qwen3.5-9B model trained with the framework saw its score on SWE-bench Verified improve from 41.8% to 56.4% using 6,000 training samples.
Why it matters
By decoupling policy training from the application codebase through an API proxy, engineering teams can implement reinforcement learning over existing LangChain, AutoGen, or Copilot Studio agent harnesses without refactoring production logic. This architectural pattern lowers the technical barrier for improving agent task accuracy on multi-step workflows. For developers, it establishes a practical mechanism for fine-tuning open-weight or hosted models against domain-specific enterprise telemetry.
Following platform feature additions introduced on August 19, 2026, Anthropic officially moved Agent Skills and the Skills API (`/v1/skills`) out of beta on Sunday, August 30, removing the mandatory `skills-2025-10-02` beta header. An accompanying Python SDK update on August 27 finalized deletion semantics so that deleting a Skill automatically purges all historical versions, while updating container types to `BetaContainerSkill`. The endpoint stabilizes custom skill distributions across enterprise Anthropic API deployments.
Why it matters
Removing experimental beta headers provides API contract stability for enterprise software teams building programmatic agent workflows on top of Claude models. Production deployments can now invoke custom document-parsing and workspace skills without risking breaking changes from deprecated header flags. Developers gain a predictable lifecycle model for managing and versioning organizational skills across distributed agent deployments.
In Grant v. Belangia, a unanimous panel of the U.S. Court of Appeals for the Fourth Circuit ruled that South Carolina's voting statute reserving no-excuse mail-in ballots exclusively for citizens aged 65 and older violates the Twenty-Sixth Amendment. Chief Judge Roger Gregory remanded the case to the U.S. District Court to determine whether the proper judicial remedy is extending no-excuse mail voting to all eligible voters or stripping the age-based exemption entirely ahead of the 2026 midterms.
Why it matters
This decision represents an unusually direct application of the Twenty-Sixth Amendment to strike down a state absentee voting restriction, establishing an explicit circuit split with prior rulings in the Fifth and Seventh Circuits. The sharp split makes Supreme Court intervention likely to resolve the constitutionality of age-restricted mail balloting. State election directors face immediate operational uncertainty as district courts evaluate whether to expand or contract absentee access shortly before election cycles.
Data released on Sunday, August 30, by the Ludwig Institute for Shared Economic Prosperity (LISEP) showed its True Rate of Unemployment—which tracks functionally unemployed workers earning below-poverty wages or involuntarily working part-time—rose to 24.9%. The figure contrasts with the official Labor Department headline unemployment rate of 4.1%, marking four consecutive months of functional unemployment increases driven by living costs and cautious corporate hiring.
Why it matters
The widening gap between headline unemployment metrics and functional underemployment underscores persistent economic strain on lower- and middle-income households. Workers constrained by part-time shifts or stagnant real wages face compounding pressure from elevated food and housing costs. For policy analysts, alternative gauges like LISEP provide a more realistic assessment of household financial health than standard top-line labor figures.
Following the emergency advisory we tracked over the weekend regarding active exploitation of self-hosted SharePoint instances, the Cybersecurity and Infrastructure Security Agency officially added CVE-2026-45659 to its Known Exploited Vulnerabilities catalog on Monday, August 31. Originally patched in May 2026, the high-severity deserialization flaw (CVSS 8.8) allows authenticated users without administrative privileges to trigger arbitrary code execution, with threat intelligence feeds indicating parallel active exploitation by multiple unrelated groups.
Why it matters
This exploit vector differs from recent unauthenticated SharePoint flaws because any valid low-privilege domain account can trigger remote code execution on internal servers. Organizations running on-premises or hybrid SharePoint instances must verify that the May 2026 patch cycle was applied and audit internal service accounts for unauthorized process execution. IT security teams should treat internal user accounts as untrusted boundary points until deserialization updates are confirmed.
Security researchers documented a misconfigured Python web server on Monday, August 31, exposing an active adversary-in-the-middle (AiTM) phishing framework targeting Microsoft 365 tenants. Operated by an actor dubbed 'codemado', the infrastructure combined custom modifications of the Evilginx reverse-proxy framework with automated device-code authorization prompts and SimpleHelp remote desktop access to capture authenticated session tokens in real time.
Why it matters
Bypassing multi-factor authentication via automated device-code flows represents a high-efficiency vector against organizations that still allow unconstrained OAuth device prompts. Administrators must enforce strict Conditional Access policies restricting device-code authentication to compliant, corporate-managed devices. Migrating user groups to phishing-resistant FIDO2 passkeys remains the primary mitigation against proxy-based session token hijacking.
Real-world DC fast-charging benchmark tests of the 2027 Rivian R2 published on Monday, August 31, demonstrated a peak charging rate of 226 kW from its 87.9 kWh net battery pack (a 2.6C charge rate). However, telemetry showed that when using legacy CCS1-to-NACS physical adapters at high-amperage 400V stations, temperature sensors in the adapter handle triggered automatic thermal throttling, reducing current delivery to prevent connector overheating.
Why it matters
While vehicle battery management systems can accept high charge rates, legacy physical adapters act as thermal bottlenecks during peak 500A+ charging sessions. EV owners and fleet operators planning long-distance routes must account for reduced charge speeds when using retrofitted adapters at non-native stations. The data reinforces why automakers are expediting native, factory-integrated NACS ports to sustain maximum charge curves without adapter-induced throttling.
Eversource submitted a petition to the Massachusetts Department of Public Utilities on Monday, August 31, requesting approval to expand its networked geothermal pilot in Framingham. The proposed expansion adds 0.61 miles of subterranean piping to connect 44 additional buildings—including local public schools and multi-family housing—to the shared thermal loop. Backed by $8.6 million in federal grants, Eversource seeks DPU authorization to recover an additional $7 million to $9.7 million in capital costs through customer utility tariffs.
Why it matters
The Framingham project is a primary test case for whether regulated gas utilities can transition business models toward operating networked thermal energy infrastructure. Expanding the loop into public schools and multi-family residential structures tests the physical and financial viability of shared ground-source heating in dense urban climates. A favorable DPU ruling would establish a regulatory template for tariff-based utility thermal expansion across New England.
Massachusetts Governor Maura Healey signed special legislation (S.3181) enabling a joint fall special election across Montague, Gill, Bernardston, Leyden, Northfield, and Warwick. The bill resolves statutory voting conflicts, allowing Montague to hold a ballot election alongside five neighboring towns on October 6 to vote on establishing the Great River Regional School District, which would merge administration for nearly 1,400 students across three existing rural districts.
Why it matters
S.3181 bypasses a legislative obstacle that previously prevented representative town-meeting municipalities from participating in synchronized ballot votes with open town-meeting peers. If approved on October 6, the super-regionalization model will consolidate administrative overhead across six rural towns while maintaining existing neighborhood elementary schools. The model serves as a structural blueprint for rural school districts contending with declining enrollments and rising municipal operating costs.
A study led by Columbia University Irving Medical Center researchers, published in Nature on Sunday, August 30, analyzed UK Biobank data across 500,000 individuals using machine learning biological age markers across 17 organ systems. The data demonstrated a U-shaped correlation where individuals sleeping under six hours or over eight hours per night exhibited accelerated biological aging markers across metabolic, cardiovascular, and immune systems, with optimal baseline markers localized strictly between 6.4 and 7.8 hours.
Why it matters
The multi-organ analysis demonstrates that excessive sleep duration is correlated with multi-system physiological aging rather than offering biological protection. By analyzing cellular markers across 17 distinct organ networks simultaneously, the study provides a broader biological baseline for sleep medicine beyond single-metric neurological assessments. The findings offer quantitative guidance for sleep duration targets in preventative health planning.
Hard Identity Boundaries Mandate Structural Tenant Migrations Microsoft 365 administrators face imminent migration deadlines as Microsoft enforces Entra B2B guest account structures for external sharing and mandates passkeys while deprecating legacy EWS endpoints and SMS MFA.
AI Infrastructure Execution Shifts to Continuous Runtime Proxies Architectures are standardizing on event-driven runtime proxies and API gateways rather than open-ended prompt loops, decoupling policy enforcement and reinforcement learning from underlying model codebases.
Adversary-in-the-Middle Tooling Automation Bypasses Legacy MFA Threat actors are weaponizing open-source reverse-proxy frameworks and AI-assisted prompt modifications to execute real-time session theft and device-code phishing against Microsoft 365 tenants.
Appellate Courts Revrive Constitutional Voting Limits Federal appellate panels are invoking rarely applied constitutional amendments to strike down state voting carve-outs, setting up high-stakes Supreme Court reviews ahead of the midterms.
Subterranean and Aquatic Thermal Loops Reshape Municipal Infrastructure New New England energy models are shifting toward district thermal networks, utilizing networked geothermal loops and marine heat extraction to bypass congested urban utility corridors.
What to Expect
2026-09-15—General availability date for online Dataverse mode access in Power Apps canvas applications.
2026-09-30—Microsoft 365 Admin App pre-installation halt ahead of full October removal.
2026-10-06—Six-town Massachusetts special election on establishing the Great River Regional School District.
2026-10-01—Phased disablement of Exchange Web Services (EWS) for unmanaged cross-tenant sharing begins.
2026-10-31—Full enforcement of Entra B2B guest account requirements for SharePoint external sharing.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
309
📖
Read in full
Every article opened, read, and evaluated
103
⭐
Published today
Ranked by importance and verified across sources
12
— The Tenant Desk
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste