Windows & Microsoft AI News: 26H2 & Security (Aug 28, 2026)

WINDOWS AI NEWSAug 28, 20269 min read

Quick Answer

Windows 11 26H2 hits Release Preview; KB5120998 adds taskbar positions; SQL Server joins CISA KEV; Outlook Copilot Chat and AI at Work Roadmap land.

KeyStarter Editorial Team

AI-assisted research & drafting, editorially reviewed

Top picks to stay currentPrices shown at checkout · instant delivery

Product	Best for	Why it stands out
Windows 11 Pro BEST SELLER	Everyday users & home offices	Instant key delivery, lifetime support	Check price
Win 11 Pro Official OFFICIAL	Businesses & compliance teams	Microsoft direct order, screenshot proof	Check price
Office 2021 Pro Plus	Productivity & documents	Classic perpetual license, 1 device	Check price
Server IoT 2022	Fleets & B2B infrastructure	16-core standard, lifetime support	Check price

Disclosure: links go to KeyStarter products; we may earn from qualifying purchases. Prices are set at checkout.

01Windows 11 26H2 Hits Release Preview

Windows 11, version 26H2 (Build 26300.9278) is now available in the Release Preview Channel, marking the final preview phase before general availability later this calendar year. The Windows Insider Blog made the announcement on August 27, positioning the release as this year’s annual feature update.

26H2 will be delivered as an enablement package (eKB), which means Windows 11 versions 24H2, 25H2, and 26H2 share a single servicing branch and the same continuous-innovation features. Many of the capabilities arriving with 26H2 may already be familiar because they have been rolling out through monthly updates. For commercial customers, 26H2 switches on several experiences that were introduced earlier but were not enabled by default for managed devices: Windows settings backup, app-specific actions from the taskbar, and some File Explorer enhancements.

“

We are making this year’s annual feature update, Windows 11, version 26H2 (Build 26300.9278), available in the Release Preview Channel for customers to preview ahead of general availability later this calendar year.

Windows Insider Blog, Releasing Windows 11, version 26H2 to the Release Preview Channel (Aug 27, 2026)

Insiders in the Release Preview Channel can install the build through the ‘seeker’ experience in Windows Update. Commercial customers enrolled in the Windows Insider Program for Business can validate with Windows Update client policies and WSUS, and Azure Marketplace availability was expected later the same day, with ISOs to follow on the Windows Insider ISO download page in the near term. The footnote matters for upgrade planning too: Windows 11 version 24H2 Home and Pro reach end of updates on October 13, 2026, while Enterprise and Education editions are supported until October 12, 2027. For edition decisions before you update, our Windows 11 Pro vs Home guide covers what changes at each tier.

02Preview Update Brings Taskbar Positions and a Smaller Bar

Windows 11’s August preview update, KB5120998 for versions 24H2 and 25H2, adds the ability to move the taskbar to the top, left, or right of the screen and introduces a smaller taskbar option for space-constrained devices. The support page for the update, published August 27 for OS Builds 26200.9278 and 26100.9278, also refreshes progress indicators during startup, sign-in, restart, and shutdown.

The taskbar changes are the standout UX news. Users can now choose bottom, top, left, or right positioning under Settings > Personalization > Taskbar > Taskbar behaviors > Taskbar position. Tooltips, flyouts, and animations follow the taskbar in its new position, and most customization settings such as never-combine icons keep working. Two caveats: the search box and the smaller taskbar are currently supported only for top and bottom positions, and the smaller taskbar reduces icon size and height while keeping Start, Search, and the system tray accessible.

There is also a quiet but significant deprecation: starting in August 2026, Windows 11 versions 24H2 and 25H2 no longer include the Windows Management Instrumentation Command-line (WMIC) utility. Scripts and administrative tooling that call WMIC should be migrated before the next update cycle. The update follows the standard two-phase rollout – gradual first, then normal release – so feature availability varies by device. If you manage fleets, the taskbar position change is exactly the kind of UI behavior users will notice, so document the new defaults before rollout.

03Microsoft Security August 2026 Roundup

Microsoft’s August 2026 security roundup, published August 27, extends Defender Experts MDR to third-party data sources, introduces Entra Tenant Governance, adds Windows Autopilot device association, and raises Purview auto-labeling capacity to 500,000 files per day.

Defender Experts is the biggest operational change: Defender Experts MDR now covers third-party data sources ingested through Microsoft Sentinel, including Palo Alto Networks, AWS, and Okta, under the MDR P2 tier. Defender Experts Threat Intelligence delivers expert-led intelligence tailored to an organization’s geography, industry, and risk profile. On the identity side, Entra Tenant Governance brings an organization’s tenants into a single view, with centralized policies and cross-tenant delegated administration aimed at shadow-tenant risk and configuration drift.

Endpoint and data updates round out the set: Windows Autopilot device association lets admins link devices to their tenant and configure pre-enrollment experiences, including device renaming. Microsoft Purview auto-labeling policies now process up to 500,000 SharePoint and OneDrive files per day, up from 100,000, which directly supports Microsoft 365 Copilot readiness by extending sensitivity-label protection across more content. Finally, Security Exposure Management adds Secure Now guidance for agentic containment – practical controls for constraining agent-initiated actions that run without explicit user approval.

04CISA Adds SQL Server and Five More Flaws to KEV

CISA added Microsoft SQL Server CVE-2019-1068 – a remote code execution vulnerability in the Database Engine – to its Known Exploited Vulnerabilities catalog on August 26, alongside Citrix NetScaler, Linux kernel, and Red Hat flaws. A second KEV batch on August 27 added ownCloud, Linux kernel IPv6, and JFrog Artifactory entries.

CVE-2019-1068 is an old SQL Server vulnerability, but its KEV listing is new, and that distinction matters: CISA only adds vulnerabilities with confirmed in-the-wild exploitation evidence. Attackers can execute arbitrary code in the context of the SQL Server Database Engine service account, which often holds elevated privileges in enterprise environments. The August 26 batch also includes Citrix NetScaler CVE-2026-8452, Linux kernel CVE-2022-0995 (out-of-bounds write for local privilege escalation), Red Hat libuser and ABRT flaws, and an Ajax.NET deserialization issue. The August 27 additions cover ownCloud CVE-2023-49105 (improper authentication), Linux kernel CVE-2026-53362 (IPv6 privilege escalation), and JFrog Artifactory CVE-2026-66384 (path traversal).

For IT teams, the action item is straightforward: inventory SQL Server instances, verify patching against the known-good updates for CVE-2019-1068, and treat the KEV listing as confirmation that this attack path is live. Federal agencies face BOD 26-04 remediation deadlines for catalog entries; everyone else should still prioritize KEV-listed vulnerabilities as the highest-priority patching queue, ahead of routine monthly updates.

05Outlook Gains Copilot Chat for Real-Time Drafting

Outlook is adding a Copilot chat panel next to the compose view, letting licensed users refine, expand, or rewrite an email draft in real time with Microsoft 365 Copilot. Message Center update MC1239932, revised August 27, confirms the draft-collaboration update is now at 100 percent worldwide on Outlook for iOS and Android, with Outlook for Mac, the new Windows Outlook, and Outlook on the web completing rollout by the end of September 2026.

The experience is designed around staying in control of the final content: users can select a specific piece of their draft and iterate on just that section, and the rewrite and coaching experiences are now integrated into the chat so users can work back and forth with Copilot and ask follow-up questions until the draft is right. The feature is enabled by default for users with a Microsoft 365 Copilot license, existing email access, governance, and protection policies continue to apply, and Microsoft says there are no admin control changes at this time.

For organizations, this is a low-friction rollout: no configuration is required, but user impact is high because the compose surface itself changes. The practical recommendation is to update training materials and help documentation now, especially for teams that draft high volumes of external email, and to set expectations that the side-by-side chat is the new default compose experience for Copilot-licensed users.

06Microsoft 365 Roadmap Becomes AI at Work

Microsoft has renamed the Microsoft 365 Roadmap to ‘AI at Work Roadmap,’ creating a single destination for upcoming innovations across Microsoft 365, Copilot, and AI agents, with Dynamics 365, Power Platform, and Dataverse updates joining from September. The change was announced in the Microsoft 365 admin center, as reported by The Register on August 27.

The renamed roadmap is available at aka.ms/AIatWorkroadmap and is meant to reflect how customers actually work: instead of a product-centric changelog, it presents an AI-first view of what is coming. Microsoft’s announcement states that the AI at Work Roadmap ‘provides a single destination to discover upcoming innovations across Microsoft 365, Copilot, AI agents, and other AI-driven experiences.’ Message Center remains the source for tenant-specific change notifications, and Microsoft Learn stays the documentation home.

For administrators, the rename is a navigation change, not a functionality change – the same capability feed now has a broader name and scope. The September expansion to Dynamics 365 and Power Platform is the substantive part, because it turns the roadmap into the company-wide AI feature calendar rather than an M365 apps list. Teams that track release waves should update bookmarks and internal references before the September transition.

07What This Means for Windows Users and IT Teams

The August 28 news cycle is about Windows 11 26H2 crossing its final milestone, taskbar customization arriving in preview, and security teams getting concrete new controls – from KEV-listed SQL Server patching to agentic containment guidance. None of these require emergency action today, but several have deadlines or rollout windows already in motion.

For Windows users: if you are in the Release Preview Channel, 26H2 (Build 26300.9278) is available now through the Windows Update seeker experience, and ISOs are coming soon. On current 24H2/25H2 installs, the KB5120998 preview adds taskbar positions and a smaller taskbar – useful on small screens, with the search box limited to top and bottom placements. Remember that 24H2 Home and Pro reach end of updates on October 13, 2026, so plan your upgrade path now. For edition questions before that, the Windows 10 vs Windows 11 guide is a good starting point.

For IT and security teams: patch SQL Server instances against CVE-2019-1068 first, because the KEV listing confirms active exploitation. If you run Defender Experts, the MDR P2 expansion to Sentinel third-party sources changes your coverage story, and Purview’s faster auto-labeling directly supports Copilot readiness. Use the Secure Now agentic containment guidance before autonomous agents expand further, and start validating 26H2 through Windows Update policies and WSUS if you are enrolled in the Insider Program for Business.

The through-line is preparation with low drama: Microsoft is finalizing the annual Windows update, letting users reshape the taskbar, and giving security teams sharper, more automated controls – while the security calendar keeps moving with KEV additions and Copilot surface changes. The winners are teams that update training materials, patch queues, and roadmap bookmarks before the September wave.

FAQ

External References

• • Windows Insider Blog: Releasing Windows 11, version 26H2 to the Release Preview Channel (Aug 27, 2026)
• • Microsoft Support: KB5120998 (OS Builds 26200.9278 and 26100.9278) Preview – Windows 11 24H2/25H2 (Aug 27, 2026)
• • Microsoft Security Blog: What’s new in Microsoft Security: August 2026 (Aug 27, 2026)
• • CISA: Known Exploited Vulnerabilities Catalog – SQL Server CVE-2019-1068 added Aug 26, 2026 (official feed)
• • MWPro: MC1239932 – Outlook Adds Copilot Chat for Real-Time Email Draft Collaboration (updated Aug 27, 2026)
• • The Register: Microsoft slaps a fresh coat of AI paint on the Microsoft 365 Roadmap (Aug 27, 2026)
• • Microsoft: AI at Work Roadmap – renamed Microsoft 365 Roadmap (announced via admin center, Aug 2026)
• • PC Watch: Windows 11 26H2 general availability approaches (Aug 27, 2026)
• • Impress Watch: Windows 11 August preview patch refreshes taskbar, Start, and Search (Aug 27, 2026)

By KeyStarter Editorial Team
This article was compiled with AI assistance for research and drafting and has been editorially reviewed. All sources are listed above.

← Back to all articles