This week is packed with exciting breakthroughs and fresh product updates across the Box ecosystem! Which new feature or upcoming event are you most excited to try this month?
Box Community Headlines
The AI conversation you don't want to miss!
Tune in for our fireside chat with Box Co-founder and CEO Aaron Levie and NVIDIA Founder and CEO Jensen Huang as they unpack the keys to successful AI transformation.
🗓 November 5, 9:00 to 11:30am PST.
You’ve invested in the models. You’ve deployed the agents. But, what does it take to make AI deliver real business value?
Watch the opening keynote live on LinkedIn.
Box’s Response to PHP2Shell Vulnerabilities
Following the release of patches for critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619), Box's security and engineering teams promptly deployed fixes and additional protections across all affected systems. There is currently no impact to the Box Service or customer data, and no action is required from customers.
For more details on how Box safeguards customer content, visit the Box Trust Center.
Acknowledging Excellence!
Recognizing the Boxers who drive conversations, champion knowledge-sharing, and empower our Box community ✨
🚀 Hiren Adesara and @Ben Weiner from Box
Huge appreciation for leading an insightful roundtable on modernizing permissions frameworks and demonstrating how disabling folder inheritance helps secure sensitive content in an AI-powered world.
🚀 @asubramanian Box
A massive thank you for hosting engaging office hours that empowered our community to build, configure, and scale their very first agentic workflows on Box.
🏅 @thomasdeely Box
Kudos for delivering a fantastic session on the multi-agent interoperability blueprint and showcasing practical cross-platform workflows to keep AI agents coordinated.
🏅 @drew-v
Sincere gratitude for keeping our community informed on the latest Box Shield Threat Protection updates and highlighting how new severity levels streamline incident remediation.
🏅 @Chris G
Warm thanks for championing vital security practices with an impactful guide on strengthening organizational defenses through multi-factor authentication.
🏅 @Viktar
Big shout-out for breaking down the streamlined server app authorization workflow in the Developer Console to make deployment faster and easier for developers.
🏅 @LarsJ Box
Much gratitude for curating a rich Media & Entertainment industry brief connecting the latest market developments with actionable Box AI capabilities.
🏅 @Alexa Sommer
Thank you so much for opening up dedicated consulting access and inviting members to solve their toughest implementation challenges at BoxWorks.
🏅 @Olga Adler
Tremendous recognition for showcasing how Box Mobile and Reader Mode modernize Electronic Flight Bag programs and mission-critical defense operations.
— in Defense Community (classified group)
🏅 @daria
Heartfelt thanks for providing clear, proactive guidance to help administrators secure their Box for Salesforce integrations with enhanced URL authentication controls.
💡 @Jason S
Enormous gratitude for delivering thoughtful, expert answers across our forums on Box AI Home behavior, Shield alert reporting, and MCP connection security.
🙌 Take a look at one of his great answers right here:
💡 @Viktar
A huge round of applause for tirelessly solving complex developer inquiries regarding API impersonation, service account collaboration flows, and high-volume migration limits.
🙌 Read one of his expert responses here:
Box on Social
Want to stay in the loop with all things Box? Head over to our latest posts for exciting updates and insights!
Bringing AI tools into enterprise workflows takes more than connectivity. IT teams need control over which clients and actions can access Box content, plus visibility into how those tools are being used.
The latest Box MCP server updates help admins:
👉 Connect supported clients like Cursor and Claude Code through browser sign-in, with requests running under each user’s Box identity and permissions.
👉 Configure available tools by integration, and apply Box MCP Guardrails to supported write actions.
👉 Use verified-domain requirements to limit Box connections to approved ChatGPT Enterprise and Claude Enterprise workspaces.
👉 Review MCP activity, including the integration, user, tool, request status, duration, and errors.
Learn more: Box MCP server updates bring more ways to connect, govern, and work with AI
Help Shape What’s Next
Your experience drives our innovation. Take a quick moment to share how Box changes the way you work and collaborate by leaving a review on Capterra.
Plus, as a thank-you for your insights, you will receive an exclusive gift once your review is shared.
📣 Share your review on Capterra
Product Updates, Feature Releases, and Announcements
Stay up-to-date with the latest innovations and updates by subscribing to our announcements and release notes 📩
| Announcements/Release Notes | Description |
|---|---|
| Feature | GA | Gives hub owners and co-owners built-in visibility into hub activity, view/edit summaries, collaborator breakdowns, and engagement feeds directly in the Box web app without requiring admin configuration. |
| Box AI side panel in Box Hubs (Oct. 2026) Feature | GA | Moves Box AI inside Hubs to a docked side panel on the right with suggested prompts, allowing users to ask questions side by side while seamlessly navigating and reading Hub content. |
| Introducing Charts in Box Shuttle (Oct 2026) Feature | GA | Adds customizable bar, donut, and line charts to native Box Shuttle job reports in the Admin Console to easily visualize migration progress and file breakdown metrics. |
| Box Apps: New Block Types - Page Filter, Button, Sign Template, and Uploader (Oct. 2026) Feature | GA | Introduces four new block types—Page Filter, Button, Sign Template, and Uploader—giving builders flexible options to create interactive, self-service app experiences. |
| Box Shield threat alert reporting is getting an upgrade (Oct 2026) Feature | Phased GA | Upgrades threat alerts by introducing a clear Severity field (Low, Medium, High, Critical) based on Risk Score, replacing Alert Priority across the Box UI and Shield events. |
| Introducing the Box Shuttle API Launched | Launches a standard API for native Box Shuttle, allowing teams to automate and programmatically manage large, complex data migration jobs at scale. |
| Announcing threshold based alerting for Anomalous Download in Box Shield Rolling out | Enables admins to configure file count, download volume, and rolling time window limits to detect programmatic data exfiltration by AI agents, integrations, or service accounts. |
| Box Drive v2.55.145 - Critical Update Launched | Fixes a security vulnerability related to compromised eMudhra intermediate certificates by releasing an immediate client update. |
| One-time Passcode (OTP) for Public Shared Links is now generally available Launched | Adds identity verification to public shared links, offering Open verification and Access List modes to prevent unauthorized access by anonymous recipients. |
| Box Doc Gen will soon support HTML tables in rich text Launched | Expands Box Doc Gen to automatically parse and render full HTML |
| Trashed content on Disposition Insights page Launched | Enhances Box Governance by adding trashed content to the disposition insights page so users can track expiring items and extend retention if needed. |
| New MCP Guardrails for the Box MCP Server Launched | Provides Enterprise Advanced admins with policy controls in the Admin Console to allow or block write operations executed by external AI agents connecting via Model Context Protocol. |
Mark Your Calendar: Exciting Events Coming Up!
Don't miss out on our upcoming events! Check them out and subscribe to stay informed and connected 📅
| Date | Events | Event type |
|---|---|---|
| November 5-6, 2026 | In-person event | |
| November 5-6, 2026 | In-person event | |
| November 11, 2026 | Webinar (Japanese) | |
| November 12, 2026 | Virtual workshop | |
| November 12, 2026 | Virtual workshop | |
| November 18, 2026 | Webinar (Japanese) | |
| November 24, 2026 | Webinar (Japanese) | |
| November 25, 2026 | Virtual workshop |
Catch Up on Past Digests
Want more insights and highlights? Revisit our recent editions: