For people interested in Microsoft technologies
Microsoft has announced general availability of Copilot Cowork, a collaborative Copilot experience in Microsoft 365. The release matters for IT leaders because it signals broader production readiness for AI-assisted teamwork features that have already shown strong adoption and user satisfaction.
Microsoft has shared one year of real-world email security benchmarking data showing Defender consistently leading in pre-delivery detection versus SEG vendors. The latest results also show ICES tools add the most value for promotional and bulk email, while Defender now handles the vast majority of post-delivery malicious remediation.
Microsoft Build 2026 emphasized a shift from AI experimentation to enterprise-scale systems designed to deliver measurable business outcomes. Key Azure announcements focused on shared business context for AI, integrated agent platforms with governance, and broader model choice to help organizations deploy AI faster, more securely, and with better cost control.
Microsoft has released ASSERT, an open-source framework that converts natural-language behavior requirements into executable evaluation pipelines for AI models, agents, and applications. The tool helps teams build behavior-specific tests faster, improve regression coverage, and better validate whether AI systems follow product policies and safety expectations.
Microsoft has added Anthropic’s Claude Fable 5 to Microsoft Foundry, Foundry Agent Service, and GitHub Copilot for enterprise AI workloads. The model is designed for long-running, multi-step tasks and multimodal reasoning, while Foundry adds the governance, guardrails, and operational controls organizations need to deploy autonomous agents safely on Azure.
Microsoft has published a new investigator playbook to help security teams reconstruct AI-related activity across Microsoft 365 Copilot and Azure AI services. The guidance brings together telemetry, KQL queries, schema references, and detection logic across Purview, Defender, and Sentinel so investigators can move from isolated signals to a clear incident timeline.
Microsoft has released generally available migration tools and guidance to help Azure AD B2C customers move to Microsoft Entra External ID. With Azure AD B2C no longer receiving new features, these new options give IT teams a clearer path to modernize customer identity while reducing migration risk.
Microsoft is making three important Microsoft Entra ID security changes in 2026: retiring Custom controls in favor of External MFA, enforcing Conditional Access more consistently during credential registration, and requiring explicitly registered authentication methods for SSPR. These updates matter because they close policy enforcement gaps, improve identity security, and require admins to review configurations before enforcement deadlines arrive.
Microsoft Threat Intelligence reports a rise in phishing, malvertising, and SEO-driven attacks that abuse popular AI brands like ChatGPT, Claude, Copilot, and DeepSeek as social engineering lures. The campaigns use familiar tactics such as urgent payment notices, fake policy violations, and malicious installers to steal credentials, payment data, and deploy malware, making user awareness and layered defenses critical.
Microsoft Threat Intelligence found that Anthropic’s Claude Code GitHub Action could expose CI/CD secrets when AI agents process untrusted GitHub content such as issues, pull requests, and comments. Anthropic fixed the issue in Claude Code 2.1.128, but the research highlights broader risks for any AI-enabled workflow with access to secrets, file reads, or outbound communication.
Microsoft has updated its taxonomy of failure modes in agentic AI systems after a year of red teaming against real-world deployments. The v2.0 framework adds seven new risk categories and expanded mitigations, giving security teams a more practical model for assessing agentic AI threats such as MCP/plugin abuse, goal hijacking, and session context contamination.
Microsoft has published a new Microsoft Entra Global Secure Access operations guide on Microsoft Learn to help teams manage day 2 operations after deployment. The guide provides prescriptive monitoring, health checks, role assignments, templates, and automation guidance so IT teams can run Global Secure Access more consistently and proactively.