Microsoft Copilot (Microsoft 365): Recommended Notebooks in Copilot Notebooks
Users can quickly create new Copilot Notebooks via Recommended Notebooks based on recent user work activity.

Users can quickly create new Copilot Notebooks via Recommended Notebooks based on recent user work activity.

With this update, Insider Risk Management extends its risk-detection capabilities to Microsoft Fabric lakehouses (in addition to Power BI which is supported today) by offering ready-to-use risk indicators based on user activities in Fabric lakehouses. Organizations can use these new indicators in data theft and data leaks policies. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Available for M365 users without a M365 Copilot license. From Chat, you can use natural language to generate and direct edits to new and existing documents, when in an Edit mode. In this mode, Copilot will ask clarifying questions if needed, and after making changes will recap actions take and recommended next steps. Changes to the document are supported with controls in the document canvas to review changes made.

We will be introducing customizable retention options for Message Trace logs. Organizations will be able to choose from a predefined set of retention periods.

Deep citations let users quickly verify Copilot’s results by linking directly to the relevant part of the reference, boosting trust. We’re starting with Word and PPT files, then adding Meetings, Web, and PDF references.

This feature introduces the ability to classify DLP alerts directly in the Purview portal. In addition to assigning a status, customers can now categorize alerts as True Positive, False Positive, or Benign Positive. This capability helps security teams better organize, track, and manage alerts, enabling more accurate reporting and efficient incident handling.

A new Data Security Investigations (DSI) mitigation action is now available to help analysts quickly remove sensitive or overshared files during investigations. This addition works alongside DSI’s main features, such as search, classification, and AI-powered analysis.

Password autofill suggestions in Edge are currently based on top-level domain matching, which means the same credentials can be suggested on sites like account.microsoft.com and office.microsoft.com. With this feature, Edge groups related domains together across various desktop and mobile properties called affiliations. When a customer visits a URL, the Edge client will query the affiliations backend to obtain “affiliated groups” for that URL. The process involves sending a hash of the visited URLs to the service, which then returns a list of affiliated URLs and ensures that the relevant credentials will be displayed in the autofill suggestions across affiliated domains. Admins can control access to this feature using the PasswordManagerEnabled policy.

The new Outlook Web People Hub offers a modern multi-column layout, faster search, automatic duplicate linking, and enriched contacts with organizational data. Rolling out from January to March 2026, all users will be auto-migrated to this improved experience with no admin action needed.

Microsoft Teams will introduce Multi-Select Forward, allowing users to forward up to five messages together in one bundled message on desktop and web starting January 2026. Mobile users can view but not forward multiple messages. The feature is on by default, requiring no admin action.
