[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQbKkxzprms61rZOcz1LETp8n8APU3bur5XDkMikkxw4":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"ec9670aa-10fc-4ff2-a22f-5d7ec96af171","​​​​​​​​What’s new in Microsoft Security: September 2026​​","what-s-new-in-microsoft-security-september-2026-f9fa63","This month's updates help you discover and control local AI agents, extend Zero Trust to agent traffic, and strengthen SOC foundations. The post ​​​​​​​​What’s new in Microsoft Security: September 2026​​ appeared first on Microsoft Security Blog.","Microsoft's September 2026 security updates introduce new features to manage and secure AI agents operating across devices and cloud platforms. Enhancements include improved email investigation summaries via Microsoft Security Copilot, data loss prevention for sensitive information being sent to AI tools through Microsoft Purview and Microsoft Entra Global Secure Access, and scaled auto-labeling for data security. The updates also streamline eDiscovery for content created in Copilot applications and offer new options for archiving inactive content to improve AI readiness.","Microsoft Security updates focus on AI agent discovery, Zero Trust for agent traffic, and SOC enhancements.","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2026\u002F09\u002F24\u002Fwhats-new-in-microsoft-security-september-2026\u002F","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FIn-The-Loop_SEPT_Blog.jpg","2026-09-24T16:00:00+00:00","2026-09-24T20:00:11.336927+00:00",7,[17,20,22,24,26,28],{"name":18,"type":19},"Microsoft Defender","product",{"name":21,"type":19},"Microsoft Security Copilot",{"name":23,"type":19},"Microsoft Purview",{"name":25,"type":19},"Microsoft Entra",{"name":27,"type":19},"Microsoft Loop",{"name":29,"type":30},"Zero Trust","technology","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":31,"icon":33,"name":34,"slug":35},null,"AI Security","ai-security",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[18,21,23],{"controls":57,"vendors":138},[58,87,113],{"slug":59,"name":60,"problem":61,"products":62},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-private-access","Zscaler Private Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-private-access","Zero trust access to private applications, replacing VPN.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-private-access","Netskope Private Access","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fprivate-access","Zero trust access to private applications.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-access","Cloudflare Access","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Faccess\u002F","Zero trust access to internal applications without a VPN.",{"slug":88,"name":89,"problem":90,"products":91},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":109,"product_name":110,"url":111,"description":112},"netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"slug":35,"name":114,"problem":115,"products":116},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":134,"product_name":135,"url":136,"description":137},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",[139],{"slug":101,"name":102,"logo_path":103,"roles":140},[141],"reported_by",{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":160},"microsoft-bolsters-ai-agent-security-with-dlp-auto-labeling-and-copilot-controls","Microsoft Bolsters AI Agent Security with DLP, Auto-Labeling, and Copilot Controls","As AI agents become deeply embedded in enterprise workflows across devices and cloud platforms, organizations face new risks around sensitive data being inadvertently exposed to or processed by AI tools. Microsoft's September 2026 updates highlight that without proper data loss prevention and access controls, confidential information can leak through AI interactions in ways traditional security controls were never designed to catch. The expansion of auto-labeling and eDiscovery for Copilot-generated content underscores that AI-produced data carries the same compliance obligations as human-created content. Failing to govern AI agent behavior and data flows leaves organizations exposed to regulatory penalties and reputational harm.",[147,148,149,150,151,152,153,154,155,156,157,158,159],"NIST AI RMF – Govern 1.1, Map 1.5","NIST SP 800-53 AC-4 (Information Flow Enforcement)","NIST SP 800-53 SC-28 (Protection of Information at Rest)","NIST SP 800-53 SI-12 (Information Management and Retention)","CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","CIS Control 8 – Audit Log Management","GDPR Article 5(1)(f) – Integrity and Confidentiality","GDPR Article 25 – Data Protection by Design and by Default","GDPR Article 30 – Records of Processing Activities","ISO\u002FIEC 27001:2022 – A.5.12 Classification of Information","ISO\u002FIEC 27001:2022 – A.5.33 Protection of Records","ITIL 4 – Service Configuration Management Practice",{"CIS Control 3 – Data Protection":161,"NIST AI RMF – Govern 1.1, Map 1.5":162,"CIS Control 8 – Audit Log Management":163,"CIS Control 6 – Access Control Management":164,"NIST SP 800-53 AC-4 (Information Flow Enforcement)":165,"ISO\u002FIEC 27001:2022 – A.5.33 Protection of Records":166,"GDPR Article 30 – Records of Processing Activities":167,"ITIL 4 – Service Configuration Management Practice":168,"GDPR Article 5(1)(f) – Integrity and Confidentiality":169,"NIST SP 800-53 SC-28 (Protection of Information at Rest)":170,"ISO\u002FIEC 27001:2022 – A.5.12 Classification of Information":171,"NIST SP 800-53 SI-12 (Information Management and Retention)":172,"GDPR Article 25 – Data Protection by Design and by Default":173},"Data protection controls such as labelling and DLP limit sensitive data exposure through AI tools.","AI governance and context mapping help organisations decide what data AI agents may access and how risks are managed.","Logging AI interactions supports investigation and eDiscovery when sensitive data is exposed.","Access control ensures AI agents only surface data the user is allowed to see.","Information flow enforcement, such as DLP for AI interactions, prevents confidential data leaking into prompts or outputs.","Protecting records, including AI-generated content, ensures they are retained and discoverable.","Records of processing should include AI tools that handle personal data.","Configuration management tracks AI tool settings and policies so controls stay consistent.","Integrity and confidentiality require protecting personal data processed by AI tools against leakage.","Protecting stored data, including AI-generated content, ensures sensitive information remains encrypted and access-controlled.","Classifying information, including via auto-labelling, lets DLP and AI controls treat it correctly.","Managing retention of Copilot-generated content ensures it follows the same rules as other records.","Building DLP and labelling into AI deployments by default is data protection by design."]