Microsoft Intros New Agentic AI Security Multi-Model Defense System

A new multi-model agentic AI security system built by Microsoft's Autonomous Code Security team helped researchers find 16 new vulnerabilities across the Windows networking and authentication stack, the company anounced in a recent security blog post.

The Redmond-based company is hedging its future security operations centers on the use of coordinated AI agents to assist its workers carrying out conventional security operations. 

Microsoft said its internal system, codenamed MDASH (Microsoft Security multi-model agentic scanning harness), helped researchers discover 16 previously unknown vulnerabilities across Windows networking and authentication components, including four critical remote code execution flaws.

Unlike traditional AI security tools that rely on a single model, the software giant said, "MDASH coordinates more than 100 specialized AI agents running across multiple frontiers and distilled models."

Microsoft said the system achieved industry-leading benchmark results, including an 88.45 percent score on the CyberGym benchmark, which covers more than 1,500 real-world vulnerabilities.

MDASH offers insight into Microsoft's broader push toward what it calls "agentic security," where autonomous AI systems increasingly assist — and in some cases, automate — threat detection, investigation, and remediation.

Researchers from Team Atlanta, the group that won $20 million in DARPA's AI Cyber Challenge, helped create MDASH. Microsoft is positioning research into MDASH as part of an overarching approach to turn AI-powered vulnerability research into scalable, production-grade security engineering.

Taesoo Kim, Microsoft's vice president of agentic security, noted that the system is designed to analyze code autonomously, debate exploitability, validate findings and generate proof-of-concept exploits.

This exercise illustrated Microsoft's positioning of AI not just as a productivity tool for defenders, but as a core operational layer for identifying and mitigating vulnerabilities before attackers can exploit them.

For more information, read the Microsoft blog.

Featured

  • Abstract polygonal hacker with laptop on technology dark background

    Cybersecurity Researchers Identify First Fully Autonomous AI-Driven Ransomware Attack

    Threat researchers at cloud security firm Sysdig have disclosed what they describe as the first documented ransomware operation carried out end-to-end by an autonomous AI agent, with no human typing commands or directing individual steps once the attack was underway.

  • woman

    AI Giants Back Nonprofit Focused on Workforce Transition

    The AI industry's biggest names are investing in more than just models and infrastructure — they're focusing on workforce readiness. OpenAI, Anthropic, Microsoft and Amazon are backing Raise US, a new nonprofit that aims to raise $1 billion to help American workers prepare for an AI-driven economy.

  • Neon blue security locks with a single red highlight

    AI Shifts Cybersecurity Focus from Finding Flaws to Fixing Them

    For decades, one of cybersecurity's most difficult challenges has been finding vulnerabilities before attackers do. A growing number of security professionals now say artificial intelligence is changing that equation, shifting the focus from discovering flaws to fixing them quickly enough to prevent exploitation.

  • digital brain with network connections

    Microsoft Moving to Internally Developed AI Models in Office Apps

    Microsoft is reportedly using its own in-house artificial intelligence models to handle some workloads in Excel and Outlook, offering new evidence that the company is moving its AI strategy beyond model development and into large-scale cost reduction.