Microsoft outlines November 2026 security updates for AI agents, Intune, and Defender
- Severity
- Info
- Sources
- 1
What happened
Microsoft's monthly roundup introduces Dynamic Permissions with Dynamic Agent Risk and Dynamic Conditional Access, which can narrow agent permissions or require human approval as risk changes. Microsoft Execution Containers (MXC) is now generally available, applying OS-enforced least-privilege controls over files, networks, processes and user interactions for AI agents, with policy tuning before enforcement. Defender now discovers more than 50 local AI agents and their configured MCPs on Windows and macOS. No CVEs or patch actions are mentioned; defenders should review agent permissions and evaluate MXC and Defender discovery for local agent governance.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Review the new Microsoft Intune Endpoint Privilege Management system settings support if you want to limit standard user network changes.
- Explore Microsoft Execution Containers and Defender local AI agent discovery to understand agent activity in your environment.
- Use Secure Now in Microsoft Security Exposure Management to prioritise foundational controls.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Who and what is in it
Companies