Microsoft Security Exposure Management
Vulnerabilities and exposureRisk evaluation framework changelog
In brief
The changelog now lists 80+ Defender for SQL Vulnerability Assessment recommendations as generally available, with a link to the database-level recommendations experience.
What Defender admins need to know
Administrators should review the linked experience to assess these recommendations for their environments.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Risk Evaluation Frameworkevaluation framework changelog
The Risk Evaluation Framework (REF) changelog documents MSEM-initiated changes that affect how security risk is evaluated in your environment. Changes reflect updates to inputs and components of the REF - such as scope, weights, and coverage - not the underlying scoring formula.
| Date | Change type | Description | More information |
|---|---|---|---|
| 30 June 2026 | New recommendations added | 200+ multi-cloud recommendations are now generally available. | What's new in Defender for Cloud |
| 26 July 2026 | New recommendations added | 80+ Defender for SQL Vulnerability Assessment recommendations are now generally available | Database-level recommendations experience for SQL Vulnerability Assessment |
@@ -5,7 +5,7 @@ ms.topic: reference ms.date: 07/01/2026 --- -# Risk Evaluation Framework changelog+# Risk evaluation framework changelog The Risk Evaluation Framework (REF) changelog documents MSEM-initiated changes that affect how security risk is evaluated in your environment. Changes reflect updates to **inputs and components** of the REF - such as scope, weights, and coverage - not the underlying scoring formula. @@ -36,4 +36,6 @@ MSEM initiates REF changes, not customer actions. They might include: | Date | Change type | Description | More information | | -------- | -------- | -------- | -------- |-| 30 June 2026 | New recommendations added |200+ multi-cloud recommendations are now generally available.|[What's new in Defender for Cloud](/azure/defender-for-cloud/release-notes#expanded-multicloud-security-coverage-is-now-generally-available)|+| 30 June 2026 | New recommendations added | 200+ multi-cloud recommendations are now generally available.| [What's new in Defender for Cloud](/azure/defender-for-cloud/release-notes#expanded-multicloud-security-coverage-is-now-generally-available) |+| 26 July 2026 | New recommendations added | 80+ Defender for SQL Vulnerability Assessment recommendations are now generally available | [Database-level recommendations experience for SQL Vulnerability Assessment](https://aka.ms/SQLVARecommendations) |+