The July 2025 Microsoft updates deliver powerful enhancements across security, AI integration, cloud operations, and collaboration tools. From Copilot’s expanded context awareness to evolving Teams, Purview, Defender, and Intune capabilities, these changes signal a significant shift in how environments are being managed and secured.
What’s the Buzz in July? ThreatDefender MXDR!
Introducing our newly named ThreatDefender Managed Extended Detection and Response (MXDR).
This rebrand reflects a more focused, integrated, and forward-thinking approach to security. Built on over 30 years of proven success, our ThreatDefender MXDR service shows how we deliver smarter protection, faster response, and expert guidance that evolves with the threat landscape.
What’s included in ThreatDefender MXDR:
- 24×7 threat detection and response powered by Microsoft Sentinel & Defender
- Automated remediation playbooks tailored to your environment
- Continuous monitoring and threat hunting by certified experts
- Customizable response plans aligned to your risk profile
- Monthly reporting and strategic guidance to strengthen your security posture
Staying secure today means taking action to modernize your security strategy.
Our ThreatDefender MXDR service offers a fully managed, Microsoft-integrated solution that meets you where you are and grows with you.
What’s New in the Hybrid Data Center?
Cisco
Cisco Live 2025 Highlights (San Diego):
Cisco emphasized its roadmap for a secure, AI-ready network future with simplified, hybrid operations. This vision was reflected across keynotes, technical sessions, and hands-on demos on the expo floor.
View full Cisco update
AgenticOps & Cisco AI Canvas
- Cisco introduced AgenticOps, a unifying network architecture that merges Meraki and Catalyst platforms. This integration delivers a consistent, hybrid management experience for enterprise IT.
- AgenticOps leverages the Deep Network Model, Cisco’s AI-based engine, to enable more intuitive management via natural language processing.
- Cisco AI Canvas, part of this initiative, enhances collaboration across IT teams by allowing network configurations and diagnostics through AI-guided interfaces.
AI-Optimized Hardware Announcements
- The introduction of Smart Switches (models C9350 and C9610) built on Cisco Silicon One delivers high-throughput, low-latency performance essential for AI/ML workloads.
- New Secure Routers (8100–8500 series) consolidate SD-WAN, SASE, firewall, and post-quantum security capabilities in a single appliance, designed to streamline and secure branch deployments.
Zero Trust & Identity-Centric Protection
- Cisco launched the Hybrid Mesh Firewall, which provides intelligent, location-aware traffic filtering.
- The new Universal Zero Trust Network Access (ZTNA) approach enables identity-driven access control across data centers, cloud environments, and edge networks.
Cohesity
Expanded Data Protection & Intelligent Recovery
Cohesity continues to strengthen its hybrid and cloud-native backup capabilities with enhanced Microsoft 365 support, MongoDB protection, and automated recovery workflows designed to streamline compliance and incident response.
View full Cohesity update
Native MongoDB Backup/Recovery: Cohesity now provides enterprise-grade backup and restore capabilities for MongoDB workloads, supporting both cloud-native and on-prem environments. This allows organizations to protect their distributed NoSQL databases with confidence, while maintaining compliance and operational continuity.
RecoveryAgent for NetBackup and DataProtect: A cross-platform recovery solution that serves both NetBackup and DataProtect users. RecoveryAgent introduces AI-powered orchestration for cyber incident response, including custom recovery blueprints, rigorous non-production testing, forensic threat scanning, and blast-radius analysis—all designed to accelerate recovery while minimizing business disruption.
Microsoft 365 Early Access Features (v7.1.2_u4):
- Recoverable Items in Mailboxes: Cohesity can now back up and restore the Recoverable Items folder, which contains deleted and soft-deleted emails not accessible through standard views.
- Preservation Hold Library (PHL) in OneDrive: Adds support for backing up the PHL, a repository for documents subject to legal or compliance retention policies.
- SharePoint Online Lists: Enables full backup and recovery of structured data stored in Lists, including tasks, issue trackers, surveys, and contact databases.
Nutanix
Infrastructure Modernization & Field Advisory
Nutanix introduced key enhancements to its Cloud Infrastructure platform and Cloud Manager product suite, alongside urgent advisories for AOS memory issues and upcoming hardware end-of-life events.
View full Nutanix update
NCI 7.3 Release: The latest release of Nutanix Cloud Infrastructure introduces several major features, including streamlined multi-cluster management through Prism Central. Disaster recovery is improved via flexible Recovery Point Objective (RPO) settings, and new flash node support enhances storage performance. Intelligent placement policies also simplify VM deployment, improving resource optimization across the board.
Field Alert: RSS Memory Bug: Nutanix identified a critical issue affecting AOS versions 7.0, 7.0.0.5, 7.0.1, and 7.0.1.5, in which Resident Set Size (RSS) memory usage gradually increases, potentially leading to Controller VM (CVM) memory exhaustion. This may cause restarts or unresponsiveness, degrading cluster stability. The issue is resolved in AOS 7.0.1.6, which should be applied immediately.
NX-G7 Platform End of Maintenance (Sept 2025): Nutanix will retire support for NX-G7 series models 3170, 3155, 1065, 8155, and 8170 this September. Organizations still running these models should evaluate refresh cycles to ensure compatibility with future innovations and sustained vendor support.
Nutanix Cloud Manager 1.5: This update introduces a Kubernetes-based architecture for improved resiliency and modularity. New tools like Inventory Browser and Signals offer centralized visibility and diagnostics, reducing alert noise and simplifying multicloud operations. These updates improve operational efficiency while bolstering platform stability.
Zerto (an HPE Company)
Security Enhancements & AWS Optimization
Zerto’s latest update brings added security and modernization for cloud deployments, with new FIPS compliance capabilities and architectural upgrades for AWS environments.
View full Zerto update
ZVM Update U7 P1: With Update 7 Patch 1, the Zerto Virtual Manager (ZVM) can now operate in FIPS compliance mode, helping meet strict regulatory requirements for cryptographic modules. Note that this is available only for clean installations and not upgrades, making it essential to plan ahead in regulated environments.
AWS Consolidation Tool: Zerto has introduced a utility to help customers transition to a single AWS Linux-based Zerto Cloud Appliance (ZCA) architecture, capable of managing multiple Virtual Replication Appliances (VRAs). This simplifies infrastructure, improves performance, and supports Zerto’s evolving AWS integration strategy.
Pure
Unified Storage Control and AI Workflows
Pure Storage continues to push the envelope in cloud-like storage experiences with unified provisioning, AI-driven automation, and scalable storage architectures optimized for both performance and compliance.
View full Pure update
Pure Fusion Control Plane: Pure introduces Pure Fusion, a self-service control plane that unifies storage operations across on-premises and cloud environments. It supports dynamic provisioning, policy-based automation, and effortless scalability, helping IT teams deliver storage resources on demand with minimal administrative overhead.
Pure FlashBlade + LandingAI: Pure is now highlighting how FlashBlade integrates with LandingAI to accelerate AI-based visual inspection workflows. This combination supports high-performance storage pipelines necessary for real-time edge-to-cloud machine learning in manufacturing and quality assurance environments.
VMware Storage Protocol Comparison: Pure published detailed guidance comparing NFS and VMFS protocols for VMware environments. It provides a breakdown of each format’s advantages in terms of performance, manageability, and scalability, helping infrastructure teams select the best storage strategy for their virtualized workloads.
Rubrik
Cyber Resilience & Identity-Driven Azure Protection
Rubrik continues to enhance its cyber recovery offerings with stronger Azure-native protection, identity-based controls, and streamlined orchestration for fast, secure response.
View full Rubrik update
Orchestrated Cyber Recovery for Azure VMs: Rubrik now enables organizations to build and test comprehensive cyber recovery plans for Azure Virtual Machines, integrating data threat analytics to identify clean restore points. Recovery orchestration can be automated across environments, reducing manual steps and response time during incidents.
Azure Authentication Change (Effective Sept 8, 2025): To align with Microsoft’s security standards, Rubrik Security Cloud will require Microsoft Entra ID-based authentication for connecting Azure subscriptions in Exocompute. Admins should ensure users are migrated to Entra ID before the deadline.
End of Sale Notice – M365 License: Rubrik is discontinuing its M365 Capacity-Limited Per-User License. Organizations should evaluate their licensing to ensure adequate capacity and coverage moving forward.
Upgrade Recommendations: For customers on the CDM platform, Rubrik recommends upgrading to CDM 9.3.2 to access the latest features. For environments that must remain on the 9.2 release track, CDM 9.2.3-p4 is the recommended patch level for security and compatibility.
VMware
Lifecycle Updates & Migration Notices
VMware has released vSphere 9 for select platforms while preparing to sunset older versions. Organizations are advised to assess compatibility and plan their upgrade or cloud migration strategies accordingly.
View full VMware update
vSphere Foundation (VVF) and Cloud Foundation (VCF) 9: VMware has released version 9 for both VCF and VVF, introducing new scalability and automation features designed for modern data centers. These updates reflect VMware’s ongoing strategy to integrate on-prem infrastructure with hybrid cloud ecosystems.
vSphere Standard & Enterprise Plus: These editions remain on 8.0 Update 3, with no version 9 path announced yet. Customers using these licenses should plan around this limitation when assessing long-term infrastructure upgrades.
⚠️ End of Service (Oct 2, 2025): vSphere 7 will reach official End of Service on October 2, 2025. VMware recommends that all organizations still running version 7 begin planning their transition immediately to maintain support, security patching, and performance optimizations.
What’s New in Microsoft Cloud?
Azure
Microsoft Purview Auto-Labeling for Azure Storage and Azure SQL (Public Preview – July 2025) Admins can now apply auto-labeling policies beyond Microsoft 365, extending Microsoft Purview’s classification capabilities to Azure Storage and Azure SQL. This helps unify sensitivity labeling and compliance across multi-cloud environments.
Microsoft 365 Copilot
Microsoft 365 Copilot: New Capabilities Across Collaboration Apps
General availability of Copilot Search and scheduled prompts, plus voice and vision capabilities across platforms.
- Copilot Search: GA rollout of the AI-powered search experience that integrates with the Microsoft 365 Copilot app, delivering contextual answers using Microsoft Graph and third-party connectors.
- Scheduled Prompts Without Power Automate: Users can now schedule recurring prompts without requiring Power Automate licenses or DLP configuration changes.
- Realtime Voice Interaction (July–Sept 2025): Voice input is coming to Copilot Chat and iOS apps, enabling users to interact with Copilot by speaking—no admin action required.
- Vision Support: Users can ask Copilot to interpret or describe images in Word, PowerPoint, and other apps.
- PowerPoint Enhancements: Users can generate slides or add new topics within existing decks across Windows, Mac, and web platforms.
- Cross-Tenant Recaps: Multi-tenant orgs can now view meeting recaps from the hosting tenant.
- Custom Engine Agents: Organizations can now build Copilot agents using external LLMs and custom toolchains.
- Facilitator Agent: Introduced for real-time meeting note-taking (off by default), requires Copilot license.
- Interpreter Agent: Real-time translation of spoken content during Teams meetings with language and voice settings.
- SharePoint Agents: Users can reopen recently used Copilot agents hosted on SharePoint. Admins can disable by deleting the .agent file.
- Copilot Actions: Copilot can now perform built-in automations like booking meetings or reordering supplies.
- New File Format (.page): All content generated by Copilot now uses a new file format that supports DLP, eDiscovery, and sensitivity labels.
- Word Enhancements: Enhanced writing tools now include inline citations, summaries, and coaching feedback.
- Developer Controls: Declarative agent control allows devs to prioritize curated sources in Agent Builder or Teams Toolkit.
- SSO for External Sources: Devs can now build agents that connect to external data sources via Single Sign-On.
- PowerShell Agent Blocking: Admins can restrict the creation of agents in Copilot Studio using PowerShell.
- Copilot for Government: GCC High and DoD-compatible versions launching this summer.
- Agent Orchestration (Preview): Microsoft is testing new capabilities like Tenant Copilot and Agent Factory to coordinate multiple AI agents in an enterprise.
Defender for Cloud Apps
Defender for Cloud Apps: Unified Incident Experience (Public Preview)
Improved App Discovery and Risk Scoring
This month, admins will notice improvements to app discovery and risk scoring, including more accurate categorization of apps based on region, compliance, and usage patterns.
Tighter Defender XDR Integration
If you’re using Defender XDR, Cloud Apps now integrates more tightly into the broader incident and investigation workflows, reducing context switching and helping security teams consolidate views across multiple platforms.
Clarified Licensing Guidance
Microsoft has updated documentation to emphasize that Defender for Cloud Apps is not automatically included with Defender for Endpoint. Organizations expanding coverage should confirm that users are properly licensed via Microsoft 365 E5 or a standalone plan.
New Session Policies in Preview
Session control policies now in preview allow real-time responses to risky behavior, such as blocking uploads or downloads based on device posture. These policies support Conditional Access and DLP enforcement across apps like Dropbox, Box, and Salesforce.
Defender for Office 365
Defender for Office 365: Advanced Impersonation and Payload Protections
Smarter “Report” Buttons in Outlook
Microsoft enhanced the “Report Phishing” and “Report Junk” buttons, allowing users to provide more detailed context when submitting messages. This improves both detection accuracy and SOC response.
Threat Explorer Improvements
Threat Explorer now includes more granular filters and export options for campaigns, URLs, and payloads, making it easier to investigate advanced threats and generate detailed reports.
Impersonation Protections for Teams Notifications
New safeguards have been added to detect and block phishing attempts that spoof Teams notifications or meeting invites, addressing cross-app impersonation vectors.
Integration with Copilot Security Stack
Defender for Office 365 plays a key role in securing Microsoft 365 Copilot by scanning real-time messages and files in Exchange and Teams to prevent data exposure.
Mail Bombing Detection
A new feature detects and mitigates email bombing attacks by sending those messages to the Junk folder automatically– no manual configuration needed.
Overview Dashboard Update
The updated Defender for Office 365 Overview dashboard displays key protection metrics, security opportunities, and industry comparisons to help gauge your security posture.
Expanded Attack Simulation Templates
Microsoft has added new real-world phishing scenarios to its simulation library, making training more relevant and engaging for users.
Outlook Unsubscribe Integration
Users can now unsubscribe from emails flagged as junk, provided the sender supports the option, streamlining mailbox hygiene and reducing spam complaints.
Defender XDR
Defender XDR: Cross-Platform Threat Correlation & Automation
AI-Guided Response Enhancements
Microsoft added AI-powered guided responses and improved triage capabilities, enabling security teams to respond to incidents more quickly and accurately.
New Visualizations and Reporting Options
Defender XDR now offers better visuals for attack paths and supports exporting incidents as PDFs—helpful for reporting and compliance documentation.
Improved Cloud App Controls
The Applications Inventory and Cloud App Catalog have been enhanced to provide more detailed visibility into both sanctioned and unsanctioned applications.
Advanced Hunting Improvements
New support for Azure Data Explorer syntax, including adx() and arg() functions, gives analysts deeper insights and more flexibility in querying Defender data for custom threat detection and analysis.
Entra ID
Third-Party App Consent Now Requires Admin Approval
A Microsoft-managed app consent policy will be enforced, restricting users from granting access to third-party apps (e.g., for SharePoint or OneDrive) without admin approval. This helps secure sensitive files and enforces greater governance over app integrations.
Exchange Server
Exchange Server: Price Hikes and Critical Security Patches
Price Increases Effective July 1
Microsoft has increased pricing by 10% for Exchange Server Subscription Edition, SharePoint, and Skype. Organizations still relying on on-prem Exchange should account for the impact on budgeting and consider modernization options.
Critical Patch Updates for On-Prem Servers
Admins managing Exchange Server 2016/2019 should apply the June Patch Tuesday updates, which address several high-severity CVEs to secure mail environments against known vulnerabilities.
Fabric
Workspace-Level Private Links + Outbound Protection in Preview
Microsoft Fabric will roll out workspace-level private links and outbound access protection in late July (Public Preview). These features will enhance tenant-level security configurations and give workspace admins better control over data ingress/egress within Fabric.
Intune
Apple MDM Legacy Support Ending
With Apple deprecating legacy MDM update commands, Intune will end support for those commands. Organizations managing Apple devices must shift to declarative device management (DDM) settings for OS updates across iOS, iPadOS, and macOS.
Loop
Loop: Group-Managed Workspaces and New Admin Usage Reports
Use Microsoft 365 Groups for Workspace Management
By late July, users will be able to assign new Loop workspaces to existing Microsoft 365 Groups, aligning workspace governance with existing group policies, similar to SharePoint Team Sites.
Loop Admin Usage Reports Coming Soon
Admin usage reports for Loop will be available by late October 2025, integrated into the Microsoft 365 admin dashboard, enabling insight into adoption, collaboration, and activity across Loop workspaces.
M365 Apps Admin Center
Improved License Assignment View
The Microsoft 365 Admin Center is updating the license assignment interface, introducing separate tabs to clearly differentiate between direct user assignments and group-based assignments, improving transparency and performance for license management.
OneDrive
Smart Sign-In for Personal Accounts on Shared Devices
OneDrive will now prompt users to sign in with their personal Microsoft account if it’s already present on the device. Admins can disable this behavior via policy settings. Files remain segregated, and DLP policies continue to apply.
OneNote
Update Required for Seamless Sync
Users should update to the latest version of OneNote to maintain reliable sync capabilities due to backend infrastructure upgrades completed in June 2025. Older versions may experience degraded performance.
Outlook (New)
.PST Export Feature Rolling Out
The new Microsoft Outlook for Windows will allow users to export entire mailboxes or individual folders to .PST format, with scheduling options for automation. This feature streamlines archival and data export processes.
Purview
Purview: Simplified Labels, Copilot DLP, and New File Inspection
DLP for Copilot is GA
Data Loss Prevention (DLP) for Microsoft 365 Copilot is now generally available. Organizations can now apply DLP policies to monitor sensitivity labels and prevent Copilot from surfacing or generating sensitive content.
Simplified Sensitivity Labeling Scheme
Purview is consolidating labeling structures into a flat model using only labels and label groups (removing sublabels and standalone types). Migration tools will assist admins during rollout, completing in August.
Improved File-Type Detection in Exchange Online DLP
Purview DLP will evaluate the actual contents of files (not just extensions), allowing more accurate detection in Exchange Online. Rollout begins mid-October—no admin action required for existing policies.
New Script for Physical Badge Connector
Organizations using the physical badging connector for Insider Risk Management must use a new script to integrate building access logs (e.g., access points, timestamps, user IDs), enabling more contextual insider threat analytics.
Improved Diagnostics for MIP and DLP
A new diagnostics tool will help admins identify and troubleshoot issues related to Microsoft Information Protection and DLP more easily, previously only available via PowerShell.
Expanded Global Exclusions in Insider Risk Management
Admins can now define keyword and file path exclusions globally, reducing false positives and improving alert accuracy across Insider Risk Management detections.
AI App Protection in Edge for Business
Purview DLP will now provide inline protection for AI apps used within Microsoft Edge for Business. This feature prevents sensitive data from leaking via browser-based Copilot or AI interactions, complementing Endpoint DLP.
Stream
Stream: Classic Retirement, Copilot Chapters, and Player Upgrades
Stream Classic Retirement Timeline Accelerated
Stream (Classic) will stop accepting uploads starting August 15, 2025, and will be fully retired by February 15, 2026. Organizations should migrate content to Stream (on SharePoint) to maintain access and playback.
Copilot-Generated Video Chapters
Stream now uses Microsoft Copilot to auto-generate chapters for recorded meetings and uploaded videos, improving navigation for longer content.
New Embedded Player Experience
The new video player offers faster load times, responsive design, and searchable transcripts, enhancing the viewing experience across all devices.
Enhanced Transcripts and Captions
Admins can now edit AI-generated transcripts and support multiple caption languages per video, improving accessibility and search functionality for diverse audiences.
Upgraded Analytics & Engagement Metrics
Stream now provides richer analytics—such as views, watch time, and retention—available both in Microsoft 365 Usage Analytics and the Stream web app.
Check Meeting Recording Storage Settings
Some tenants now store Teams recordings in OneDrive or SharePoint instead of Stream Classic. Admins should verify settings to avoid confusion or disruptions in access.
SharePoint
SharePoint: Feature Retirements, Security Updates, and UX Refresh
Retirement of Add-Ins and 2013 Workflows by April 2026
SharePoint Add-Ins and 2013 workflows will retire by April 2, 2026. Admins must transition to SharePoint Framework (SPFx) and Power Automate, notifying developers and updating internal processes accordingly.
Password-Protect PDF Files in OneDrive/SharePoint
Users can now secure PDFs with open or owner-set passwords before sharing. Files can be saved without overwriting the originals, helping preserve access control.
Classic Alerts Feature Phased Out
New SharePoint alerts can no longer be created starting July 2025. The full retirement of classic alerts is set for July 2026. Power Automate is the recommended alternative for notifications and workflows.
Upgraded Page Analytics
Site owners can now view and export long-term page performance data, making it easier to measure content effectiveness and report trends.
Modern Header and Footer Designs Rolling Out
UI updates for SharePoint Online include refreshed header and footer elements, streamlining the appearance across modern pages. No admin action is required, but informing users is advised.
Secure Hero Links for Easier Sharing
Users can now generate secure, single-use links for files and documents, improving collaboration while enforcing access protections.
Teams
Teams — Classic Retirement, External Chat Files, and App Sharing
- Classic Teams Desktop App Retired
As of July 1, 2025, the Classic Teams desktop app is no longer supported. Users must transition to the new Teams client or use the web version to maintain compatibility and receive updates. - Peripheral Enhancements
More USB devices now support the Teams button, enabling smoother call control and meeting joins with hardware-integrated functionality. - App and Agent Sharing
Users will soon be able to share Teams apps or agents directly from their profile or side panel in Teams for Windows, Mac, and web—improving discoverability and user engagement. - External File Sharing in Chats
Teams will support file attachments in external 1:1 and group chats, expanding collaboration across organizations. Admins must enable this using theFileSharingInChatsWithExternalUserspolicy via PowerShell.
Teams Chat — Threaded Replies and Compact Notifications
- Threaded Conversation Layout for Channels
A new layout allows users to reply to specific messages and create side-threaded conversations within channels. Admin controls will be available in the Teams Admin Center by August 2025. - Compact Toast Notifications
Teams is introducing a compact version of toast (popup) notifications on Windows. Users can enable this via Settings → Notifications → Choose Compact.
Teams Meetings — Speaker Coach Retirement, Slide Control, and Copilot AI Audio
- Speaker Coach (Preview) Retirement
Microsoft will retire the Teams Speaker Coach (Preview) feature by late August 2025. Users relying on coaching prompts should prepare alternative training methods. - PowerPoint Slide Control Sharing
Presenters can delegate slide control in meetings and webinars by September 2025. The feature is enabled for internal users and disabled for externals by default. - Network Strength Indicator
A new 3-bar visual indicator will show real-time network quality during Teams meetings. Rollout is expected by end of August to help users diagnose connection issues. - Town Hall Attendee Preview Mode
Organizers, co-organizers, and presenters in Teams Town Halls will be able to preview the event exactly as attendees see it, improving quality control and pre-event adjustments. - Manage What Attendees See
Teams will add a new setting—Off, On, and On with Preview—allowing presenters to control and preview attendee-visible content during live events and town halls. - Meeting Audio Overview (Copilot AI)
A new feature summarizes key meeting topics in audio format using Microsoft Copilot. Available across Windows, macOS, web, iOS, and Android for licensed users. - Collaborative Annotations During Screen Sharing
Participants will soon be able to request real-time collaborative annotations in screen share sessions, streamlining in-meeting brainstorming and feedback. - Role-Specific Invites
When sending Teams meeting invites, emails will now distinguish between Attendee, Presenter, and Co-organizer roles for clearer access and expectations.
Teams Admin Center — Silent Test Calls and Meeting Diagnostics Visibility
Silent Test Calls for Network Readiness
IT administrators with a Teams Premium license will soon be able to run silent test calls on Teams for Windows and Mac. This proactive testing can identify network issues before users report problems.
Meeting Issue Diagnostics (DNS/Proxy)
A new diagnostic tool in the Teams Admin Center will provide visibility into DNS and proxy failures that may affect meeting performance, allowing faster troubleshooting.
Teams Premium — Ultra-Low Latency Town Halls
ULL Streaming Experience for Town Halls
Starting late August, Teams Premium will offer ultra-low latency (ULL) town hall experiences. Delays will be reduced significantly from 20–30 seconds, improving interactivity. Available with or without Microsoft eCDN.
Windows
Windows: Security Updates, Kernel Changes, and Recovery Enhancements
July 2025 Security Update Available
Microsoft has released security updates for all supported Windows versions. Admins should prioritize rollout to maintain compliance and threat coverage.
EDR and Antivirus Kernel Separation (Private Preview)
Microsoft is decoupling antivirus and endpoint detection tools from the Windows kernel to reduce system crash risks. This could impact third-party vendors like CrowdStrike.
Quick Recovery for Boot Failures
A new Windows feature will help machines recover automatically after boot failures, reducing downtime and IT intervention for endpoint remediation.
Black Screen of Death (Visual Update)
The infamous Blue Screen of Death (BSOD) is getting a cosmetic refresh—it will now appear black by default, with no functional changes.
Retirement of Semi-Annual Enterprise Channels
Microsoft will phase out the Semi-Annual Enterprise Channel Preview and Extended by 2025 and 2026, respectively. Organizations should migrate to other update channels and prepare for a twice-yearly cadence.
