CYBERSECURITYTRACKER
Permanent story citation

What’s new in Microsoft Security: November 2026

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12502

As cited

Copy frozen at (site build).

cloud saas

What’s new in Microsoft Security: November 2026

Microsoft released November 2026 updates to its security platform that focus on managing artificial intelligence (AI) agent permissions and containment at scale. Key features include Dynamic Permissions for task-scoped agent authority that adapts as risk changes, Microsoft Execution Containers for least-privilege isolation of local AI agents on Windows, and expanded Endpoint Privilege Management allowing standard users to modify network settings with admin-approved elevation. Additional updates include new consolidated Defender Experts views in the Defender portal, SQL Server protection in Azure Government, local AI agent discovery capabilities, and Secure Now threat-to-remediation mapping in Security Exposure Management.

Why it matters: Security teams managing AI agents across their environment need to implement these controls to prevent agents from exceeding task scope and accessing unauthorized resources. Endpoint administrators should evaluate Execution Containers and Dynamic Permissions to enforce least-privilege boundaries on agentic workloads. Organizations using SQL Server in Azure Government gain simplified deployment options, and teams relying on Defender Experts can now track hunts and investigations in a consolidated interface.

VendorsMicrosoftApple
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary