LIVE · cybersecurity feed
Live wire
ai securitymedium

​​What’s new in Microsoft Security: June 2026

Microsoft is enhancing its security offerings with a focus on AI and agent protection. New features include 'Codename MDASH,' an AI-powered system for discovering and remediating complex software vulnerabilities across environments. Additionally, Microsoft Defender now extends endpoint protection to local AI agents, detecting and blocking threats like prompt injection attempts targeting tools such as GitHub Copilot CLI and Claude Code.

zeroday.news · 32d ago

Microsoft is introducing new security measures, with a significant emphasis on artificial intelligence and the protection of AI agents. The company is developing an AI-driven system codenamed 'MDASH' designed to identify and address intricate software vulnerabilities across various computing environments.

This new system aims to automate the discovery and remediation of complex security flaws, a critical capability as software environments become increasingly interconnected and sophisticated. By leveraging AI, MDASH is intended to provide a more proactive and efficient approach to vulnerability management.

In parallel, Microsoft Defender is expanding its protective capabilities to encompass local AI agents. This extension means that endpoint protection will now monitor and secure AI tools operating on individual machines.

The updated Microsoft Defender will be capable of detecting and neutralizing threats specifically targeting AI agents. This includes defenses against malicious techniques such as prompt injection, which can manipulate AI models into performing unintended or harmful actions.

The scope of this protection extends to popular AI-powered development tools. Specifically mentioned are tools like GitHub Copilot CLI and Claude Code, indicating that Microsoft is prioritizing the security of AI assistants used in software development workflows.

Prompt injection attacks are a growing concern as AI becomes more integrated into various applications and services. These attacks exploit the way AI models process natural language prompts, potentially leading to the leakage of sensitive information, unauthorized actions, or the generation of malicious code.

By extending Defender's protection to local AI agents, Microsoft aims to provide a more comprehensive security posture for organizations that are increasingly adopting AI technologies. This move reflects the evolving threat landscape and the need for specialized security solutions for AI-driven systems.

The development of 'Codename MDASH' and the enhanced capabilities of Microsoft Defender underscore Microsoft's commitment to addressing the security challenges posed by the rapid advancement and adoption of artificial intelligence.

ai securityvulnerability managementendpoint protectionmicrosoft defenderprompt injection
ShareXLinkedInWhatsAppFacebook

More News

view all →
phishing

Phishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st)

Most phishing campaigns rely on the fact that the victim is afraid to loose "something": money, access to information, ... Many brands have been impersonated by campaigns but I spotted some phishing emails that focus on AI services like ChatGPT.

CVE-2026-48449

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system. It has been described as a case of incorrect authorization that could result in

vulnerability

Elastic goes all-in on Hacker Summer Camp at Black Hat and DEF CON in Las Vegas

Attack Discovery turns raw alerts into validated threats and Elastic Defend closes vulnerable driver gaps as fast as they're disclosed. Watch it all run against real attacks at the booth.

breach

Hermes AI agent used to automate attack on Thai Finance Ministry

A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation activity during an alleged breach of Thailand's Ministry of Finance. [...]

security

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

Hackers are changing the DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Microsoft 365 login pages. [...]

security

BGP ORIGIN attribute manipulation and its impact on the Internet

By doing in-depth testing, we found nearly 70% of BGP paths experience ORIGIN attribute rewrites by transit providers seeking traffic advantages. We examine the global impact of this practice and argue for deprecating ORIGIN in route selection.