Feed aggregator
What’s new in Microsoft Security: July 2026
Every organization needs security that protects end to end with the speed and scale of AI. Microsoft’s vision is simple: security should be ambient and autonomous, just like the AI it protects.
As organizations scale AI and expand across environments, security teams need protection that covers every surface. This month’s updates help security and IT teams secure their AI environments, use AI to defend at speed and scale, and strengthen the foundations that AI-powered operations depend on. Here’s what’s new:
Project Perception brings agentic defense to security operationsProject Perception, newly announced, is a coordinated system of specialized agents, cybersecurity-focused models, and enterprise-wide signals that transform how security operates. The agents work as a team: red team agents expose weaknesses, blue team agents investigate cyberthreats, and green agents harden what’s found. These multi-agent autonomous workflows work as a team to operate in continuous loops to execute end-to-end security workflows.
Learn more about Project Perception Microsoft Defender secures the full AI attack surface, from inbox to cloudExpanded Microsoft Defender protections are designed to reduce risks associated with day-to-day AI interactions, from email inboxes to cloud agent environments. New prompt injection protection in Microsoft Defender, now in preview, identifies and isolates emails containing malicious AI instructions before delivery, reducing the risk of prompt injection attacks reaching the inbox. Unified Defender posture and runtime protection for cloud agents in Microsoft Agent 365 consolidates security posture assessment and runtime protection for Microsoft Foundry, Microsoft Copilot Studio, and third party-managed agents, helping teams reduce AI-specific risk across the agent estate.
Accelerate detection, prioritization, and response with AI embedded in SecOps workflowsSecurity teams can accelerate detection, prioritization, and response to cyberthreats with AI embedded directly into security operations (SecOps) workflows through Microsoft Defender. Threat intelligence enhancements, including Microsoft Defender Threat Intelligence convergence and an enhanced Threat Intelligence Agent, bring more out-of-the-box intelligence and automation into the unified SecOps workflow, so teams can move from summary to action.
Strengthen the cloud, code, and identity foundations AI depends onMicrosoft Defender is strengthening the foundational protections that AI-era operations depend on across cloud, code, and identity. Cloud Security Posture Management extends coverage to serverless containers, giving teams visibility and continuous posture assessment across containerized workloads running on Azure Container Apps, Azure Container Instances, and Amazon Web Services Elastic Container Service (AWS ECS) on Fargate. New interconnected experiences between Defender and Microsoft Entra empower the security operations center (SOC) to disable compromised identities directly using a role-based access control (RBAC) mode that maintains least privilege. Microsoft Defender Experts services are also expanding: Microsoft Defender Experts Threat Intelligence delivers human-led, curated insight into the cyberthreats most relevant to each organization, and Microsoft Defender Experts MDR extends expert-run detection and response beyond the Microsoft estate into third-party and multicloud signals through Microsoft Sentinel.
Microsoft Entra strengthens identity across the AI-powered enterprise Strengthen identity foundations for AI-powered operationsNew capabilities in Microsoft Entra are designed to strengthen the identity foundations that AI-powered operations depend on. Tenant governance helps organizations discover, manage, and govern tenants across their environment with centralized policies and cross-tenant delegated administration. Microsoft Entra ID is making passkeys the default authentication experience, which helps reduce reliance on SMS and voice, strengthens phishing-resistant security, and makes for an easier transition away from Microsoft-provided telecom delivery, which will retire in 2027. Through new interconnected Entra and Defender experiences, identity and access management and SOC teams share user experience, RBAC, and agentic workflows that eliminate product seams so identity and security operations can work together.
Protect sensitive data in motion across software as a service (SaaS) and AI apps with Microsoft Purview and Microsoft EntraMicrosoft Purview now integrates with Microsoft Entra Internet Access to extend data security to the network layer, enabling real-time protection of sensitive data shared with unmanaged cloud and AI apps over the network. For example, when an employee attempts to upload sensitive customer data or proprietary information, including text and files, into shadow AI apps, sharing is detected and blocked before the data is leaked from the organization. Organizations now have a unified Microsoft solution to gain visibility into where organizational data is shared externally, to detect and block sensitive data in transit, and to enable consistent data protection across their environment without relying on third-party solutions.
Microsoft Purview strengthens data security, compliance, and investigation for AIA new Microsoft Purview Data Loss Prevention (DLP) for Microsoft 365 Copilot protection, available in preview, now gives data security teams greater control over how Copilot leverages email content, given external sources can introduce sensitive, third-party, or unvetted information that organizations may not want to rely on. Now admins can exclude emails from external senders from being referenced, summarized, or used as grounding data for Copilot. For example, with this DLP policy in place, an employee working with an external collaborator can still rely on Copilot to leverage internal insights, while external conversations are automatically excluded from Copilot-generated responses. With the native integration between Microsoft Purview and Microsoft 365 Copilot, organizations can extend controls to AI interactions with minimal additional configuration, resulting in a more predictable and policy-aligned AI environment.
A new centralized Microsoft Purview Insider Risk Management alert experience simplifies the prioritization of the most pressing data risks by bringing agentic alert triage, enriched user details, and expanded analysis capabilities (such as notes infused on the Insider Risk Management case) into a single view. Helping power this experience, the Data Security Triage Agent includes an advanced AI reasoning layer, now generally available, that performs deeper, multi-step analysis across user, device, and data activity signals to surface the incidents most likely to require investigation while reducing noise. Analysts can filter across classic and Data Security Triage Agent attributes on a single page, preview agent summaries and user details without switching views, and document findings while the system automatically records status changes and escalations to maintain a clear investigation history. Together, the Insider Risk Management alert experience and Data Security Triage Agent help security teams investigate faster and with greater confidence.
The unified Insider Risk Management alerts list, showing inline agent summaries, the new Categorization column, and combined classic and agent filtering on a single page. Advanced endpoint management now broadly availableAs of July 1, 2026, the capabilities of the Microsoft Intune Suite are included in Microsoft 365 E5, with select capabilities also available in Microsoft 365 E3, bringing advanced endpoint management to more organizations without added cost. IT and security teams can now apply advanced endpoint management capabilities to reduce standing admin rights, modernize certificate management, resolve issues quickly, streamline app delivery, and bring AI into workflows with Microsoft Security Copilot in Intune. Together, these capabilities strengthen the endpoint foundations that AI-powered operations depend on. See everything that’s now included in your plan and how to start putting it to work.
Stay In the LoopMicrosoft Security is focused on delivering innovations across our portfolio, along with research-driven insights and reports for the security community. In the Loop posts are your reliable source of what’s new across Microsoft Security and what it means for your security strategy. Check back for the next drop.
To learn more about Microsoft Security solutions, visit our website. Bookmark the Security blog to keep up with our expert coverage on security matters. Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybersecurity.
The post What’s new in Microsoft Security: July 2026 appeared first on Microsoft Security Blog.
Timeless Compliance: Why Better Questions Beat Bigger Frameworks
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
The post Timeless Compliance: Why Better Questions Beat Bigger Frameworks appeared first on SecurityWeek.
Northern Ireland police monitored phone communications of former BBC security editor Brian Rowan after he wrote about a police and MI5 agent in Northern Ireland
Show HN: Tilery-VM – run Nvidia cuTile GPU kernels on a CPU, no GPU required
Article URL: https://github.com/drbh/tilery-vm
Comments URL: https://news.ycombinator.com/item?id=49111222
Points: 1
# Comments: 0
Minimus Releases Hardened Images for Free – What Does It Do Differently?
The New Science of Inflammation
Article URL: https://www.nytimes.com/interactive/2026/07/29/magazine/inflammation-chronic-immune-system-health.html
Comments URL: https://news.ycombinator.com/item?id=49111198
Points: 2
# Comments: 0
How did you fund your startup without VC?
Schmitt Trigger: Robust Comparator Design with Hysteresis
Article URL: https://www.wevolver.com/article/schmitt-trigger-robust-comparator-design-with-hysteresis
Comments URL: https://news.ycombinator.com/item?id=49111194
Points: 1
# Comments: 0
Liquid Encoder Model for CPUs
Article URL: https://twitter.com/helloiamleonie/status/2082128554146267465
Comments URL: https://news.ycombinator.com/item?id=49111187
Points: 2
# Comments: 0
Show HN: Dowe Lang simplifies fullstack applications, web, Android and iOS
Article URL: https://www.dowe.dev
Comments URL: https://news.ycombinator.com/item?id=49111182
Points: 2
# Comments: 0
The Economic Benefit of Refactoring
Article URL: https://martinfowler.com/articles/exploring-gen-ai/refactoring-economic-benefit.html
Comments URL: https://news.ycombinator.com/item?id=49111176
Points: 3
# Comments: 0
San Jose Plans $13B BART Subway Extension. How About <$1B?
Article URL: https://www.forbes.com/sites/bradtempleton/2026/07/30/san-jose-plans-13b-bart-subway-extension--how-about--1b/
Comments URL: https://news.ycombinator.com/item?id=49111175
Points: 2
# Comments: 0
Why self-hosted inference is essential
Article URL: https://www.redhat.com/en/blog/why-self-hosted-inference-essential-building-reliable-sovereign-inference-layer
Comments URL: https://news.ycombinator.com/item?id=49111151
Points: 2
# Comments: 0
HN: I ran a 56M parameter LLM across three ESP32-S3 boards via ESP-NOW
Article URL: https://github.com/wladimiravila/esp32s3-distributed-ai
Comments URL: https://news.ycombinator.com/item?id=49111137
Points: 2
# Comments: 2
Incremental Codebase Indexing with Merkle Trees and Tree-sitter
Article URL: https://monkeyscode.com/blog/incremental-codebase-indexing-with-merkle-trees-and-tree-sitter
Comments URL: https://news.ycombinator.com/item?id=49111109
Points: 2
# Comments: 0
Treetable
Article URL: https://web.archive.org/web/20220418084435/http://archive.vector.org.uk/art10500340
Comments URL: https://news.ycombinator.com/item?id=49111098
Points: 2
# Comments: 0
10 Year Old's Research Shocks Scientists Around the World [video]
Article URL: https://www.youtube.com/watch?v=nhESxrqPjfU
Comments URL: https://news.ycombinator.com/item?id=49111085
Points: 3
# Comments: 0
Show HN: Let your agents create custom pods
I listen to a lot of podcasts on the go and wanted a short summary of all the AI shenanigans sent to an RSS feed, so I created thedaily.fm.
Here's a short video showing the new MCP support so your agents can do all the lifting.
There are summary pods for AI, financial markets, companies like OpenAI and Cloudflare, even local legislation to track the madness in Government.
Hope you find it useful!
Comments URL: https://news.ycombinator.com/item?id=49111077
Points: 2
# Comments: 1
Strings Don't Vibrate the Way You Think [video]
Article URL: https://www.youtube.com/watch?v=sYdXa_yp0fc
Comments URL: https://news.ycombinator.com/item?id=49111076
Points: 3
# Comments: 1
