Back to updates

Microsoft - 2

2026 (12)

August (2)

security: ​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)

Microsoft Security Blog

2026-08-05

Microsoft says KuppingerCole named it a Leader in the Leadership Compass for Cloud Native Application Protection Platforms (CNAPP). The provided excerpt does not include technical changes or product updates beyond that recognition.

security: Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

Microsoft Security Blog

2026-08-04

Microsoft says it is expanding its Zero Trust for AI strategy with new tools and guidance aimed at securing AI agents and DevSecOps environments. The post highlights a broader security approach for AI and related development workflows.

July (10)

security: CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Microsoft Security Blog

2026-07-31

Microsoft says Storm-2945, a sub-cluster of Midnight Blizzard, has been compromising sign-in portals at hospitality organizations since May 2026 to deliver malware to travelers and steal credentials. The campaign is named CaptiveCrunch and targets travelers worldwide.

security: Rethinking security for the age of AI

Microsoft Security Blog

2026-07-27

Microsoft says cybersecurity is changing in the AI era and introduces a new security cyber stack called Project Perception. The post frames this as a rethink of security architecture rather than a specific product release.

security: Enhancing AI security through global AI red teaming

Microsoft Security Blog

2026-07-27

Microsoft announced EXTRA, a global AI security initiative focused on AI safety research and red teaming. The program partners with universities, researchers, and regional experts to identify emerging AI risks and improve testing of frontier AI systems.

commandline: From research to reality: An interview with Microsoft VP of Security Research Taesoo Kim

Microsoft Command Line Blog

2026-07-27

Microsoft interviewed Taesoo Kim, VP of Security Research and head of Security FORGE Labs, about codename MDASH and the lab’s work on security research. The interview highlights a multi-model, agentic approach as a potential direction for improving security capabilities.

security: Real world incident response: Microsoft and AXA XL strengthen cyber resilience

Microsoft Security Blog

2026-07-22

Microsoft and AXA XL are collaborating to give cyber insurance policyholders direct access to Microsoft Incident Response services. The goal is to help organizations coordinate technical response, business decisions, and insurance actions during incidents.

security: Least privilege for AI agents: Identity, access, and tool binding

Microsoft Security Blog

2026-07-16

Microsoft Security published a post on applying least-privilege principles to AI agents, focusing on identity, access control, tool binding, and auditing as agents become more autonomous.

security: Defending SaaS-based applications against ShinyHunters OAuth abuse

Microsoft Security Blog

2026-07-13

Microsoft Threat Intelligence reported ShinyHunters-linked activity targeting SaaS-based applications through OAuth abuse, vishing, supply-chain compromise, and misconfigured guest access. The post focuses on how these techniques were used against SaaS environments and how to defend against them.

security: Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative

Microsoft Security Blog

2026-07-10

Microsoft published its July 2026 Secure Future Initiative progress report, summarizing work on secure foundations, AI-assisted defense, and broader cybersecurity readiness. The provided text is only a brief overview and does not include specific implementation details or metrics.

security: Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

Microsoft Security Blog

2026-07-08

Microsoft says its Secure Future Initiative (SFI) uses security requirements, threat intelligence, and operational frameworks to define what a well-defended cloud service should look like. It emphasizes continuously evaluating live services against those requirements at AI speed.

commandline: How my dev machine built 1,111 word-processing features and forgot to add a ruler

Microsoft Command Line Blog

2026-07-08

The piece describes an experiment where a complex agentic AI loop was used to build an online collaborative word processor, reflecting on the results and what emerged from letting the system run mostly on its own. The title suggests the system produced many features but still missed basic editor functionality like a ruler.