Tech News 2025 | AI Innovations, Product Launches & Trends

Home
Microsoft is expanding its Security Copilot with AI-powered agents that automate routine security tasks, freeing teams to focus on advanced threats.

Highlights of the Security Co-pilot expansion, April 2025 preview
- Six new agents are available for Defender, Entra, Intune, and Purview, each handling specific security tasks independently.
- Five new partner agents from OneTrust, Aviatrix, BlueVoyant, Tanium, and Fletch add features for privacy, networking, and analytics.
New Microsoft Security Agents Include:
1. Phishing triage agent (Defender): This agent automatically reviews user-reported emails, distinguishes between real threats and harmless messages, and summarizes findings in language that security teams can easily understand.
1. Alert Triage agent (Purview): automatically analyzes and prioritizes insider risk and data loss prevention alerts, accounting for data sensitivity and user actions.
1. Conditional Access Optimization Agent (Entra): This agent reviews existing identity access policies, detects gaps or weaknesses, and provides real-time suggestions for more effective identity protection.
1. Vulnerability Remediation Agent (Intune): monitors app and policy vulnerabilities, ranks them, and helps manage patches more efficiently.
1. Threat Intelligence Briefing Agent (Security Copilot): This agent collects relevant threat data, analyzes it against your organization’s unique risk profile, and generates concise intelligence briefings for your security team.
Major Updates and Security Improvements for AI
- For expanded AI protection, Microsoft will now manage and secure AI environments, including Azure, AWS, Google, Vertex AI, Gemini, Gamma, Lama, and Mistral models, by offering broader monitoring and safeguard measures across these platforms.
- Shadow AI prevention: Microsoft Entra now includes web filters to spot and block unauthorized AI apps.
- Browser-based data protection: the new Purview controls in Microsoft Edge for Business help stop users from entering sensitive data into AI tools.
- Teams Security: Microsoft Teams now offers better protection against phishing and advanced threats during collaboration. Overall, these agents learn from user input and integrate into existing workflows within Microsoft's Zero Trust framework. In their work, they help security teams stay in control and respond to incidents faster.
Protecting AI systems and leveraging AI for security are now essential for every organization at Microsoft. We are committed to helping organizations secure their future with our AI-first comprehensive security platform.

A year ago, the Security Copilot launched to help defenders. Today, new AI agents handle phishing, data security, and identity tasks as cyber threats rise beyond human capacity. AI agents are now vital for modern security.

Phishing is a major cyber threat. In one year, Microsoft detected over 30 billion phishing emails. This volume can overwhelm security teams, making manual work and separate tools insufficient for quick, data-driven decisions.

The new phishing triage agent in Microsoft Security Copilot can handle routine phishing alerts and attacks. This lets human defenders focus more on serious threats and pre-emptive security measures. This is just one example of how agents can change how we approach security.

Organizations continue to prioritize securing and managing AI. We will bring new features to our purpose-built solutions, including Microsoft Defender, Microsoft Entra, and Microsoft Purview.

Explore the new agents in Security Copilot and the latest AI security to strengthen your organization's cyber defenses today.

Expanding Microsoft Security Copilot With New AI Agent Capabilities

Microsoft Threat Intelligence handles 84 trillion daily signals, including 7,000 password attacks per second. To match this pace, Security Copilot adds six Microsoft agents and five partner agents, with previews in April 2025.

Six new AI agent solutions from Microsoft Security

The six new agents extend Security Copilot’s capabilities by managing high-security and IT volumes, adapting to feedback, and following Zero Trust principles. They help teams respond faster and focus on major risks.

Security Copilot agents will soon be available throughout the Microsoft security platform. Here is what they are designed to do:
- The phishing triage agent in Microsoft Defender reviews phishing alerts, identifies real threats, filters out false alarms, provides clear explanations for each decision, and improves over time with admin feedback.
- Alert triage agents in Microsoft Purview, Review, Data Loss Prevention, and Insider Risk prioritize the most critical incidents and enhance their accuracy based on administrator feedback.
- The Conditional Access Optimization Agent in Entra detects unprotected users or apps and suggests simple policy updates for identity teams.
- The vulnerability remediation agent in Intune tracks, ranks, and helps address vulnerabilities, speeding Windows OS patching after admin approval.
- The Threat Intelligence briefing agent automatically collects and shares intelligence tailored to your organization.
Security Copilot’s agents show how we keep innovating by building on years of AI research. Learn more about how these agents work.

5 New Agent Solutions From Microsoft Security Partners

Security is a team effort, and Microsoft supports our partners with an open platform that enables them to deliver more value to customers. Here are five new AI agents from our partners that will be available in Security Copilot:
- The Privacy Breach Response Agent by OneTrust reviews data breaches, provides guidance to the privacy group, and ensures regulatory requirements are met.
- The Aviatrix network supervisor agent identifies the root cause of issues and summarizes VPN gateway or site2cloud connection outages and failures.
- The SecOps tooling agent by BlueVoyant assesses security operations, centers, and controls, then recommends improvements for operations, controls, and compliance.
- The triage agent from Tanium provides analysts with the context they need to quickly and confidently decide how to handle each alert.
- The Task Optimizer Agent by Fletch helps predict important alerts, reduce fatigue, and improve security.
Find out more about Security Copilot agents and learn how to get started today. If you already use Security Copilot, join our customer connection program now to receive the latest updates and become part of our collaboration network.

New, AI-Powered Data Security Investigations And Analysis

We are introducing Microsoft Purview Data Security Investigations to help teams quickly identify and address risks related to sensitive data exposure. These investigations use AI-powered content analysis to identify sensitive data and other risks associated with incidents. Investigators can use these understandings to work securely with other teams and simplify complex tasks, helping mitigate faster. This solution connects data security investigations to Defender incidents and Purview insider risk cases and will be available for preview starting April 2025.

Further Advances In Securing And Governing Generative AI

A strong cybersecurity foundation is vital for AI transformation. As organizations adopt generative AI, securing and managing workplace issues becomes urgent. Our new report, Secure Employee Access in the Age of AI, shows that 57 percent of organizations have seen more security incidents due to AI, while most recognize the need for AI controls 60 percent have not begun.

Securing AI is a new challenge, and leaders have particular concerns, such as preventing data oversharing, reducing new AI threats and vulnerabilities, and keeping up with changing compliance rules. Microsoft Security Solutions are designed to help organizations deal with these issues. We are announcing new advanced features to help organizations protect their AI investments, whether they use Microsoft AI or other AI tools.

AI Security Posture Management for Multimodal and Multicloud Environments

Organizations building custom AI solutions need to improve the security of AI models running across different platforms and clouds. To help with this, Microsoft Defender now offers AI security posture management not only for Microsoft Azure and Amazon Web Services, but also for Google Cloud, Vertex AI, and all models in the Azure AI Foundry Catalog. Starting in May 2025, this will cover models like Gemini, Gamma, Meta, Llama, Mistral, and custom models. With this multi-cloud support, organizations can see and manage AI security across Azure, AWS, and Google Cloud. Microsoft Defender helps organizations get started with AI security across different models and clouds.

New Detection And Protection For Emerging AI Threats

AI introduces new risks, including more avenues for cyber attacks and undiscovered vulnerabilities. The open worldwide application security project OWASP spotlights the top risks and solutions for generative AI apps. Starting in May 2025, Microsoft Defender will offer new and improved AI detections for several OWASP-identified risks, including indirect prompt injection attacks, sensitive data exposure, and wallet abuse. These new detections will help SOC analysts better protect custom AI apps with added safeguards for the Azure OpenAI service and models in the Azure AI Foundry Catalog.

New Controls To Prevent Risky Access And Data Leaks Into Concealed AI Apps

As more people use generative AI, many organizations are finding that employees are using AI apps that have not been approved by IT or security teams. This unapproved use, known as shadow AI, has greatly increased the risk of sensitive data leaks. To help manage this, we are announcing the general availability of an AI web category filter in Microsoft Intra Internet Access. This feature lets organizations set detailed access permissions and enforce policies about which users or groups can use different types of AI apps.

After establishing access policies, the next step is to block sensitive data from being entered into AI apps. To support this, Microsoft is previewing per‑web‑view browser data loss prevention controls in Edge for Business. This helps security teams enforce DLP policies and prevent data entry into generative AI apps, starting with ChatGPT, Copilot Chat, DeepSeek, and Google Gemini.

Learn more about our AI security innovations and take action today to strengthen your organization's defenses. Email remains the main phishing vector, but collaboration tools are increasingly targeted. Starting in April 2025, Microsoft Defender for Office 365 will protect Teams users from phishing by scanning links and attachments in real time for potential threats. SOC teams will have full visibility into related attempts and incidents via Microsoft Defender alerts and data.

Agile Innovation To Build A Safer World

We are always working to improve the Microsoft security portfolio by following our Secure Future initiative. Our goal is to provide strong, complete protection and give defenders the best AI tools so every organization can secure and manage AI. We appreciate our customers and partners, and together we look forward to creating a safer world for everyone.

Source:  Expanding Microsoft Security Copilot with AI agentic capabilities
About US
Microsoft is expanding its Security Copilot with AI-powered agents that automate routine security tasks, freeing teams to focus on advanced threats.

Highlights of the Security Co-pilot expansion, April 2025 preview
- Six new agents are available for Defender, Entra, Intune, and Purview, each handling specific security tasks independently.
- Five new partner agents from OneTrust, Aviatrix, BlueVoyant, Tanium, and Fletch add features for privacy, networking, and analytics.
New Microsoft Security Agents Include:
1. Phishing triage agent (Defender): This agent automatically reviews user-reported emails, distinguishes between real threats and harmless messages, and summarizes findings in language that security teams can easily understand.
1. Alert Triage agent (Purview): automatically analyzes and prioritizes insider risk and data loss prevention alerts, accounting for data sensitivity and user actions.
1. Conditional Access Optimization Agent (Entra): This agent reviews existing identity access policies, detects gaps or weaknesses, and provides real-time suggestions for more effective identity protection.
1. Vulnerability Remediation Agent (Intune): monitors app and policy vulnerabilities, ranks them, and helps manage patches more efficiently.
1. Threat Intelligence Briefing Agent (Security Copilot): This agent collects relevant threat data, analyzes it against your organization’s unique risk profile, and generates concise intelligence briefings for your security team.
Major Updates and Security Improvements for AI
- For expanded AI protection, Microsoft will now manage and secure AI environments, including Azure, AWS, Google, Vertex AI, Gemini, Gamma, Lama, and Mistral models, by offering broader monitoring and safeguard measures across these platforms.
- Shadow AI prevention: Microsoft Entra now includes web filters to spot and block unauthorized AI apps.
- Browser-based data protection: the new Purview controls in Microsoft Edge for Business help stop users from entering sensitive data into AI tools.
- Teams Security: Microsoft Teams now offers better protection against phishing and advanced threats during collaboration. Overall, these agents learn from user input and integrate into existing workflows within Microsoft's Zero Trust framework. In their work, they help security teams stay in control and respond to incidents faster.
Protecting AI systems and leveraging AI for security are now essential for every organization at Microsoft. We are committed to helping organizations secure their future with our AI-first comprehensive security platform.

A year ago, the Security Copilot launched to help defenders. Today, new AI agents handle phishing, data security, and identity tasks as cyber threats rise beyond human capacity. AI agents are now vital for modern security.

Phishing is a major cyber threat. In one year, Microsoft detected over 30 billion phishing emails. This volume can overwhelm security teams, making manual work and separate tools insufficient for quick, data-driven decisions.

The new phishing triage agent in Microsoft Security Copilot can handle routine phishing alerts and attacks. This lets human defenders focus more on serious threats and pre-emptive security measures. This is just one example of how agents can change how we approach security.

Organizations continue to prioritize securing and managing AI. We will bring new features to our purpose-built solutions, including Microsoft Defender, Microsoft Entra, and Microsoft Purview.

Explore the new agents in Security Copilot and the latest AI security to strengthen your organization's cyber defenses today.

Expanding Microsoft Security Copilot With New AI Agent Capabilities

Microsoft Threat Intelligence handles 84 trillion daily signals, including 7,000 password attacks per second. To match this pace, Security Copilot adds six Microsoft agents and five partner agents, with previews in April 2025.

Six new AI agent solutions from Microsoft Security

The six new agents extend Security Copilot’s capabilities by managing high-security and IT volumes, adapting to feedback, and following Zero Trust principles. They help teams respond faster and focus on major risks.

Security Copilot agents will soon be available throughout the Microsoft security platform. Here is what they are designed to do:
- The phishing triage agent in Microsoft Defender reviews phishing alerts, identifies real threats, filters out false alarms, provides clear explanations for each decision, and improves over time with admin feedback.
- Alert triage agents in Microsoft Purview, Review, Data Loss Prevention, and Insider Risk prioritize the most critical incidents and enhance their accuracy based on administrator feedback.
- The Conditional Access Optimization Agent in Entra detects unprotected users or apps and suggests simple policy updates for identity teams.
- The vulnerability remediation agent in Intune tracks, ranks, and helps address vulnerabilities, speeding Windows OS patching after admin approval.
- The Threat Intelligence briefing agent automatically collects and shares intelligence tailored to your organization.
Security Copilot’s agents show how we keep innovating by building on years of AI research. Learn more about how these agents work.

5 New Agent Solutions From Microsoft Security Partners

Security is a team effort, and Microsoft supports our partners with an open platform that enables them to deliver more value to customers. Here are five new AI agents from our partners that will be available in Security Copilot:
- The Privacy Breach Response Agent by OneTrust reviews data breaches, provides guidance to the privacy group, and ensures regulatory requirements are met.
- The Aviatrix network supervisor agent identifies the root cause of issues and summarizes VPN gateway or site2cloud connection outages and failures.
- The SecOps tooling agent by BlueVoyant assesses security operations, centers, and controls, then recommends improvements for operations, controls, and compliance.
- The triage agent from Tanium provides analysts with the context they need to quickly and confidently decide how to handle each alert.
- The Task Optimizer Agent by Fletch helps predict important alerts, reduce fatigue, and improve security.
Find out more about Security Copilot agents and learn how to get started today. If you already use Security Copilot, join our customer connection program now to receive the latest updates and become part of our collaboration network.

New, AI-Powered Data Security Investigations And Analysis

We are introducing Microsoft Purview Data Security Investigations to help teams quickly identify and address risks related to sensitive data exposure. These investigations use AI-powered content analysis to identify sensitive data and other risks associated with incidents. Investigators can use these understandings to work securely with other teams and simplify complex tasks, helping mitigate faster. This solution connects data security investigations to Defender incidents and Purview insider risk cases and will be available for preview starting April 2025.

Further Advances In Securing And Governing Generative AI

A strong cybersecurity foundation is vital for AI transformation. As organizations adopt generative AI, securing and managing workplace issues becomes urgent. Our new report, Secure Employee Access in the Age of AI, shows that 57 percent of organizations have seen more security incidents due to AI, while most recognize the need for AI controls 60 percent have not begun.

Securing AI is a new challenge, and leaders have particular concerns, such as preventing data oversharing, reducing new AI threats and vulnerabilities, and keeping up with changing compliance rules. Microsoft Security Solutions are designed to help organizations deal with these issues. We are announcing new advanced features to help organizations protect their AI investments, whether they use Microsoft AI or other AI tools.

AI Security Posture Management for Multimodal and Multicloud Environments

Organizations building custom AI solutions need to improve the security of AI models running across different platforms and clouds. To help with this, Microsoft Defender now offers AI security posture management not only for Microsoft Azure and Amazon Web Services, but also for Google Cloud, Vertex AI, and all models in the Azure AI Foundry Catalog. Starting in May 2025, this will cover models like Gemini, Gamma, Meta, Llama, Mistral, and custom models. With this multi-cloud support, organizations can see and manage AI security across Azure, AWS, and Google Cloud. Microsoft Defender helps organizations get started with AI security across different models and clouds.

New Detection And Protection For Emerging AI Threats

AI introduces new risks, including more avenues for cyber attacks and undiscovered vulnerabilities. The open worldwide application security project OWASP spotlights the top risks and solutions for generative AI apps. Starting in May 2025, Microsoft Defender will offer new and improved AI detections for several OWASP-identified risks, including indirect prompt injection attacks, sensitive data exposure, and wallet abuse. These new detections will help SOC analysts better protect custom AI apps with added safeguards for the Azure OpenAI service and models in the Azure AI Foundry Catalog.

New Controls To Prevent Risky Access And Data Leaks Into Concealed AI Apps

As more people use generative AI, many organizations are finding that employees are using AI apps that have not been approved by IT or security teams. This unapproved use, known as shadow AI, has greatly increased the risk of sensitive data leaks. To help manage this, we are announcing the general availability of an AI web category filter in Microsoft Intra Internet Access. This feature lets organizations set detailed access permissions and enforce policies about which users or groups can use different types of AI apps.

After establishing access policies, the next step is to block sensitive data from being entered into AI apps. To support this, Microsoft is previewing per‑web‑view browser data loss prevention controls in Edge for Business. This helps security teams enforce DLP policies and prevent data entry into generative AI apps, starting with ChatGPT, Copilot Chat, DeepSeek, and Google Gemini.

Learn more about our AI security innovations and take action today to strengthen your organization's defenses. Email remains the main phishing vector, but collaboration tools are increasingly targeted. Starting in April 2025, Microsoft Defender for Office 365 will protect Teams users from phishing by scanning links and attachments in real time for potential threats. SOC teams will have full visibility into related attempts and incidents via Microsoft Defender alerts and data.

Agile Innovation To Build A Safer World

We are always working to improve the Microsoft security portfolio by following our Secure Future initiative. Our goal is to provide strong, complete protection and give defenders the best AI tools so every organization can secure and manage AI. We appreciate our customers and partners, and together we look forward to creating a safer world for everyone.

Source:  Expanding Microsoft Security Copilot with AI agentic capabilities
Tech Reviews
Microsoft is expanding its Security Copilot with AI-powered agents that automate routine security tasks, freeing teams to focus on advanced threats.

Highlights of the Security Co-pilot expansion, April 2025 preview
- Six new agents are available for Defender, Entra, Intune, and Purview, each handling specific security tasks independently.
- Five new partner agents from OneTrust, Aviatrix, BlueVoyant, Tanium, and Fletch add features for privacy, networking, and analytics.
New Microsoft Security Agents Include:
1. Phishing triage agent (Defender): This agent automatically reviews user-reported emails, distinguishes between real threats and harmless messages, and summarizes findings in language that security teams can easily understand.
1. Alert Triage agent (Purview): automatically analyzes and prioritizes insider risk and data loss prevention alerts, accounting for data sensitivity and user actions.
1. Conditional Access Optimization Agent (Entra): This agent reviews existing identity access policies, detects gaps or weaknesses, and provides real-time suggestions for more effective identity protection.
1. Vulnerability Remediation Agent (Intune): monitors app and policy vulnerabilities, ranks them, and helps manage patches more efficiently.
1. Threat Intelligence Briefing Agent (Security Copilot): This agent collects relevant threat data, analyzes it against your organization’s unique risk profile, and generates concise intelligence briefings for your security team.
Major Updates and Security Improvements for AI
- For expanded AI protection, Microsoft will now manage and secure AI environments, including Azure, AWS, Google, Vertex AI, Gemini, Gamma, Lama, and Mistral models, by offering broader monitoring and safeguard measures across these platforms.
- Shadow AI prevention: Microsoft Entra now includes web filters to spot and block unauthorized AI apps.
- Browser-based data protection: the new Purview controls in Microsoft Edge for Business help stop users from entering sensitive data into AI tools.
- Teams Security: Microsoft Teams now offers better protection against phishing and advanced threats during collaboration. Overall, these agents learn from user input and integrate into existing workflows within Microsoft's Zero Trust framework. In their work, they help security teams stay in control and respond to incidents faster.
Protecting AI systems and leveraging AI for security are now essential for every organization at Microsoft. We are committed to helping organizations secure their future with our AI-first comprehensive security platform.

A year ago, the Security Copilot launched to help defenders. Today, new AI agents handle phishing, data security, and identity tasks as cyber threats rise beyond human capacity. AI agents are now vital for modern security.

Phishing is a major cyber threat. In one year, Microsoft detected over 30 billion phishing emails. This volume can overwhelm security teams, making manual work and separate tools insufficient for quick, data-driven decisions.

The new phishing triage agent in Microsoft Security Copilot can handle routine phishing alerts and attacks. This lets human defenders focus more on serious threats and pre-emptive security measures. This is just one example of how agents can change how we approach security.

Organizations continue to prioritize securing and managing AI. We will bring new features to our purpose-built solutions, including Microsoft Defender, Microsoft Entra, and Microsoft Purview.

Explore the new agents in Security Copilot and the latest AI security to strengthen your organization's cyber defenses today.

Expanding Microsoft Security Copilot With New AI Agent Capabilities

Microsoft Threat Intelligence handles 84 trillion daily signals, including 7,000 password attacks per second. To match this pace, Security Copilot adds six Microsoft agents and five partner agents, with previews in April 2025.

Six new AI agent solutions from Microsoft Security

The six new agents extend Security Copilot’s capabilities by managing high-security and IT volumes, adapting to feedback, and following Zero Trust principles. They help teams respond faster and focus on major risks.

Security Copilot agents will soon be available throughout the Microsoft security platform. Here is what they are designed to do:
- The phishing triage agent in Microsoft Defender reviews phishing alerts, identifies real threats, filters out false alarms, provides clear explanations for each decision, and improves over time with admin feedback.
- Alert triage agents in Microsoft Purview, Review, Data Loss Prevention, and Insider Risk prioritize the most critical incidents and enhance their accuracy based on administrator feedback.
- The Conditional Access Optimization Agent in Entra detects unprotected users or apps and suggests simple policy updates for identity teams.
- The vulnerability remediation agent in Intune tracks, ranks, and helps address vulnerabilities, speeding Windows OS patching after admin approval.
- The Threat Intelligence briefing agent automatically collects and shares intelligence tailored to your organization.
Security Copilot’s agents show how we keep innovating by building on years of AI research. Learn more about how these agents work.

5 New Agent Solutions From Microsoft Security Partners

Security is a team effort, and Microsoft supports our partners with an open platform that enables them to deliver more value to customers. Here are five new AI agents from our partners that will be available in Security Copilot:
- The Privacy Breach Response Agent by OneTrust reviews data breaches, provides guidance to the privacy group, and ensures regulatory requirements are met.
- The Aviatrix network supervisor agent identifies the root cause of issues and summarizes VPN gateway or site2cloud connection outages and failures.
- The SecOps tooling agent by BlueVoyant assesses security operations, centers, and controls, then recommends improvements for operations, controls, and compliance.
- The triage agent from Tanium provides analysts with the context they need to quickly and confidently decide how to handle each alert.
- The Task Optimizer Agent by Fletch helps predict important alerts, reduce fatigue, and improve security.
Find out more about Security Copilot agents and learn how to get started today. If you already use Security Copilot, join our customer connection program now to receive the latest updates and become part of our collaboration network.

New, AI-Powered Data Security Investigations And Analysis

We are introducing Microsoft Purview Data Security Investigations to help teams quickly identify and address risks related to sensitive data exposure. These investigations use AI-powered content analysis to identify sensitive data and other risks associated with incidents. Investigators can use these understandings to work securely with other teams and simplify complex tasks, helping mitigate faster. This solution connects data security investigations to Defender incidents and Purview insider risk cases and will be available for preview starting April 2025.

Further Advances In Securing And Governing Generative AI

A strong cybersecurity foundation is vital for AI transformation. As organizations adopt generative AI, securing and managing workplace issues becomes urgent. Our new report, Secure Employee Access in the Age of AI, shows that 57 percent of organizations have seen more security incidents due to AI, while most recognize the need for AI controls 60 percent have not begun.

Securing AI is a new challenge, and leaders have particular concerns, such as preventing data oversharing, reducing new AI threats and vulnerabilities, and keeping up with changing compliance rules. Microsoft Security Solutions are designed to help organizations deal with these issues. We are announcing new advanced features to help organizations protect their AI investments, whether they use Microsoft AI or other AI tools.

AI Security Posture Management for Multimodal and Multicloud Environments

Organizations building custom AI solutions need to improve the security of AI models running across different platforms and clouds. To help with this, Microsoft Defender now offers AI security posture management not only for Microsoft Azure and Amazon Web Services, but also for Google Cloud, Vertex AI, and all models in the Azure AI Foundry Catalog. Starting in May 2025, this will cover models like Gemini, Gamma, Meta, Llama, Mistral, and custom models. With this multi-cloud support, organizations can see and manage AI security across Azure, AWS, and Google Cloud. Microsoft Defender helps organizations get started with AI security across different models and clouds.

New Detection And Protection For Emerging AI Threats

AI introduces new risks, including more avenues for cyber attacks and undiscovered vulnerabilities. The open worldwide application security project OWASP spotlights the top risks and solutions for generative AI apps. Starting in May 2025, Microsoft Defender will offer new and improved AI detections for several OWASP-identified risks, including indirect prompt injection attacks, sensitive data exposure, and wallet abuse. These new detections will help SOC analysts better protect custom AI apps with added safeguards for the Azure OpenAI service and models in the Azure AI Foundry Catalog.

New Controls To Prevent Risky Access And Data Leaks Into Concealed AI Apps

As more people use generative AI, many organizations are finding that employees are using AI apps that have not been approved by IT or security teams. This unapproved use, known as shadow AI, has greatly increased the risk of sensitive data leaks. To help manage this, we are announcing the general availability of an AI web category filter in Microsoft Intra Internet Access. This feature lets organizations set detailed access permissions and enforce policies about which users or groups can use different types of AI apps.

After establishing access policies, the next step is to block sensitive data from being entered into AI apps. To support this, Microsoft is previewing per‑web‑view browser data loss prevention controls in Edge for Business. This helps security teams enforce DLP policies and prevent data entry into generative AI apps, starting with ChatGPT, Copilot Chat, DeepSeek, and Google Gemini.

Learn more about our AI security innovations and take action today to strengthen your organization's defenses. Email remains the main phishing vector, but collaboration tools are increasingly targeted. Starting in April 2025, Microsoft Defender for Office 365 will protect Teams users from phishing by scanning links and attachments in real time for potential threats. SOC teams will have full visibility into related attempts and incidents via Microsoft Defender alerts and data.

Agile Innovation To Build A Safer World

We are always working to improve the Microsoft security portfolio by following our Secure Future initiative. Our goal is to provide strong, complete protection and give defenders the best AI tools so every organization can secure and manage AI. We appreciate our customers and partners, and together we look forward to creating a safer world for everyone.

Source:  Expanding Microsoft Security Copilot with AI agentic capabilities
- AI
- Troubleshooting
- Smartwatches
- Smartphones
- Camera
- Gadgets
- Games
- Laptops
- Seasonal Sales
Phone Features
Microsoft is expanding its Security Copilot with AI-powered agents that automate routine security tasks, freeing teams to focus on advanced threats.

Highlights of the Security Co-pilot expansion, April 2025 preview
- Six new agents are available for Defender, Entra, Intune, and Purview, each handling specific security tasks independently.
- Five new partner agents from OneTrust, Aviatrix, BlueVoyant, Tanium, and Fletch add features for privacy, networking, and analytics.
New Microsoft Security Agents Include:
1. Phishing triage agent (Defender): This agent automatically reviews user-reported emails, distinguishes between real threats and harmless messages, and summarizes findings in language that security teams can easily understand.
1. Alert Triage agent (Purview): automatically analyzes and prioritizes insider risk and data loss prevention alerts, accounting for data sensitivity and user actions.
1. Conditional Access Optimization Agent (Entra): This agent reviews existing identity access policies, detects gaps or weaknesses, and provides real-time suggestions for more effective identity protection.
1. Vulnerability Remediation Agent (Intune): monitors app and policy vulnerabilities, ranks them, and helps manage patches more efficiently.
1. Threat Intelligence Briefing Agent (Security Copilot): This agent collects relevant threat data, analyzes it against your organization’s unique risk profile, and generates concise intelligence briefings for your security team.
Major Updates and Security Improvements for AI
- For expanded AI protection, Microsoft will now manage and secure AI environments, including Azure, AWS, Google, Vertex AI, Gemini, Gamma, Lama, and Mistral models, by offering broader monitoring and safeguard measures across these platforms.
- Shadow AI prevention: Microsoft Entra now includes web filters to spot and block unauthorized AI apps.
- Browser-based data protection: the new Purview controls in Microsoft Edge for Business help stop users from entering sensitive data into AI tools.
- Teams Security: Microsoft Teams now offers better protection against phishing and advanced threats during collaboration. Overall, these agents learn from user input and integrate into existing workflows within Microsoft's Zero Trust framework. In their work, they help security teams stay in control and respond to incidents faster.
Protecting AI systems and leveraging AI for security are now essential for every organization at Microsoft. We are committed to helping organizations secure their future with our AI-first comprehensive security platform.

A year ago, the Security Copilot launched to help defenders. Today, new AI agents handle phishing, data security, and identity tasks as cyber threats rise beyond human capacity. AI agents are now vital for modern security.

Phishing is a major cyber threat. In one year, Microsoft detected over 30 billion phishing emails. This volume can overwhelm security teams, making manual work and separate tools insufficient for quick, data-driven decisions.

The new phishing triage agent in Microsoft Security Copilot can handle routine phishing alerts and attacks. This lets human defenders focus more on serious threats and pre-emptive security measures. This is just one example of how agents can change how we approach security.

Organizations continue to prioritize securing and managing AI. We will bring new features to our purpose-built solutions, including Microsoft Defender, Microsoft Entra, and Microsoft Purview.

Explore the new agents in Security Copilot and the latest AI security to strengthen your organization's cyber defenses today.

Expanding Microsoft Security Copilot With New AI Agent Capabilities

Microsoft Threat Intelligence handles 84 trillion daily signals, including 7,000 password attacks per second. To match this pace, Security Copilot adds six Microsoft agents and five partner agents, with previews in April 2025.

Six new AI agent solutions from Microsoft Security

The six new agents extend Security Copilot’s capabilities by managing high-security and IT volumes, adapting to feedback, and following Zero Trust principles. They help teams respond faster and focus on major risks.

Security Copilot agents will soon be available throughout the Microsoft security platform. Here is what they are designed to do:
- The phishing triage agent in Microsoft Defender reviews phishing alerts, identifies real threats, filters out false alarms, provides clear explanations for each decision, and improves over time with admin feedback.
- Alert triage agents in Microsoft Purview, Review, Data Loss Prevention, and Insider Risk prioritize the most critical incidents and enhance their accuracy based on administrator feedback.
- The Conditional Access Optimization Agent in Entra detects unprotected users or apps and suggests simple policy updates for identity teams.
- The vulnerability remediation agent in Intune tracks, ranks, and helps address vulnerabilities, speeding Windows OS patching after admin approval.
- The Threat Intelligence briefing agent automatically collects and shares intelligence tailored to your organization.
Security Copilot’s agents show how we keep innovating by building on years of AI research. Learn more about how these agents work.

5 New Agent Solutions From Microsoft Security Partners

Security is a team effort, and Microsoft supports our partners with an open platform that enables them to deliver more value to customers. Here are five new AI agents from our partners that will be available in Security Copilot:
- The Privacy Breach Response Agent by OneTrust reviews data breaches, provides guidance to the privacy group, and ensures regulatory requirements are met.
- The Aviatrix network supervisor agent identifies the root cause of issues and summarizes VPN gateway or site2cloud connection outages and failures.
- The SecOps tooling agent by BlueVoyant assesses security operations, centers, and controls, then recommends improvements for operations, controls, and compliance.
- The triage agent from Tanium provides analysts with the context they need to quickly and confidently decide how to handle each alert.
- The Task Optimizer Agent by Fletch helps predict important alerts, reduce fatigue, and improve security.
Find out more about Security Copilot agents and learn how to get started today. If you already use Security Copilot, join our customer connection program now to receive the latest updates and become part of our collaboration network.

New, AI-Powered Data Security Investigations And Analysis

We are introducing Microsoft Purview Data Security Investigations to help teams quickly identify and address risks related to sensitive data exposure. These investigations use AI-powered content analysis to identify sensitive data and other risks associated with incidents. Investigators can use these understandings to work securely with other teams and simplify complex tasks, helping mitigate faster. This solution connects data security investigations to Defender incidents and Purview insider risk cases and will be available for preview starting April 2025.

Further Advances In Securing And Governing Generative AI

A strong cybersecurity foundation is vital for AI transformation. As organizations adopt generative AI, securing and managing workplace issues becomes urgent. Our new report, Secure Employee Access in the Age of AI, shows that 57 percent of organizations have seen more security incidents due to AI, while most recognize the need for AI controls 60 percent have not begun.

Securing AI is a new challenge, and leaders have particular concerns, such as preventing data oversharing, reducing new AI threats and vulnerabilities, and keeping up with changing compliance rules. Microsoft Security Solutions are designed to help organizations deal with these issues. We are announcing new advanced features to help organizations protect their AI investments, whether they use Microsoft AI or other AI tools.

AI Security Posture Management for Multimodal and Multicloud Environments

Organizations building custom AI solutions need to improve the security of AI models running across different platforms and clouds. To help with this, Microsoft Defender now offers AI security posture management not only for Microsoft Azure and Amazon Web Services, but also for Google Cloud, Vertex AI, and all models in the Azure AI Foundry Catalog. Starting in May 2025, this will cover models like Gemini, Gamma, Meta, Llama, Mistral, and custom models. With this multi-cloud support, organizations can see and manage AI security across Azure, AWS, and Google Cloud. Microsoft Defender helps organizations get started with AI security across different models and clouds.

New Detection And Protection For Emerging AI Threats

AI introduces new risks, including more avenues for cyber attacks and undiscovered vulnerabilities. The open worldwide application security project OWASP spotlights the top risks and solutions for generative AI apps. Starting in May 2025, Microsoft Defender will offer new and improved AI detections for several OWASP-identified risks, including indirect prompt injection attacks, sensitive data exposure, and wallet abuse. These new detections will help SOC analysts better protect custom AI apps with added safeguards for the Azure OpenAI service and models in the Azure AI Foundry Catalog.

New Controls To Prevent Risky Access And Data Leaks Into Concealed AI Apps

As more people use generative AI, many organizations are finding that employees are using AI apps that have not been approved by IT or security teams. This unapproved use, known as shadow AI, has greatly increased the risk of sensitive data leaks. To help manage this, we are announcing the general availability of an AI web category filter in Microsoft Intra Internet Access. This feature lets organizations set detailed access permissions and enforce policies about which users or groups can use different types of AI apps.

After establishing access policies, the next step is to block sensitive data from being entered into AI apps. To support this, Microsoft is previewing per‑web‑view browser data loss prevention controls in Edge for Business. This helps security teams enforce DLP policies and prevent data entry into generative AI apps, starting with ChatGPT, Copilot Chat, DeepSeek, and Google Gemini.

Learn more about our AI security innovations and take action today to strengthen your organization's defenses. Email remains the main phishing vector, but collaboration tools are increasingly targeted. Starting in April 2025, Microsoft Defender for Office 365 will protect Teams users from phishing by scanning links and attachments in real time for potential threats. SOC teams will have full visibility into related attempts and incidents via Microsoft Defender alerts and data.

Agile Innovation To Build A Safer World

We are always working to improve the Microsoft security portfolio by following our Secure Future initiative. Our goal is to provide strong, complete protection and give defenders the best AI tools so every organization can secure and manage AI. We appreciate our customers and partners, and together we look forward to creating a safer world for everyone.

Source:  Expanding Microsoft Security Copilot with AI agentic capabilities
Buying Guides
Microsoft is expanding its Security Copilot with AI-powered agents that automate routine security tasks, freeing teams to focus on advanced threats.

Highlights of the Security Co-pilot expansion, April 2025 preview
- Six new agents are available for Defender, Entra, Intune, and Purview, each handling specific security tasks independently.
- Five new partner agents from OneTrust, Aviatrix, BlueVoyant, Tanium, and Fletch add features for privacy, networking, and analytics.
New Microsoft Security Agents Include:
1. Phishing triage agent (Defender): This agent automatically reviews user-reported emails, distinguishes between real threats and harmless messages, and summarizes findings in language that security teams can easily understand.
1. Alert Triage agent (Purview): automatically analyzes and prioritizes insider risk and data loss prevention alerts, accounting for data sensitivity and user actions.
1. Conditional Access Optimization Agent (Entra): This agent reviews existing identity access policies, detects gaps or weaknesses, and provides real-time suggestions for more effective identity protection.
1. Vulnerability Remediation Agent (Intune): monitors app and policy vulnerabilities, ranks them, and helps manage patches more efficiently.
1. Threat Intelligence Briefing Agent (Security Copilot): This agent collects relevant threat data, analyzes it against your organization’s unique risk profile, and generates concise intelligence briefings for your security team.
Major Updates and Security Improvements for AI
- For expanded AI protection, Microsoft will now manage and secure AI environments, including Azure, AWS, Google, Vertex AI, Gemini, Gamma, Lama, and Mistral models, by offering broader monitoring and safeguard measures across these platforms.
- Shadow AI prevention: Microsoft Entra now includes web filters to spot and block unauthorized AI apps.
- Browser-based data protection: the new Purview controls in Microsoft Edge for Business help stop users from entering sensitive data into AI tools.
- Teams Security: Microsoft Teams now offers better protection against phishing and advanced threats during collaboration. Overall, these agents learn from user input and integrate into existing workflows within Microsoft's Zero Trust framework. In their work, they help security teams stay in control and respond to incidents faster.
Protecting AI systems and leveraging AI for security are now essential for every organization at Microsoft. We are committed to helping organizations secure their future with our AI-first comprehensive security platform.

A year ago, the Security Copilot launched to help defenders. Today, new AI agents handle phishing, data security, and identity tasks as cyber threats rise beyond human capacity. AI agents are now vital for modern security.

Phishing is a major cyber threat. In one year, Microsoft detected over 30 billion phishing emails. This volume can overwhelm security teams, making manual work and separate tools insufficient for quick, data-driven decisions.

The new phishing triage agent in Microsoft Security Copilot can handle routine phishing alerts and attacks. This lets human defenders focus more on serious threats and pre-emptive security measures. This is just one example of how agents can change how we approach security.

Organizations continue to prioritize securing and managing AI. We will bring new features to our purpose-built solutions, including Microsoft Defender, Microsoft Entra, and Microsoft Purview.

Explore the new agents in Security Copilot and the latest AI security to strengthen your organization's cyber defenses today.

Expanding Microsoft Security Copilot With New AI Agent Capabilities

Microsoft Threat Intelligence handles 84 trillion daily signals, including 7,000 password attacks per second. To match this pace, Security Copilot adds six Microsoft agents and five partner agents, with previews in April 2025.

Six new AI agent solutions from Microsoft Security

The six new agents extend Security Copilot’s capabilities by managing high-security and IT volumes, adapting to feedback, and following Zero Trust principles. They help teams respond faster and focus on major risks.

Security Copilot agents will soon be available throughout the Microsoft security platform. Here is what they are designed to do:
- The phishing triage agent in Microsoft Defender reviews phishing alerts, identifies real threats, filters out false alarms, provides clear explanations for each decision, and improves over time with admin feedback.
- Alert triage agents in Microsoft Purview, Review, Data Loss Prevention, and Insider Risk prioritize the most critical incidents and enhance their accuracy based on administrator feedback.
- The Conditional Access Optimization Agent in Entra detects unprotected users or apps and suggests simple policy updates for identity teams.
- The vulnerability remediation agent in Intune tracks, ranks, and helps address vulnerabilities, speeding Windows OS patching after admin approval.
- The Threat Intelligence briefing agent automatically collects and shares intelligence tailored to your organization.
Security Copilot’s agents show how we keep innovating by building on years of AI research. Learn more about how these agents work.

5 New Agent Solutions From Microsoft Security Partners

Security is a team effort, and Microsoft supports our partners with an open platform that enables them to deliver more value to customers. Here are five new AI agents from our partners that will be available in Security Copilot:
- The Privacy Breach Response Agent by OneTrust reviews data breaches, provides guidance to the privacy group, and ensures regulatory requirements are met.
- The Aviatrix network supervisor agent identifies the root cause of issues and summarizes VPN gateway or site2cloud connection outages and failures.
- The SecOps tooling agent by BlueVoyant assesses security operations, centers, and controls, then recommends improvements for operations, controls, and compliance.
- The triage agent from Tanium provides analysts with the context they need to quickly and confidently decide how to handle each alert.
- The Task Optimizer Agent by Fletch helps predict important alerts, reduce fatigue, and improve security.
Find out more about Security Copilot agents and learn how to get started today. If you already use Security Copilot, join our customer connection program now to receive the latest updates and become part of our collaboration network.

New, AI-Powered Data Security Investigations And Analysis

We are introducing Microsoft Purview Data Security Investigations to help teams quickly identify and address risks related to sensitive data exposure. These investigations use AI-powered content analysis to identify sensitive data and other risks associated with incidents. Investigators can use these understandings to work securely with other teams and simplify complex tasks, helping mitigate faster. This solution connects data security investigations to Defender incidents and Purview insider risk cases and will be available for preview starting April 2025.

Further Advances In Securing And Governing Generative AI

A strong cybersecurity foundation is vital for AI transformation. As organizations adopt generative AI, securing and managing workplace issues becomes urgent. Our new report, Secure Employee Access in the Age of AI, shows that 57 percent of organizations have seen more security incidents due to AI, while most recognize the need for AI controls 60 percent have not begun.

Securing AI is a new challenge, and leaders have particular concerns, such as preventing data oversharing, reducing new AI threats and vulnerabilities, and keeping up with changing compliance rules. Microsoft Security Solutions are designed to help organizations deal with these issues. We are announcing new advanced features to help organizations protect their AI investments, whether they use Microsoft AI or other AI tools.

AI Security Posture Management for Multimodal and Multicloud Environments

Organizations building custom AI solutions need to improve the security of AI models running across different platforms and clouds. To help with this, Microsoft Defender now offers AI security posture management not only for Microsoft Azure and Amazon Web Services, but also for Google Cloud, Vertex AI, and all models in the Azure AI Foundry Catalog. Starting in May 2025, this will cover models like Gemini, Gamma, Meta, Llama, Mistral, and custom models. With this multi-cloud support, organizations can see and manage AI security across Azure, AWS, and Google Cloud. Microsoft Defender helps organizations get started with AI security across different models and clouds.

New Detection And Protection For Emerging AI Threats

AI introduces new risks, including more avenues for cyber attacks and undiscovered vulnerabilities. The open worldwide application security project OWASP spotlights the top risks and solutions for generative AI apps. Starting in May 2025, Microsoft Defender will offer new and improved AI detections for several OWASP-identified risks, including indirect prompt injection attacks, sensitive data exposure, and wallet abuse. These new detections will help SOC analysts better protect custom AI apps with added safeguards for the Azure OpenAI service and models in the Azure AI Foundry Catalog.

New Controls To Prevent Risky Access And Data Leaks Into Concealed AI Apps

As more people use generative AI, many organizations are finding that employees are using AI apps that have not been approved by IT or security teams. This unapproved use, known as shadow AI, has greatly increased the risk of sensitive data leaks. To help manage this, we are announcing the general availability of an AI web category filter in Microsoft Intra Internet Access. This feature lets organizations set detailed access permissions and enforce policies about which users or groups can use different types of AI apps.

After establishing access policies, the next step is to block sensitive data from being entered into AI apps. To support this, Microsoft is previewing per‑web‑view browser data loss prevention controls in Edge for Business. This helps security teams enforce DLP policies and prevent data entry into generative AI apps, starting with ChatGPT, Copilot Chat, DeepSeek, and Google Gemini.

Learn more about our AI security innovations and take action today to strengthen your organization's defenses. Email remains the main phishing vector, but collaboration tools are increasingly targeted. Starting in April 2025, Microsoft Defender for Office 365 will protect Teams users from phishing by scanning links and attachments in real time for potential threats. SOC teams will have full visibility into related attempts and incidents via Microsoft Defender alerts and data.

Agile Innovation To Build A Safer World

We are always working to improve the Microsoft security portfolio by following our Secure Future initiative. Our goal is to provide strong, complete protection and give defenders the best AI tools so every organization can secure and manage AI. We appreciate our customers and partners, and together we look forward to creating a safer world for everyone.

Source:  Expanding Microsoft Security Copilot with AI agentic capabilities
Comparison
Microsoft is expanding its Security Copilot with AI-powered agents that automate routine security tasks, freeing teams to focus on advanced threats.

Highlights of the Security Co-pilot expansion, April 2025 preview
- Six new agents are available for Defender, Entra, Intune, and Purview, each handling specific security tasks independently.
- Five new partner agents from OneTrust, Aviatrix, BlueVoyant, Tanium, and Fletch add features for privacy, networking, and analytics.
New Microsoft Security Agents Include:
1. Phishing triage agent (Defender): This agent automatically reviews user-reported emails, distinguishes between real threats and harmless messages, and summarizes findings in language that security teams can easily understand.
1. Alert Triage agent (Purview): automatically analyzes and prioritizes insider risk and data loss prevention alerts, accounting for data sensitivity and user actions.
1. Conditional Access Optimization Agent (Entra): This agent reviews existing identity access policies, detects gaps or weaknesses, and provides real-time suggestions for more effective identity protection.
1. Vulnerability Remediation Agent (Intune): monitors app and policy vulnerabilities, ranks them, and helps manage patches more efficiently.
1. Threat Intelligence Briefing Agent (Security Copilot): This agent collects relevant threat data, analyzes it against your organization’s unique risk profile, and generates concise intelligence briefings for your security team.
Major Updates and Security Improvements for AI
- For expanded AI protection, Microsoft will now manage and secure AI environments, including Azure, AWS, Google, Vertex AI, Gemini, Gamma, Lama, and Mistral models, by offering broader monitoring and safeguard measures across these platforms.
- Shadow AI prevention: Microsoft Entra now includes web filters to spot and block unauthorized AI apps.
- Browser-based data protection: the new Purview controls in Microsoft Edge for Business help stop users from entering sensitive data into AI tools.
- Teams Security: Microsoft Teams now offers better protection against phishing and advanced threats during collaboration. Overall, these agents learn from user input and integrate into existing workflows within Microsoft's Zero Trust framework. In their work, they help security teams stay in control and respond to incidents faster.
Protecting AI systems and leveraging AI for security are now essential for every organization at Microsoft. We are committed to helping organizations secure their future with our AI-first comprehensive security platform.

A year ago, the Security Copilot launched to help defenders. Today, new AI agents handle phishing, data security, and identity tasks as cyber threats rise beyond human capacity. AI agents are now vital for modern security.

Phishing is a major cyber threat. In one year, Microsoft detected over 30 billion phishing emails. This volume can overwhelm security teams, making manual work and separate tools insufficient for quick, data-driven decisions.

The new phishing triage agent in Microsoft Security Copilot can handle routine phishing alerts and attacks. This lets human defenders focus more on serious threats and pre-emptive security measures. This is just one example of how agents can change how we approach security.

Organizations continue to prioritize securing and managing AI. We will bring new features to our purpose-built solutions, including Microsoft Defender, Microsoft Entra, and Microsoft Purview.

Explore the new agents in Security Copilot and the latest AI security to strengthen your organization's cyber defenses today.

Expanding Microsoft Security Copilot With New AI Agent Capabilities

Microsoft Threat Intelligence handles 84 trillion daily signals, including 7,000 password attacks per second. To match this pace, Security Copilot adds six Microsoft agents and five partner agents, with previews in April 2025.

Six new AI agent solutions from Microsoft Security

The six new agents extend Security Copilot’s capabilities by managing high-security and IT volumes, adapting to feedback, and following Zero Trust principles. They help teams respond faster and focus on major risks.

Security Copilot agents will soon be available throughout the Microsoft security platform. Here is what they are designed to do:
- The phishing triage agent in Microsoft Defender reviews phishing alerts, identifies real threats, filters out false alarms, provides clear explanations for each decision, and improves over time with admin feedback.
- Alert triage agents in Microsoft Purview, Review, Data Loss Prevention, and Insider Risk prioritize the most critical incidents and enhance their accuracy based on administrator feedback.
- The Conditional Access Optimization Agent in Entra detects unprotected users or apps and suggests simple policy updates for identity teams.
- The vulnerability remediation agent in Intune tracks, ranks, and helps address vulnerabilities, speeding Windows OS patching after admin approval.
- The Threat Intelligence briefing agent automatically collects and shares intelligence tailored to your organization.
Security Copilot’s agents show how we keep innovating by building on years of AI research. Learn more about how these agents work.

5 New Agent Solutions From Microsoft Security Partners

Security is a team effort, and Microsoft supports our partners with an open platform that enables them to deliver more value to customers. Here are five new AI agents from our partners that will be available in Security Copilot:
- The Privacy Breach Response Agent by OneTrust reviews data breaches, provides guidance to the privacy group, and ensures regulatory requirements are met.
- The Aviatrix network supervisor agent identifies the root cause of issues and summarizes VPN gateway or site2cloud connection outages and failures.
- The SecOps tooling agent by BlueVoyant assesses security operations, centers, and controls, then recommends improvements for operations, controls, and compliance.
- The triage agent from Tanium provides analysts with the context they need to quickly and confidently decide how to handle each alert.
- The Task Optimizer Agent by Fletch helps predict important alerts, reduce fatigue, and improve security.
Find out more about Security Copilot agents and learn how to get started today. If you already use Security Copilot, join our customer connection program now to receive the latest updates and become part of our collaboration network.

New, AI-Powered Data Security Investigations And Analysis

We are introducing Microsoft Purview Data Security Investigations to help teams quickly identify and address risks related to sensitive data exposure. These investigations use AI-powered content analysis to identify sensitive data and other risks associated with incidents. Investigators can use these understandings to work securely with other teams and simplify complex tasks, helping mitigate faster. This solution connects data security investigations to Defender incidents and Purview insider risk cases and will be available for preview starting April 2025.

Further Advances In Securing And Governing Generative AI

A strong cybersecurity foundation is vital for AI transformation. As organizations adopt generative AI, securing and managing workplace issues becomes urgent. Our new report, Secure Employee Access in the Age of AI, shows that 57 percent of organizations have seen more security incidents due to AI, while most recognize the need for AI controls 60 percent have not begun.

Securing AI is a new challenge, and leaders have particular concerns, such as preventing data oversharing, reducing new AI threats and vulnerabilities, and keeping up with changing compliance rules. Microsoft Security Solutions are designed to help organizations deal with these issues. We are announcing new advanced features to help organizations protect their AI investments, whether they use Microsoft AI or other AI tools.

AI Security Posture Management for Multimodal and Multicloud Environments

Organizations building custom AI solutions need to improve the security of AI models running across different platforms and clouds. To help with this, Microsoft Defender now offers AI security posture management not only for Microsoft Azure and Amazon Web Services, but also for Google Cloud, Vertex AI, and all models in the Azure AI Foundry Catalog. Starting in May 2025, this will cover models like Gemini, Gamma, Meta, Llama, Mistral, and custom models. With this multi-cloud support, organizations can see and manage AI security across Azure, AWS, and Google Cloud. Microsoft Defender helps organizations get started with AI security across different models and clouds.

New Detection And Protection For Emerging AI Threats

AI introduces new risks, including more avenues for cyber attacks and undiscovered vulnerabilities. The open worldwide application security project OWASP spotlights the top risks and solutions for generative AI apps. Starting in May 2025, Microsoft Defender will offer new and improved AI detections for several OWASP-identified risks, including indirect prompt injection attacks, sensitive data exposure, and wallet abuse. These new detections will help SOC analysts better protect custom AI apps with added safeguards for the Azure OpenAI service and models in the Azure AI Foundry Catalog.

New Controls To Prevent Risky Access And Data Leaks Into Concealed AI Apps

As more people use generative AI, many organizations are finding that employees are using AI apps that have not been approved by IT or security teams. This unapproved use, known as shadow AI, has greatly increased the risk of sensitive data leaks. To help manage this, we are announcing the general availability of an AI web category filter in Microsoft Intra Internet Access. This feature lets organizations set detailed access permissions and enforce policies about which users or groups can use different types of AI apps.

After establishing access policies, the next step is to block sensitive data from being entered into AI apps. To support this, Microsoft is previewing per‑web‑view browser data loss prevention controls in Edge for Business. This helps security teams enforce DLP policies and prevent data entry into generative AI apps, starting with ChatGPT, Copilot Chat, DeepSeek, and Google Gemini.

Learn more about our AI security innovations and take action today to strengthen your organization's defenses. Email remains the main phishing vector, but collaboration tools are increasingly targeted. Starting in April 2025, Microsoft Defender for Office 365 will protect Teams users from phishing by scanning links and attachments in real time for potential threats. SOC teams will have full visibility into related attempts and incidents via Microsoft Defender alerts and data.

Agile Innovation To Build A Safer World

We are always working to improve the Microsoft security portfolio by following our Secure Future initiative. Our goal is to provide strong, complete protection and give defenders the best AI tools so every organization can secure and manage AI. We appreciate our customers and partners, and together we look forward to creating a safer world for everyone.

Source:  Expanding Microsoft Security Copilot with AI agentic capabilities
News
Microsoft is expanding its Security Copilot with AI-powered agents that automate routine security tasks, freeing teams to focus on advanced threats.

Highlights of the Security Co-pilot expansion, April 2025 preview
- Six new agents are available for Defender, Entra, Intune, and Purview, each handling specific security tasks independently.
- Five new partner agents from OneTrust, Aviatrix, BlueVoyant, Tanium, and Fletch add features for privacy, networking, and analytics.
New Microsoft Security Agents Include:
1. Phishing triage agent (Defender): This agent automatically reviews user-reported emails, distinguishes between real threats and harmless messages, and summarizes findings in language that security teams can easily understand.
1. Alert Triage agent (Purview): automatically analyzes and prioritizes insider risk and data loss prevention alerts, accounting for data sensitivity and user actions.
1. Conditional Access Optimization Agent (Entra): This agent reviews existing identity access policies, detects gaps or weaknesses, and provides real-time suggestions for more effective identity protection.
1. Vulnerability Remediation Agent (Intune): monitors app and policy vulnerabilities, ranks them, and helps manage patches more efficiently.
1. Threat Intelligence Briefing Agent (Security Copilot): This agent collects relevant threat data, analyzes it against your organization’s unique risk profile, and generates concise intelligence briefings for your security team.
Major Updates and Security Improvements for AI
- For expanded AI protection, Microsoft will now manage and secure AI environments, including Azure, AWS, Google, Vertex AI, Gemini, Gamma, Lama, and Mistral models, by offering broader monitoring and safeguard measures across these platforms.
- Shadow AI prevention: Microsoft Entra now includes web filters to spot and block unauthorized AI apps.
- Browser-based data protection: the new Purview controls in Microsoft Edge for Business help stop users from entering sensitive data into AI tools.
- Teams Security: Microsoft Teams now offers better protection against phishing and advanced threats during collaboration. Overall, these agents learn from user input and integrate into existing workflows within Microsoft's Zero Trust framework. In their work, they help security teams stay in control and respond to incidents faster.
Protecting AI systems and leveraging AI for security are now essential for every organization at Microsoft. We are committed to helping organizations secure their future with our AI-first comprehensive security platform.

A year ago, the Security Copilot launched to help defenders. Today, new AI agents handle phishing, data security, and identity tasks as cyber threats rise beyond human capacity. AI agents are now vital for modern security.

Phishing is a major cyber threat. In one year, Microsoft detected over 30 billion phishing emails. This volume can overwhelm security teams, making manual work and separate tools insufficient for quick, data-driven decisions.

The new phishing triage agent in Microsoft Security Copilot can handle routine phishing alerts and attacks. This lets human defenders focus more on serious threats and pre-emptive security measures. This is just one example of how agents can change how we approach security.

Organizations continue to prioritize securing and managing AI. We will bring new features to our purpose-built solutions, including Microsoft Defender, Microsoft Entra, and Microsoft Purview.

Explore the new agents in Security Copilot and the latest AI security to strengthen your organization's cyber defenses today.

Expanding Microsoft Security Copilot With New AI Agent Capabilities

Microsoft Threat Intelligence handles 84 trillion daily signals, including 7,000 password attacks per second. To match this pace, Security Copilot adds six Microsoft agents and five partner agents, with previews in April 2025.

Six new AI agent solutions from Microsoft Security

The six new agents extend Security Copilot’s capabilities by managing high-security and IT volumes, adapting to feedback, and following Zero Trust principles. They help teams respond faster and focus on major risks.

Security Copilot agents will soon be available throughout the Microsoft security platform. Here is what they are designed to do:
- The phishing triage agent in Microsoft Defender reviews phishing alerts, identifies real threats, filters out false alarms, provides clear explanations for each decision, and improves over time with admin feedback.
- Alert triage agents in Microsoft Purview, Review, Data Loss Prevention, and Insider Risk prioritize the most critical incidents and enhance their accuracy based on administrator feedback.
- The Conditional Access Optimization Agent in Entra detects unprotected users or apps and suggests simple policy updates for identity teams.
- The vulnerability remediation agent in Intune tracks, ranks, and helps address vulnerabilities, speeding Windows OS patching after admin approval.
- The Threat Intelligence briefing agent automatically collects and shares intelligence tailored to your organization.
Security Copilot’s agents show how we keep innovating by building on years of AI research. Learn more about how these agents work.

5 New Agent Solutions From Microsoft Security Partners

Security is a team effort, and Microsoft supports our partners with an open platform that enables them to deliver more value to customers. Here are five new AI agents from our partners that will be available in Security Copilot:
- The Privacy Breach Response Agent by OneTrust reviews data breaches, provides guidance to the privacy group, and ensures regulatory requirements are met.
- The Aviatrix network supervisor agent identifies the root cause of issues and summarizes VPN gateway or site2cloud connection outages and failures.
- The SecOps tooling agent by BlueVoyant assesses security operations, centers, and controls, then recommends improvements for operations, controls, and compliance.
- The triage agent from Tanium provides analysts with the context they need to quickly and confidently decide how to handle each alert.
- The Task Optimizer Agent by Fletch helps predict important alerts, reduce fatigue, and improve security.
Find out more about Security Copilot agents and learn how to get started today. If you already use Security Copilot, join our customer connection program now to receive the latest updates and become part of our collaboration network.

New, AI-Powered Data Security Investigations And Analysis

We are introducing Microsoft Purview Data Security Investigations to help teams quickly identify and address risks related to sensitive data exposure. These investigations use AI-powered content analysis to identify sensitive data and other risks associated with incidents. Investigators can use these understandings to work securely with other teams and simplify complex tasks, helping mitigate faster. This solution connects data security investigations to Defender incidents and Purview insider risk cases and will be available for preview starting April 2025.

Further Advances In Securing And Governing Generative AI

A strong cybersecurity foundation is vital for AI transformation. As organizations adopt generative AI, securing and managing workplace issues becomes urgent. Our new report, Secure Employee Access in the Age of AI, shows that 57 percent of organizations have seen more security incidents due to AI, while most recognize the need for AI controls 60 percent have not begun.

Securing AI is a new challenge, and leaders have particular concerns, such as preventing data oversharing, reducing new AI threats and vulnerabilities, and keeping up with changing compliance rules. Microsoft Security Solutions are designed to help organizations deal with these issues. We are announcing new advanced features to help organizations protect their AI investments, whether they use Microsoft AI or other AI tools.

AI Security Posture Management for Multimodal and Multicloud Environments

Organizations building custom AI solutions need to improve the security of AI models running across different platforms and clouds. To help with this, Microsoft Defender now offers AI security posture management not only for Microsoft Azure and Amazon Web Services, but also for Google Cloud, Vertex AI, and all models in the Azure AI Foundry Catalog. Starting in May 2025, this will cover models like Gemini, Gamma, Meta, Llama, Mistral, and custom models. With this multi-cloud support, organizations can see and manage AI security across Azure, AWS, and Google Cloud. Microsoft Defender helps organizations get started with AI security across different models and clouds.

New Detection And Protection For Emerging AI Threats

AI introduces new risks, including more avenues for cyber attacks and undiscovered vulnerabilities. The open worldwide application security project OWASP spotlights the top risks and solutions for generative AI apps. Starting in May 2025, Microsoft Defender will offer new and improved AI detections for several OWASP-identified risks, including indirect prompt injection attacks, sensitive data exposure, and wallet abuse. These new detections will help SOC analysts better protect custom AI apps with added safeguards for the Azure OpenAI service and models in the Azure AI Foundry Catalog.

New Controls To Prevent Risky Access And Data Leaks Into Concealed AI Apps

As more people use generative AI, many organizations are finding that employees are using AI apps that have not been approved by IT or security teams. This unapproved use, known as shadow AI, has greatly increased the risk of sensitive data leaks. To help manage this, we are announcing the general availability of an AI web category filter in Microsoft Intra Internet Access. This feature lets organizations set detailed access permissions and enforce policies about which users or groups can use different types of AI apps.

After establishing access policies, the next step is to block sensitive data from being entered into AI apps. To support this, Microsoft is previewing per‑web‑view browser data loss prevention controls in Edge for Business. This helps security teams enforce DLP policies and prevent data entry into generative AI apps, starting with ChatGPT, Copilot Chat, DeepSeek, and Google Gemini.

Learn more about our AI security innovations and take action today to strengthen your organization's defenses. Email remains the main phishing vector, but collaboration tools are increasingly targeted. Starting in April 2025, Microsoft Defender for Office 365 will protect Teams users from phishing by scanning links and attachments in real time for potential threats. SOC teams will have full visibility into related attempts and incidents via Microsoft Defender alerts and data.

Agile Innovation To Build A Safer World

We are always working to improve the Microsoft security portfolio by following our Secure Future initiative. Our goal is to provide strong, complete protection and give defenders the best AI tools so every organization can secure and manage AI. We appreciate our customers and partners, and together we look forward to creating a safer world for everyone.

Source:  Expanding Microsoft Security Copilot with AI agentic capabilities
Contact
Microsoft is expanding its Security Copilot with AI-powered agents that automate routine security tasks, freeing teams to focus on advanced threats.

Highlights of the Security Co-pilot expansion, April 2025 preview
- Six new agents are available for Defender, Entra, Intune, and Purview, each handling specific security tasks independently.
- Five new partner agents from OneTrust, Aviatrix, BlueVoyant, Tanium, and Fletch add features for privacy, networking, and analytics.
New Microsoft Security Agents Include:
1. Phishing triage agent (Defender): This agent automatically reviews user-reported emails, distinguishes between real threats and harmless messages, and summarizes findings in language that security teams can easily understand.
1. Alert Triage agent (Purview): automatically analyzes and prioritizes insider risk and data loss prevention alerts, accounting for data sensitivity and user actions.
1. Conditional Access Optimization Agent (Entra): This agent reviews existing identity access policies, detects gaps or weaknesses, and provides real-time suggestions for more effective identity protection.
1. Vulnerability Remediation Agent (Intune): monitors app and policy vulnerabilities, ranks them, and helps manage patches more efficiently.
1. Threat Intelligence Briefing Agent (Security Copilot): This agent collects relevant threat data, analyzes it against your organization’s unique risk profile, and generates concise intelligence briefings for your security team.
Major Updates and Security Improvements for AI
- For expanded AI protection, Microsoft will now manage and secure AI environments, including Azure, AWS, Google, Vertex AI, Gemini, Gamma, Lama, and Mistral models, by offering broader monitoring and safeguard measures across these platforms.
- Shadow AI prevention: Microsoft Entra now includes web filters to spot and block unauthorized AI apps.
- Browser-based data protection: the new Purview controls in Microsoft Edge for Business help stop users from entering sensitive data into AI tools.
- Teams Security: Microsoft Teams now offers better protection against phishing and advanced threats during collaboration. Overall, these agents learn from user input and integrate into existing workflows within Microsoft's Zero Trust framework. In their work, they help security teams stay in control and respond to incidents faster.
Protecting AI systems and leveraging AI for security are now essential for every organization at Microsoft. We are committed to helping organizations secure their future with our AI-first comprehensive security platform.

A year ago, the Security Copilot launched to help defenders. Today, new AI agents handle phishing, data security, and identity tasks as cyber threats rise beyond human capacity. AI agents are now vital for modern security.

Phishing is a major cyber threat. In one year, Microsoft detected over 30 billion phishing emails. This volume can overwhelm security teams, making manual work and separate tools insufficient for quick, data-driven decisions.

The new phishing triage agent in Microsoft Security Copilot can handle routine phishing alerts and attacks. This lets human defenders focus more on serious threats and pre-emptive security measures. This is just one example of how agents can change how we approach security.

Organizations continue to prioritize securing and managing AI. We will bring new features to our purpose-built solutions, including Microsoft Defender, Microsoft Entra, and Microsoft Purview.

Explore the new agents in Security Copilot and the latest AI security to strengthen your organization's cyber defenses today.

Expanding Microsoft Security Copilot With New AI Agent Capabilities

Microsoft Threat Intelligence handles 84 trillion daily signals, including 7,000 password attacks per second. To match this pace, Security Copilot adds six Microsoft agents and five partner agents, with previews in April 2025.

Six new AI agent solutions from Microsoft Security

The six new agents extend Security Copilot’s capabilities by managing high-security and IT volumes, adapting to feedback, and following Zero Trust principles. They help teams respond faster and focus on major risks.

Security Copilot agents will soon be available throughout the Microsoft security platform. Here is what they are designed to do:
- The phishing triage agent in Microsoft Defender reviews phishing alerts, identifies real threats, filters out false alarms, provides clear explanations for each decision, and improves over time with admin feedback.
- Alert triage agents in Microsoft Purview, Review, Data Loss Prevention, and Insider Risk prioritize the most critical incidents and enhance their accuracy based on administrator feedback.
- The Conditional Access Optimization Agent in Entra detects unprotected users or apps and suggests simple policy updates for identity teams.
- The vulnerability remediation agent in Intune tracks, ranks, and helps address vulnerabilities, speeding Windows OS patching after admin approval.
- The Threat Intelligence briefing agent automatically collects and shares intelligence tailored to your organization.
Security Copilot’s agents show how we keep innovating by building on years of AI research. Learn more about how these agents work.

5 New Agent Solutions From Microsoft Security Partners

Security is a team effort, and Microsoft supports our partners with an open platform that enables them to deliver more value to customers. Here are five new AI agents from our partners that will be available in Security Copilot:
- The Privacy Breach Response Agent by OneTrust reviews data breaches, provides guidance to the privacy group, and ensures regulatory requirements are met.
- The Aviatrix network supervisor agent identifies the root cause of issues and summarizes VPN gateway or site2cloud connection outages and failures.
- The SecOps tooling agent by BlueVoyant assesses security operations, centers, and controls, then recommends improvements for operations, controls, and compliance.
- The triage agent from Tanium provides analysts with the context they need to quickly and confidently decide how to handle each alert.
- The Task Optimizer Agent by Fletch helps predict important alerts, reduce fatigue, and improve security.
Find out more about Security Copilot agents and learn how to get started today. If you already use Security Copilot, join our customer connection program now to receive the latest updates and become part of our collaboration network.

New, AI-Powered Data Security Investigations And Analysis

We are introducing Microsoft Purview Data Security Investigations to help teams quickly identify and address risks related to sensitive data exposure. These investigations use AI-powered content analysis to identify sensitive data and other risks associated with incidents. Investigators can use these understandings to work securely with other teams and simplify complex tasks, helping mitigate faster. This solution connects data security investigations to Defender incidents and Purview insider risk cases and will be available for preview starting April 2025.

Further Advances In Securing And Governing Generative AI

A strong cybersecurity foundation is vital for AI transformation. As organizations adopt generative AI, securing and managing workplace issues becomes urgent. Our new report, Secure Employee Access in the Age of AI, shows that 57 percent of organizations have seen more security incidents due to AI, while most recognize the need for AI controls 60 percent have not begun.

Securing AI is a new challenge, and leaders have particular concerns, such as preventing data oversharing, reducing new AI threats and vulnerabilities, and keeping up with changing compliance rules. Microsoft Security Solutions are designed to help organizations deal with these issues. We are announcing new advanced features to help organizations protect their AI investments, whether they use Microsoft AI or other AI tools.

AI Security Posture Management for Multimodal and Multicloud Environments

Organizations building custom AI solutions need to improve the security of AI models running across different platforms and clouds. To help with this, Microsoft Defender now offers AI security posture management not only for Microsoft Azure and Amazon Web Services, but also for Google Cloud, Vertex AI, and all models in the Azure AI Foundry Catalog. Starting in May 2025, this will cover models like Gemini, Gamma, Meta, Llama, Mistral, and custom models. With this multi-cloud support, organizations can see and manage AI security across Azure, AWS, and Google Cloud. Microsoft Defender helps organizations get started with AI security across different models and clouds.

New Detection And Protection For Emerging AI Threats

AI introduces new risks, including more avenues for cyber attacks and undiscovered vulnerabilities. The open worldwide application security project OWASP spotlights the top risks and solutions for generative AI apps. Starting in May 2025, Microsoft Defender will offer new and improved AI detections for several OWASP-identified risks, including indirect prompt injection attacks, sensitive data exposure, and wallet abuse. These new detections will help SOC analysts better protect custom AI apps with added safeguards for the Azure OpenAI service and models in the Azure AI Foundry Catalog.

New Controls To Prevent Risky Access And Data Leaks Into Concealed AI Apps

As more people use generative AI, many organizations are finding that employees are using AI apps that have not been approved by IT or security teams. This unapproved use, known as shadow AI, has greatly increased the risk of sensitive data leaks. To help manage this, we are announcing the general availability of an AI web category filter in Microsoft Intra Internet Access. This feature lets organizations set detailed access permissions and enforce policies about which users or groups can use different types of AI apps.

After establishing access policies, the next step is to block sensitive data from being entered into AI apps. To support this, Microsoft is previewing per‑web‑view browser data loss prevention controls in Edge for Business. This helps security teams enforce DLP policies and prevent data entry into generative AI apps, starting with ChatGPT, Copilot Chat, DeepSeek, and Google Gemini.

Learn more about our AI security innovations and take action today to strengthen your organization's defenses. Email remains the main phishing vector, but collaboration tools are increasingly targeted. Starting in April 2025, Microsoft Defender for Office 365 will protect Teams users from phishing by scanning links and attachments in real time for potential threats. SOC teams will have full visibility into related attempts and incidents via Microsoft Defender alerts and data.

Agile Innovation To Build A Safer World

We are always working to improve the Microsoft security portfolio by following our Secure Future initiative. Our goal is to provide strong, complete protection and give defenders the best AI tools so every organization can secure and manage AI. We appreciate our customers and partners, and together we look forward to creating a safer world for everyone.

Source:  Expanding Microsoft Security Copilot with AI agentic capabilities

Microsoft Expands Security Co-pilot With New AI Threat Response Agents

Harish Shenoy
March 28, 2026
14 min read
246

Microsoft is expanding its Security Copilot with AI-powered agents that automate routine security tasks, freeing teams to focus on advanced threats. Highlights of the Security Co-pilot expansion, April... Details

HP Issues Security Update for NVIDIA GPU Driver Vulnerabilities

Harish Shenoy
March 28, 2026
6 min read
180

In high-performance computing, the GPU matters for system security, not just visuals. On March 9, 2026, HP released a security bulletin detailing serious vulnerabilities in the NVIDIA GPU driver.... Details

Google Completes March 2026 Spam Update Rollout

Harish Shenoy
March 28, 2026
8 min read
229

Early 2026 has seen many changes in search, but Google's latest update has set a new standard for speed. On March 25, 2026, Google finished rolling out... Details

Intel and CrowdStrike Expand AI PC With Hardware Integration

Harish Shenoy
March 27, 2026
5 min read
287

As threats shift from the network edge to hardware, Intel and CrowdStrike expanded AI capabilities on PCs in March 2026. With hardware integration, this move represents a new approach beyond... Details

Amazon Spring Sale Peaks With Discounts on Apple Devices and Laptops

Harish Shenoy
March 27, 2026
5 min read
255

Discover exceptional savings on Amazon, outlet items, seasonal essentials, Easter bucket stuffers, and exclusive deals for primary members during this 7-day shopping event. Key Takeaways ... Details

Apple Expands US Manufacturing With New Supplier Partnerships

Harish Shenoy
March 27, 2026
4 min read
240

Apple announced that Bosch, Serious Logic, TDK, and Quinty Electronics are joining its American Manufacturing Program (AMP) to collaborate on manufacturing critical materials and components in... Details

Samsung Expands Browser Sync Across Devices With AI Features

Harish Shenoy
March 27, 2026
4 min read
209

Samsung Electronics has officially launched Samsung Browser for Windows, bringing its popular mobile browser to PC. The new version now offers smooth cross-device browsing and... Details

OpenAI Adds Location Controls to Improve ChatGPT Local Responses

Harish Shenoy
March 27, 2026
7 min read
284

Large language models have quickly moved from offering general knowledge to providing more local, practical help. In late March 2026, OpenAI introduced location controls to improve the... Details

Google Launches Gemini Flash Live for Real-Time Voice AI

Harish Shenoy
March 27, 2026
4 min read
274

We are excited to introduce Gemini 3.1 Flash Live, now available to all developers through the Google Live API in Google AI Studio. This update improves response... Details

NIST Introduces AI Security Standards for US Data Center Infrastructure

Mouli Verma
March 27, 2026
9 min read
245

The National Institute of Standards and Technology (NIST) has introduced a new initiative to establish security and interoperability standards for artificial intelligence systems deployed across the US data center... Details

Prev.
1
…
127
128
129
130
131
…
186
Next

Latest post

How Can Apple’s Brand New Siri Assistant Read Your Pixels Safely?

What Multi-Year Factory Memory Pact Did SK Hynix Seal With NVIDIA?

Why Is Microsoft Using Your Workday Reports to Grade Your AI Skills?

Popular Posts

Best Budget Smartphones 2026: Affordable Phones That Impress (4123)

Best Business Laptops 2025 (3734)

The Future Is Calling: Top Upcoming Smartphones of 2026 You’ll Want to Wait For (3157)

DSLR vs Mirrorless: Which Is Better for Photography Beginners? (2535)

NIST Update Signals Fast Track for Post-Quantum Standards (2322)

Stay Connected

Category: News