Security

Microsoft Agentic AI Security Tools Unveiled at RSAC

3 min read

Summary

At RSAC 2026, Microsoft introduced a broader security strategy for enterprise AI, led by Agent 365, a new control plane for governing and protecting AI agents that will reach general availability on May 1. The company also announced expanded AI risk visibility and identity protections across Defender, Entra, Purview, Intune, and new shadow AI detection tools, signaling that securing AI usage is becoming a core part of enterprise security operations as adoption accelerates.

Audio Summary

0:00--:--
Need help with Security?Talk to an Expert

Introduction

Agentic AI is moving quickly from experimentation to enterprise deployment, and that creates a new set of security challenges for IT and security teams. At RSAC 2026, Microsoft outlined an end-to-end strategy for securing AI agents, the infrastructure they rely on, and the data and identities they touch.

What’s new

Agent 365 reaches general availability soon

Microsoft confirmed that Agent 365 will be generally available on May 1. Positioned as a control plane for agents, it is designed to help IT, security, and business teams observe, secure, and govern AI agents at scale.

Key capabilities highlighted include:

  • Integration with Microsoft Defender, Entra, and Purview
  • Controls to secure agent access
  • Protections to reduce data oversharing
  • Support for defending against emerging AI threats

Agent 365 is included in Microsoft 365 E7: The Frontier Suite.

New visibility into AI risk across the enterprise

Microsoft is adding several tools to improve AI discovery and risk awareness:

  • Security Dashboard for AI is now generally available, providing centralized visibility into AI-related risk.
  • Entra Internet Access Shadow AI Detection becomes generally available on March 31, helping identify unmanaged AI app usage at the network layer.
  • Enhanced Intune app inventory arrives in May, adding visibility into AI-enabled apps installed on devices.

Entra expands identity protection

Microsoft Entra gains several new and updated capabilities for modern identity security:

  • Entra Backup and Recovery for directory resilience is in preview.
  • Entra Tenant Governance helps discover shadow Entra tenants and improve multi-tenant governance, also in preview.
  • Synced passkeys and passkey profiles are generally available.
  • Windows Hello integration for Entra passkeys is in preview.
  • External MFA integration is now generally available.
  • Adaptive risk remediation is generally available in April.
  • A new identity security dashboard and identity risk score in Microsoft Defender are in preview.

Purview adds AI-aware data protection

To address data leakage and oversharing in AI workflows, Microsoft announced:

  • Expanded Purview DLP for Microsoft 365 Copilot, generally available March 31
  • Purview embedded in Copilot Control System, generally available in April
  • Customizable data security reports, available in preview March 31

Why this matters for IT admins

These announcements show Microsoft treating AI as a full security domain rather than a feature add-on. For administrators, the big takeaway is that AI governance, identity, endpoint visibility, and data protection are becoming more tightly integrated across the Microsoft stack.

Organizations already deploying Copilot, AI apps, or autonomous agents should expect increased scrutiny around shadow AI, access policies, and data handling. The new dashboards and controls could help reduce blind spots while supporting safer AI adoption.

Next steps

  • Review whether Agent 365 fits your AI governance strategy.
  • Enable or evaluate new Entra identity protections, especially passkeys and adaptive remediation.
  • Prepare for Shadow AI Detection and updated Intune app inventory to identify unmanaged AI usage.
  • Assess Purview DLP policies for Copilot and other AI-related workflows.
  • Brief security and compliance teams on Microsoft’s broader agentic AI security model.

Need help with Security?

Our experts can help you implement and optimize your Microsoft solutions.

Talk to an Expert

Stay updated on Microsoft technologies

Read the original article by Vasu Jakkal
Securityagentic AIMicrosoft EntraMicrosoft PurviewMicrosoft Defender

Related Posts

Security

AI Memory Security in Microsoft 365 Explained

Microsoft has outlined how it secures AI memory in Microsoft 365, addressing emerging risks such as memory poisoning and delayed tool execution. The update matters because persistent AI memory can improve personalization and agent performance, but it also creates new security, compliance, and audit requirements for IT and security teams.

Security

Parallel Threat Activity: Microsoft DART Findings

Microsoft Incident Response detailed a complex intrusion in which two unrelated threat actors operated simultaneously in the same environment, complicating attribution and detection. The case highlights how ransomware activity, SharePoint exploitation, trusted tool abuse, and identity compromise can overlap across hybrid estates, reinforcing the need for strong telemetry, patching, and coordinated response.

Security

AutoJack RCE in AutoGen Studio: Security Lessons

Microsoft security researchers detailed AutoJack, an exploit chain in AutoGen Studio that could let untrusted web content rendered by an AI browsing agent trigger remote code execution on the host. Although the vulnerable MCP WebSocket surface was never shipped in a PyPI release and the issue was hardened upstream during development, the findings highlight important security risks for agent frameworks that combine web browsing with privileged local services.

Security

Microsoft Security Forrester Study Reports 124% ROI

A new Forrester Total Economic Impact study found that organizations consolidating on Microsoft Security could see a projected 124% ROI over three years. The report highlights lower breach risk, reduced remediation costs, lower technology spend, and productivity gains as key reasons unified security platforms matter in the AI era.

Security

Mastra npm Supply Chain Attack: What IT Teams Need to Know

Microsoft has detailed a large-scale npm supply chain compromise affecting more than 140 Mastra packages after an attacker took over a maintainer account and injected a malicious dependency. The attack is significant because the payload executed during npm install, putting developer workstations and CI/CD pipelines at risk even if the package was never directly used in code.

Security

Crypto Clipper Malware Uses Tor and USB Worm Spread

Microsoft has detailed a Windows-based crypto clipper campaign that uses malicious shortcut files, a bundled Tor client, and worm-like USB propagation to steal wallet data and maintain persistence. The threat matters because it combines clipboard theft, screenshot exfiltration, and remote code execution with stealthy Tor-based command and control, making behavioral detection critical for defenders.