{“lastseen”:”2025-09-30T13:56:06″,”description”:”#### **Microsoft unveils a new wave of security innovation\u2014delivering an agentic platform to protect organizations at scale**\\n\\nWe are living through a turning point in how organizations work and defend themselves. Across industries, \u201cFrontier Firms\u201d are emerging; these are businesses where humans and AI agents collaborate in real time to solve problems, innovate, and build resilient organizations.\\n\\nFor security teams, this shift brings new opportunities and challenges. The complexity and speed of modern cyberthreats demand solutions that go beyond traditional tools. To address these needs, Microsoft is introducing new agentic security capabilities to empower defenders to innovate boldly and safely in this new AI era.\\n\\n## Microsoft Sentinel: The security platform for the agentic era\\n\\nDefenders need to protect AI end-to-end and for that they need a platform that brings together data, context, automation, and intelligent agents, enabling them to defend and adapt at AI speed. That platform is Microsoft Sentinel.\\n\\nSecure your multicloud, multiplatform environment with Microsoft Sentinel\\n\\nSentinel started as a cloud-native security information and event management (SIEM) and expanded to also include a unified security data lake in July. Today, it is expanding into an agentic platform with the general availability of Sentinel data lake, and the public preview of Sentinel graph and Sentinel Model Context Protocol (MCP) server. With graph-based context, semantic access, and agentic orchestration, Sentinel gives defenders a single platform to ingest signals, correlate across domains, and empower AI agents built in Security Copilot, VS Code using GitHub Copilot, or other developer platforms.\\n\\nSentinel ingests signals, either structured or semi-structured, and builds a rich, contextual understanding of your digital estate through vectorized security data and graph-based relationships. By integrating these insights with Microsoft Defender and Microsoft Purview, Sentinel brings graph-powered context to the tools security teams already use, helping defenders trace attack paths, understand impact, and prioritize response\u2014all within familiar workflows. \\n\\n\\u003e _With Microsoft Security and Sentinel data lake, we\u2019ve unified silos, scaled operations, automated processes, and expanded coverage\u2014transforming how we detect patterns and prepare for the future with a unified, agile security posture_. \\n\\u003e \\n\\u003e \u2014 _Bernard Knaapen, Chief Product Owner, Monitoring and Incident Response, ABN AMRO_\\n\\nSentinel also organizes and enriches your security data, making it ready for AI agents to detect issues faster, investigate with more clarity, and respond automatically when needed. And Sentinel\u2019s graph-based approach powers Security Copilot agents to reason over your environment with precision and speed, thanks to the built-in MCP server, which uses open standards for easy agent access and action. For advanced teams, Sentinel MCP server enables extensibility for predefined and custom agents, allowing AI-powered reasoning over unified data. This shifts security from reactive to predictive, helping teams anticipate threats and automate response at scale. \\n\\n _This diagram illustrates the architecture and integration of Microsoft ‘s security ecosystem across multicloud and_ _multiplatform environments._\\n\\nSentinel is open and extensible, so partners can build their own agents and solutions. And with the new Microsoft Security Store, finding and deploying these agents is simple. We\u2019re already collaborating with Accenture, ServiceNow, and Zscaler to strengthen the security ecosystem together. \\n\\nSentinel is an industry-leading SIEM and the scalable backbone defenders need in the age of AI. Together, Sentinel and Security Copilot give security teams the visibility, automation, and scale they need to stay ahead of cyberthreats.\\n\\nLearn more about Microsoft Sentinel platform and take the next steps\\n\\n## Security Copilot: Build your own agents**\u2014** no code required\\n\\nSecurity Copilot was created to help security teams tackle the toughest challenges**\u2014** endless alerts, siloed tools, and constant pressure to do more with less. But no one understands your environment and unique needs like you do. Now you can build your own Security Copilot agents. The Security Copilot portal features a no-code agent builder that lets you describe what you need in natural language and create, optimize, and publish agents tailored to your workflows in minutes.\\n\\nYou can also build agents in a Sentinel MCP server-enabled coding platform, such as VS Code using GitHub Copilot. Once built, you can refine and deploy agents to your Security Copilot workspace while keeping the process within the familiar development platform. \\n\\nSecurity Copilot agents are designed to integrate into daily tools and workflows**\u2014** whether embedded in the Microsoft Security products you already use, partner-built, or custom-built for your environment. Since launching Security Copilot agents in March 2025, we\u2019ve delivered more than a dozen agents for scenarios such as phish triage and conditional access optimization. We continue to add embedded agents such as the Access Review Agent in Microsoft Entra. Microsoft and partner-created Security Copilot agents are available to discover, buy, and deploy in the Security Store today.\\n\\nBuilding on Sentinel\u2019s graph-based context, Security Copilot agents can now reason more effectively across your environment\u2014correlating alerts, enriching context with relationships, prioritizing by impact, and automating common actions. This enables fewer false positives, faster triage, and lower mean time to resolution (MTTR). Work shifts from manual triage to agent-led workflows: agents orchestrate and automate routine tasks, while analysts review and approve outcomes\u2014focusing their time on strategic decisions and proactive threat hunts. \\n\\nLearn more about Security Copilot agents and explore what\u2019s possible\\n\\n## **Secure and govern your AI comprehensively**\\n\\nAs organizations embrace AI, Microsoft continues to invest in tools that help security teams secure and govern their AI platforms, apps, and agents across the enterprise.\\n\\nOver the past few months, we\u2019ve expanded our Security for AI capabilities, including Entra Agent ID to help discover and manage your agent estate, controls to prevent data oversharing in custom-built AI apps and agents, risk discovery tools for AI model providers and MCP servers, and advanced detection for prompt injection attacks. \\n\\nAt Microsoft Build 2025, we announced new enhancements to Azure AI Foundry that provide more protection for AI agents across their lifecycle. These will be available soon and include:\\n\\n 1. Agent task adherence control to help keep agents aligned with tasks in real time\\n 2. Personally identifiable information (PII) guardrail \\n 3. Spotlighting capability in prompt shields to enhance protection against cross-prompt injection attacks\\n\\n\\n\\nTogether, these innovations help you secure and govern your AI apps and agents in Microsoft 365 Copilot, Copilot Studio, and Azure AI Foundry\u2014helping you build on the trusted tools your teams already use and offering you more natively built protections for your Microsoft AI platforms.\\n\\nLearn more about end-to-end protection for your AI agents\\n\\n## **Upcoming security events**\\n\\nDeep dive into these innovations at Microsoft Secure on Sep 30, Oct 1, or on demand. Then, join us at Microsoft Ignite, Nov, 17\u201321 in San Francisco, CA or online\u2014for more innovations, hands-on labs, and expert connections. \\n\\n\\n\\n## **Security is a team sport**\\n\\nWe are entering a new era: security is adaptive, intelligent, and acts at the speed of thought. The advances announced today are the building blocks for a new generation of defense.\\n\\nI firmly believe that security is a team sport. That team includes all of us\u2014 innovating together, learning together, and defending together. \\n\\nTogether, we\u2019re not just imagining the future. We\u2019re securing it. \\n\\nSecure more with Microsoft Sentinel\\n\\n## Learn more with Microsoft Security\\n\\nTo learn more about Microsoft Security solutions, visit our website. Bookmark the Security blog to keep up with our expert coverage on security matters. Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybersecurity.\\n\\nThe post Empowering defenders in the era of agentic AI with Microsoft Sentinel appeared first on Microsoft Security Blog.”,”published”:”2025-09-30T13:00:00″,”modified”:”2025-09-30T13:00:00″,”type”:”mssecure”,”title”:”Empowering defenders in the era of agentic AI with Microsoft Sentinel”,”source”:””,”references”:””,”id”:”MSSECURE:DC43B7813047E97874ABC8090B9762AC”,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/09\/30\/empowering-defenders-in-the-era-of-agentic-ai-with-microsoft-sentinel\/”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-09-30T13:56:06″,”description”:”#### **Microsoft unveils a new wave of security innovation\u2014delivering an agentic platform to protect organizations at scale**\\n\\nWe are living through a turning point in how…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,110,13,33,7,11,5],"class_list":["post-19706","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-mssecure","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n