[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_omWbXVRlZal2kAdLyfAFk51ISpsGmzAqntq6xTh0mY":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"d7273ba3-574e-408b-9a94-f2c1887bde88","​​What’s new in Microsoft Security: June 2026","what-s-new-in-microsoft-security-june-2026-8db4e5","This month’s updates help security and IT teams strengthen identity and multicloud foundations, protect data wherever it lives, and secure the developer workflows powering AI innovation. The post ​​What’s new in Microsoft Security: June 2026 appeared first on Microsoft Security Blog.","Microsoft's June 2026 security updates focus on enhancing security for AI and multicloud environments. New features include 'Codename MDASH' for AI-driven vulnerability discovery and remediation, Microsoft Defender's extended protection for local AI agents and AWS RDS databases, and Microsoft Entra Backup and Recovery for identity data resilience. These updates aim to strengthen identity, protect data, and secure developer workflows.","Microsoft unveils new AI security tools for vulnerability discovery, endpoint protection, and data security.","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2026\u002F06\u002F30\u002Fwhats-new-in-microsoft-security-june-2026\u002F","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002Fwp-content\u002Fuploads\u002F2026\u002F06\u002FIn-The-Loop_June-2.jpg","2026-06-30T16:00:00+00:00","2026-06-30T18:00:13.926531+00:00",7,[17,20,22,24,26,28],{"name":18,"type":19},"Microsoft Defender","product",{"name":21,"type":19},"Microsoft Defender for Cloud",{"name":23,"type":19},"Microsoft Entra",{"name":25,"type":19},"Microsoft Purview",{"name":27,"type":19},"GitHub Copilot CLI",{"name":29,"type":19},"Claude Code","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":30,"icon":32,"name":33,"slug":34},null,"AI Security","ai-security",[36,41,46,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":42},{"id":43,"icon":32,"name":44,"slug":45},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":47},{"id":30,"icon":32,"name":33,"slug":34},{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[18,21,23],{"controls":56,"vendors":140},[57,86,115],{"slug":58,"name":59,"problem":60,"products":61},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"slug":87,"name":88,"problem":89,"products":90},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":34,"name":116,"problem":117,"products":118},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[119,127,132],{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":128,"product_name":129,"url":130,"description":131},"boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",[141],{"slug":71,"name":72,"logo_path":73,"roles":142},[143],"reported_by",{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":163},"microsoft-june-2026-updates-ai-driven-security-identity-resilience","Microsoft June 2026 Updates: AI-Driven Security & Identity Resilience","Microsoft's June 2026 security updates highlight the growing need to actively manage vulnerabilities across AI and multicloud environments, areas that many organizations have historically under-secured. The introduction of AI-driven vulnerability discovery ('Codename MDASH') reflects a broader industry shift toward automated, continuous remediation rather than periodic manual assessments. The expansion of Defender to cover local AI agents and cloud databases like AWS RDS underscores how attack surfaces are rapidly growing beyond traditional perimeters. Perhaps most critically, the launch of Microsoft Entra Backup and Recovery signals that identity data — often overlooked in business continuity planning — is now recognized as a high-value, high-risk asset requiring its own resilience strategy. Organizations that fail to adopt these controls risk leaving AI workloads, cloud databases, and identity systems exposed to exploitation with limited ability to recover.",[149,150,151,152,153,154,155,156,157,158,159,160,161,162],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 11 – Data Recovery","NIST SP 800-53 RA-5 – Vulnerability Monitoring and Scanning","NIST SP 800-53 CP-9 – Information System Backup","NIST SP 800-53 CM-8 – Information System Component Inventory","NIST AI RMF – Govern 1.1, Map 1.5 (AI risk integration)","NIST CSF 2.0 – Identify (ID.AM), Protect (PR.DS), Recover (RC.RP)","ISO\u002FIEC 27001:2022 – A.8.8 Management of Technical Vulnerabilities","ISO\u002FIEC 27001:2022 – A.8.13 Information Backup","GDPR Article 32 – Security of Processing (integrity & availability)","GDPR Article 25 – Data Protection by Design and by Default","ITIL 4 – Problem Management (proactive vulnerability reduction)","ITIL 4 – Service Continuity Management (identity resilience)",{}]