LIVE FEED
Microsoft Defender and Purview Add AI Agent Controls in September 2026

Microsoft Defender and Purview Add AI Agent Controls in September 2026

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 7.2 Microsoft Security Blog

Microsoft's September 2026 security update delivers network-layer data loss prevention for agentic AI traffic, AI-generated email detonation summaries in Security Copilot, and enterprise-scale labelling automation in Microsoft Purview. These capabilities close a material gap for defenders by extending Zero Trust policy enforcement to on-behalf-of (OBO) agent actions — an emerging blind spot as autonomous agents operate across employee devices and cloud platforms. Residual gaps remain around coverage breadth for third-party agent frameworks, cross-platform policy portability, and the organisational maturity required to define reliable classification policies before enforcement becomes effective.

Microsoft 365 Copilot Prompt Injection Threats in Enterprise

Microsoft 365 Copilot Prompt Injection Threats in Enterprise

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.5 Microsoft Security Blog

Microsoft has released a structured investigator playbook for reconstructing AI-related activity across Microsoft 365 Copilot and Azure AI services, addressing the challenge of converting raw telemetry into coherent incident timelines. The playbook targets threats already observed in enterprise deployments, including prompt injection attempts and unauthorized data access, and operationalizes a scope–context–signal methodology across Purview, Defender, and Sentinel. This guidance directly supports security teams responding to AI-specific incidents where unstructured telemetry has previously hindered attribution and impact assessment.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.