Back to updates

Security - 5

2026 (6)

July (2)

security: Improving security posture across the Microsoft partner ecosystem

Microsoft Security Blog

2026-07-02

Microsoft says it is improving security across its partner ecosystem by tightening CSP vetting, applying least-privilege access, increasing monitoring, and promoting risk-management best practices. The post is framed as guidance for partners rather than a product release.

security: Microsoft named a leader in the Frost Radar for cloud and application runtime security

Microsoft Security Blog

2026-07-01

Microsoft says Frost & Sullivan named it a leader in the Frost Radar for cloud and application runtime security. The post frames this as recognition for a unified approach to cloud and application security focused on runtime risk reduction.

June (4)

security: Accelerating the quantum-safe timeline

Microsoft Security Blog

2026-06-30

Microsoft says it is accelerating quantum-safe readiness and urging organizations to begin transitioning earlier as the perceived risk timeline shifts. The post is a brief announcement pointing readers to guidance on what can be done now.

security: ​​What’s new in Microsoft Security: June 2026

Microsoft Security Blog

2026-06-30

Microsoft’s June 2026 security update post says the month’s changes focus on identity and multicloud foundations, data protection across locations, and securing developer workflows for AI-related work. The provided excerpt does not include product-level details or specific feature announcements.

security: Securing AI agents: When AI tools move from reading to acting

Microsoft Security Blog

2026-06-30

The post explains MCP tool poisoning as an attack that can turn trusted AI agents into a control plane for data loss. It describes how attackers manipulate tool descriptions to induce unauthorized actions, and outlines detection, containment, and prevention approaches.

security: Chromium extension uses AI‑related branding to redirect browser search

Microsoft Security Blog

2026-06-29

Microsoft reports a malicious Chromium extension that used AI-related branding to impersonate Perplexity AI and redirect browser search traffic. The extension relied on MV3 APIs and intermediary infrastructure to steer searches away from intended destinations.