1. Power Automate: Endpoint Filtering for Enhanced UI Automation Security
Overview
Microsoft Power Automate is introducing a brand new endpoint filtering feature. This feature is going to boost security in UI automation tasks. That said, the feature is going to allow Power Automate users define which apps and which websites automation scripts can interact with. This extra layer of protection is definitely going to enhance the automation process. The feature is becoming generally available on June 17, 2025.
Impact
This update gives admins with a lot more control over automation workflows. Admins can now create or allow/deny lists for any specific apps/ websites by using Data Loss Prevention settings in Power Automate. This means now UI and browser automation actions will stay within boundaries of your organizational security policies while preventing any unauthorized interactions.
Action Needed
No action required at this moment !!
2. Microsoft 365 Copilot: Admin Controls and User File Uploads for Knowledge Sources
Overview
Microsoft 365 Copilot introduces new capabilities for admins/users, starting in mid May 2025. This allows file uploads as knowledge sources for agents in Copilot Studio. Admins will gain control of these files via M365 admin center and sensitivity labels will apply to agents. So, the supported file types will now include docx, pptx, pdf, others as well, with specific size/file number limits.
Impact:
● Users can now upload files to agents. Files stored in tenant owned Microsoft SharePoint Embedded (SPE) containers can also be uploaded to agents.
● Users can now upload files to agents. Files stored in tenant owned Microsoft SharePoint Embedded (SPE) containers can also be uploaded to agents.
● Admins can now manage agents from the M365 admin center. They can also manage SPE containers using SharePoint admin center/PowerShell.
● Maximum file sizes: 512 MB for certain file types (pptx, pdf, docx); 150 MB for others (txt, csv, xls). The maximum number of files allowed per upload is 20.
● Sensitivity labels will automatically apply to agents based on the uploaded files. The label will be set to the most restrictive one. Users without permission for the label will be denied access to the agent.
Action Needed:
3. Retirement of SharePoint Alerts: Key Transition and Next Steps
Overview
Microsoft retires SharePoint Alerts feature as part of their effort to modernize notification systems. The feature will gradually phase out starting this July and a complete removal is expected by July 2026. We advise organizations to transition to Power Automate/SharePoint Rules for more streamlined notification management.
Impact
- Timeline:
- July 2025: Creation of new SharePoint Alerts will be disabled for new tenants.
- September 2025: Creation of new SharePoint Alerts will be disabled for all tenants.
- October 2025: SharePoint Alerts will have a 30 day validity after activation. But users will still be able to extend expiration once by 30 days.
- July 2026: SharePoint Alerts will be completely gone. Existing alerts will also no longer function.
- Impact on Organizations:
- SharePoint Alerts will no longer work from July 2026. So organizations need to transition to Power Automate or SharePoint Rules to avoid any disruptions.
Action Needed
- Transition Alerts: Begin transitioning SharePoint Alerts to Power Automate/SharePoint Rules before July 2026.
- Review Training Materials
- Admin Actions:
- Use Microsoft 365 Assessment tool to scan for active SharePoint Alerts.
- Review Power Automate/SharePoint Rules documentation to ensure smooth transition.
4. Changes to Defender for Identity Alerts in Defender for Cloud Apps
Overview
Microsoft is going to retire Defender for Identity activities and alerts from Defender for Cloud Apps. This change is coming by late May 2025 as it’s going to transition data/functionality to Microsoft Defender XDR.
The shift is part of their ongoing effort to unify Microsoft Defender services. Post this, your organization will need to access Active Directory data/alerts via the Defender XDR platform. This won’t be accessible via Defender for Cloud Apps.
Impact:
● Active Directory activities/alerts from Defender for Identity will no longer be available in Defender for Cloud Apps.
● Policies in Defender for Cloud Apps based on AD data will no longer trigger.
● All data will be accessible via Microsoft Defender XDR i.e. new Active Directory activities in Advanced Hunting.
● The Identities page in XDR portal will feature two tabs: First party and Third party accounts.
Action Needed
● Create new custom detections for AD-related activity policies in Advanced Hunting.
● Transition to Defender XDR Streaming API or Event Hubs for event data.
● Update integrations/resources that currently rely on Defender for Cloud Apps APIs or SIEM agents.
5. May 2025 Windows Security Update – Quick Install & Key Fixes
Overview
The May 2025 Windows security update is now available for all supported versions of Windows i.e. Windows 10 and Windows 11. This update brings essential security fixes/improvements to the servicing stack. It helps in the smooth installation of future updates.
It addresses several vulnerabilities and enhances overall stability of the Windows OS.
Impact:
This update is crucial for maintaining the security/performance of your system. It resolves security issues in both OSs as this change ensures your devices are protected from any potential threats. The update also includes the improvements from update KB5055627 – this update was previously released in April 2025.
Action Needed
Install the update ASAP. The following are the relevant KB numbers:
- Windows 11, version 24H2: KB5058411
- Windows 11, versions 23H2 and 22H2: KB5058405
- Windows 10, versions 22H2 and 21H2: KB5058379
- Windows Server Versions: Various updates; see specific KBs.
Windows Management Experts
Now A Microsoft Solutions Partner for:
✓ Data & AI
✓ Digital and App Innovation
✓ Infrastructure
✓ Security
The Solutions Partner badge highlights WME’s excellence and commitment. Microsoft’s thorough evaluation ensures we’re skilled, deliver successful projects, and prioritize security over everything. This positions WME in a global tech community, ready to innovate on the cloud for your evolving business needs.
Unlock the Full Potential of Microsoft 365
Keep your business at the cutting edge with the latest Microsoft 365 enhancements. The future of work is evolving. Are you ready? Connect with our experts today to ensure your Microsoft 365 & Azure systems are secure and future-proof.
