Back to updates

Microsoft - 1

2026 (12)

May (10)

security: Defense in depth for autonomous AI agents

Microsoft Security Blog

2026-05-14

Microsoft says autonomous AI agents require updated defense-in-depth controls focused on application-layer design, identity, and human oversight. The post frames these as the main security areas to address as agent autonomy increases.

security: Accelerating detection engineering using AI-assisted synthetic attack logs generation

Microsoft Security Blog

2026-05-12

Microsoft describes research for generating realistic synthetic attack telemetry from attacker behaviors (TTPs) so detections can be tested and tuned at scale without using sensitive data.

security: Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark

Microsoft Security Blog

2026-05-12

Microsoft announced MDASH, a new multi-model agentic scanning harness for AI-powered cyber defense. The post says it outperformed a leading industry benchmark.

security: Defending consumer web properties against modern DDoS attacks

Microsoft Security Blog

2026-05-12

Microsoft published guidance on defending consumer web properties against modern DDoS attacks, emphasizing layered security, resilient architecture, and graceful service degradation.

security: Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise

Microsoft Security Blog

2026-05-12

Microsoft Incident Response described an intrusion that used legitimate administrative mechanisms and a third-party compromise to stay hidden within routine operations. The report emphasizes that attackers increasingly avoid noisy exploits and custom malware by abusing trusted systems already present in the environment.

security: When prompts become shells: RCE vulnerabilities in AI agent frameworks

Microsoft Security Blog

2026-05-07

Microsoft says new research found prompt injection issues in AI agent frameworks can lead to remote code execution. The post outlines affected areas and recommends securing agents against these flaws.

security: World Passkey Day: Advancing passwordless authentication

Microsoft Security Blog

2026-05-07

Microsoft says it is advancing passkey adoption as a replacement for passwords, with the goals of reducing phishing risk and simplifying sign-in. The post is framed around World Passkey Day and passwordless authentication.

security: ​​Microsoft named an overall leader in KuppingerCole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report ​​

Microsoft Security Blog

2026-05-06

Microsoft says KuppingerCole Analyst named it an Overall Leader and Market Leader in the 2026 Emerging AI Security Operations Center (SOC) report. The post frames automation and AI as central to future cybersecurity.

security: ClickFix campaign uses fake macOS utilities lures to deliver infostealers

Microsoft Security Blog

2026-05-06

Microsoft reports a ClickFix campaign targeting macOS users with fake utility fixes that prompt victims to run malicious Terminal commands. The malware is used to steal credentials, crypto wallets, and other sensitive data while bypassing traditional defenses.

security: Microsoft Agent 365, now generally available, expands capabilities and integrations

Microsoft Security Blog

2026-05-01

Microsoft announced general availability of Agent 365 and previewed new features for discovering and managing shadow AI agents, including local agents such as OpenClaw and Claude Code.

April (2)

ai: From Local to Production: The Complete Developer Journey for Building, Composing, and Deploying AI Agents

Microsoft AI Foundry Blog

2026-04-22

Microsoft announces v1.0 of Microsoft Agent Framework and general availability of the Foundry Toolkit for Visual Studio Code. The post frames these releases as part of a workflow for building, composing, and deploying AI agents from local development to production.

security: AI-powered defense for an AI-accelerated threat landscape

Microsoft Security Blog

2026-04-22

Microsoft says it is partnering with Anthropic and other industry players to apply leading AI models, along with its platforms and expertise, to convert AI-driven threat discovery into scalable protection.