https://cybertoolchain.io/tools/microsoft-security New releases and features in Microsoft Security, tracked by The Cyber Toolchain. en Tue, 04 Aug 2026 18:30:00 GMT https://www.microsoft.com/en-us/security/blog/2026/08/04/advance-zero-trust-for-ai-new-tools-and-guidance-to-secure-ai-agents-and-devsecops/ https://www.microsoft.com/en-us/security/blog/2026/08/04/advance-zero-trust-for-ai-new-tools-and-guidance-to-secure-ai-agents-and-devsecops/ Tue, 04 Aug 2026 18:30:00 GMT Microsoft adds a DevSecOps pillar and AI-focused Zero Trust Assessment to the Zero Trust Workshop. • Introduces a new DevSecOps pillar in the Zero Trust Workshop with 15 control groups and 91 tasks covering developer platforms, CI/CD pipelines, source repositories, dependencies, artifacts, and infrastructure-as-code. • Adds four AI-assisted development tasks in the DevSecOps pillar: code governance, tool allowlisting, data protection, and AI and machine learning pipeline supply-chain security. • Introduces a new AI-focused Zero Trust Assessment experience to establish a baseline across Zero Trust pillars including AI and DevSecOps scenarios. • Improves the AI pillar in the Zero Trust Workshop with guidance based on the Microsoft AI Memory framework, treating memory as a governed security boundary with intent, provenance, lifecycle visibility, and user control. • Publishes a new e-book, "Zero Trust for AI: Rebuilding security controls for autonomous and agentic systems", covering AI agents, tools, memory, data, and runtime operations. • Introduces pattern and practice guidance for least privilege for AI agents, Zero Trust for source code access, memory safety in agentic systems, software supply chain protection, and security adoption for development. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/microsoft-security https://www.microsoft.com/en-us/security/blog/2026/07/30/whats-new-in-microsoft-security-july-2026/ https://www.microsoft.com/en-us/security/blog/2026/07/30/whats-new-in-microsoft-security-july-2026/ Thu, 30 Jul 2026 16:00:00 GMT Microsoft Intune Suite advanced endpoint management now included in Microsoft 365 E5 (and select E3) at no added cost. • Includes Microsoft Intune Suite capabilities in Microsoft 365 E5 (and select capabilities in Microsoft 365 E3) at no additional cost as of July 1, 2026. • Enables reduction of standing admin rights, modernized certificate management, accelerated issue resolution, and streamlined app delivery through advanced endpoint management. • Integrates Microsoft Security Copilot into Intune workflows for AI-assisted endpoint management. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/microsoft-security https://blogs.microsoft.com/blog/2026/07/27/rethinking-security-for-the-age-of-ai/ https://blogs.microsoft.com/blog/2026/07/27/rethinking-security-for-the-age-of-ai/ Mon, 27 Jul 2026 16:40:00 GMT Microsoft launches Project Perception agentic security system and the External Red Team Alliance (EXTRA) for global AI safety research. • Introduces Project Perception, a new agentic security system with a multi-layer Cyber Stack — signals/sensors, security context, multi-model architecture, agent harness, and actuators — designed to continuously perceive, reason, and act at machine speed. • Adds a continuously updated security context layer that transforms signals, threat intelligence, and asset/identity/relationship data into a shared, near-real-time representation for AI agents, reducing token cost and improving reasoning accuracy. • Adopts a multi-model architecture that dynamically selects the best-fit model (frontier or specialized) per security task, optimizing for quality, latency, reliability, and cost without locking customers to a single model. • Introduces actuators that translate AI reasoning directly into real-time protections and actions across integrated security workflows, closing the gap between insight and enforcement. • Launches EXTRA (External Red Team Alliance), a formalized global program funding 18 university labs across six continents with unrestricted gifts to advance independent AI safety and red-teaming research. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/microsoft-security https://www.microsoft.com/en-us/security/blog/2026/06/30/whats-new-in-microsoft-security-june-2026/ https://www.microsoft.com/en-us/security/blog/2026/06/30/whats-new-in-microsoft-security-june-2026/ Tue, 30 Jun 2026 16:00:00 GMT Microsoft Security June 2026: AI agent protection, multicloud DB coverage, Entra backup GA, and unified identity risk scoring. • Introduces Codename MDASH (private preview): a multi-model agentic scanning system that discovers, validates, and routes software vulnerabilities into Defender workflows and engineering pipelines for closed-loop remediation. • Expands Microsoft Defender endpoint protection to discover 25+ types of local AI agents and Model Context Protocol (MCP) servers on managed Windows and macOS devices, with runtime prompt-injection detection and blocking for coding agents such as GitHub Copilot CLI and Claude Code. • Adds Advanced Hunting support for investigating AI agent exposure across an environment (preview). • Extends Microsoft Defender for Cloud database threat protection (GA) to open-source relational databases on AWS RDS, adding anomalous-access and brute-force detection alongside automated sensitive data discovery. • Ships Microsoft Purview customizable reports (GA) in Data Security Posture Management (DSPM), enabling role-specific, exportable report views with out-of-the-box and custom report creation for data security trend analysis. • Broadens Defender for Cloud multicloud coverage with approximately 90 additional AWS and Google Cloud resource types and 200+ new security recommendations spanning cloud-native apps, identities, data services, and workloads. • Introduces a unified identity risk score that aggregates behavior, access patterns, and threat intelligence across accounts, sessions, and applications into a single explainable signal, with automatic Conditional Access policy enforcement triggers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/microsoft-security https://www.microsoft.com/en-us/security/blog/2026/06/22/guarding-ai-memory/ https://www.microsoft.com/en-us/security/blog/2026/06/22/guarding-ai-memory/ Mon, 22 Jun 2026 19:07:28 GMT Microsoft 365 Copilot gains AI memory security controls: prompt-injection sanitization, Task Adherence checks, audit logs in Defender Advanced Hunting, and tenant-level policy. • Adds proprietary prompt-injection classifiers that sanitize content on every memory write in M365 Copilot, stripping malicious input before persistence. • Introduces Task Adherence checks on every explicit memory write to detect misaligned tool invocations relative to user intent, mitigating prompt-injection impact on the memory tool call. • Enables tenant-level policy control over AI memory personalization in M365 Copilot. • Surfaces a new `MemoryUpdated` field in Defender Advanced Hunting, Microsoft Sentinel, and Azure Portal Sentinel Analytics, giving SOC analysts visibility into memory-change events for alert-building and incident triage. • Integrates AI memory audit events into organizational audit logs with end-to-end traceability from source content through memory write to downstream influence on agent behavior. • Brings AI memory data under unified M365 compliance boundaries — including Customer Lockbox, encryption at rest, Data Subject Requests, and eDiscovery — consistent with email, chat, and document policies. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/microsoft-security