Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative
Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and future-ready cybersecurity.
Browse entries 481–504 of 1576. Return to the first page to search and filter the complete collection.
Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and future-ready cybersecurity.
Read five key learnings from the Frost & Sullivan 2025 Frost Radar™ for CSPM to learn how CSPM is evolving from point-in-time compliance to continuous risk management.
Unit 42 analysis of phantom squatting: attackers register domains that LLMs may hallucinate in recommendations, code, documentation, or support answers. That turns model error into a supply-chain path, especially when users or agents follow generated links without independent validation.
Following our AI Threat Defense announcement, here's how we use AI to chart a path to autonomous software development lifecycle security.
A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using MV3 APIs and intermediary infrastructure.
Cloudflare report on testing security-focused frontier models against real infrastructure code. Relevant to evaluating AI-assisted vulnerability discovery and production security workflows.
Play video
NDC Security 2026 talk on securing agentic systems through reference architecture, common risk analysis, and control prioritization for autonomous agents in the software development lifecycle.
This post dives deep into how Claude wrote an exploit for one of the vulnerabilities it found in Firefox.
A METR exploratory analysis uses 5,305 coding-agent transcripts from seven staff to estimate time saved on AI-assisted tasks. A model estimates counterfactual human effort, while message activity approximates actual human time. The judge was checked against only 34 human estimates, and transcript selection excludes work done without AI. Task substitution, specialization and uncertain success judgments further limit interpretation. The resulting ratios are proposed soft upper bounds, not causal measurements of overall productivity.
METR’s February 2026 modeling note builds a compact forecast of AI research automation from research labor, compute and software efficiency. Its equations connect capability progress to the share of tasks automated while representing remaining human work as a bottleneck. The accompanying model is useful for examining sensitivity to automation speed and research returns. The headline date follows selected parameter assumptions, many based on judgment, rather than an observed capability threshold. The model omits important effects, including parts of research judgment and the wider economy, and does not establish when real research organizations will become autonomous.
Play video
NDC AI 2025 talk introducing AI security for developers, including model lifecycle, training data, secure integration, data leakage, prompt injection, adversarial inputs, and model bias.
Play video
This AI Explained video reviews a major AI development through the lens of AI safety and model behavior. It is useful context for AI engineering, evaluation, governance, and operational risk.
Play video
This AI Explained video reviews a major AI development through the lens of governance and responsible deployment. It is useful context for AI engineering, evaluation, governance, and operational risk.
METR’s July 2025 analysis asks whether task-completion horizons transfer beyond its original software evaluations. It reanalyzes nine existing benchmarks, fitting success against human completion time where suitable measurements are available. The relationship is useful in several settings but differs across domains and weakens when proxies such as video length or task fees stand in for human effort. Some fits require constrained assumptions, and agents, datasets and scaffolds are not matched across benchmarks. The study supports checking the metric’s validity locally rather than treating a single horizon as a universal measure of autonomy.
METR’s June 2025 proposal asks what AI developers should disclose about serious model risks, including internal capabilities, monitoring, safety investigations and incident history. It organizes questions around information that outsiders cannot reliably infer from public model behavior, and discusses disclosure incentives and the limits of developer self-reporting. Sensitive evidence could be assessed by trusted reviewers rather than exposed publicly. This is a proposed transparency framework, not a tested assurance standard or legal compliance checklist. Its practical value is turning broad safety statements into specific requests for evidence and accountable review.
Play video
This AI Explained video reviews a major AI development through the lens of benchmarks and evaluation evidence. It is useful context for AI engineering, evaluation, governance, and operational risk.
Play video
This AI Explained video reviews a major AI development through the lens of benchmarks and evaluation evidence. It is useful context for AI engineering, evaluation, governance, and operational risk.
Play video
This AI Explained video reviews a major AI development through the lens of benchmarks and evaluation evidence. It is useful context for AI engineering, evaluation, governance, and operational risk.
Play video
This AI Explained video reviews a major AI development through the lens of benchmarks and evaluation evidence. It is useful context for AI engineering, evaluation, governance, and operational risk.
Play video
This AI Explained video reviews a major AI development through the lens of benchmarks and evaluation evidence. It is useful context for AI engineering, evaluation, governance, and operational risk.
METR’s August 2024 evaluation update describes expanding its task set, using human completion time to organize difficulty and weighting task families to limit domination by families with many variants. It examines how success changes with additional agent time and where progress levels off under a simple harness. Sparse human baselines and the mixture of easy and hard tasks limit interpretation. The reusable lesson is that an aggregate score depends on task composition, weighting, stopping behavior and scaffolding, not just the model.
Play video
This AI Explained video reviews a major AI development through the lens of governance and responsible deployment. It is useful context for AI engineering, evaluation, governance, and operational risk.
Play video
Leo Platzer and Jeff Koss demonstrate a document-preparation workflow using a fictional legal-operations collection. Classification produces metadata that drives inclusion rules, followed by source inspection and human corrections before retrieval. Sensitivity, duplicate and superseded documents are selection concerns rather than problems that embeddings alone solve. Scheduled synchronization must also account for deleted source files. The demonstration provides a reusable curation process, but does not establish calibrated classification confidence or a measured retrieval improvement that transfers to another organization.
Play video
Sujee Maniyam and Dylan Bristot explain why identical open-model weights can behave differently across serving stacks. Their overview covers routing requests toward reusable KV state, offloading that state from GPU memory, separating prefill from decode, and using a small draft model whose tokens a larger model verifies. Quantization and application-specific draft training introduce additional quality and workload dependencies. The presentation supplies mechanisms but not sufficient benchmark conditions to generalize its reported speedups.