Microsoft Intros New Agentic AI Security Multi-Model Defense System

A new multi-model agentic AI security system built by Microsoft's Autonomous Code Security team helped researchers find 16 new vulnerabilities across the Windows networking and authentication stack, the company anounced in a recent security blog post.

The Redmond-based company is hedging its future security operations centers on the use of coordinated AI agents to assist its workers carrying out conventional security operations. 

Microsoft said its internal system, codenamed MDASH (Microsoft Security multi-model agentic scanning harness), helped researchers discover 16 previously unknown vulnerabilities across Windows networking and authentication components, including four critical remote code execution flaws.

Unlike traditional AI security tools that rely on a single model, the software giant said, "MDASH coordinates more than 100 specialized AI agents running across multiple frontiers and distilled models."

Microsoft said the system achieved industry-leading benchmark results, including an 88.45 percent score on the CyberGym benchmark, which covers more than 1,500 real-world vulnerabilities.

MDASH offers insight into Microsoft's broader push toward what it calls "agentic security," where autonomous AI systems increasingly assist — and in some cases, automate — threat detection, investigation, and remediation.

Researchers from Team Atlanta, the group that won $20 million in DARPA's AI Cyber Challenge, helped create MDASH. Microsoft is positioning research into MDASH as part of an overarching approach to turn AI-powered vulnerability research into scalable, production-grade security engineering.

Taesoo Kim, Microsoft's vice president of agentic security, noted that the system is designed to analyze code autonomously, debate exploitability, validate findings and generate proof-of-concept exploits.

This exercise illustrated Microsoft's positioning of AI not just as a productivity tool for defenders, but as a core operational layer for identifying and mitigating vulnerabilities before attackers can exploit them.

For more information, read the Microsoft blog.

Featured

  • Silhouettes of business professionals stand against a blurred futuristic city skyline at night, with a glowing digital network data connection

    It's Time for Higher Ed to Get Serious About AI Strategy

    Without a coordinated strategy that involves multiple academic and administrative units across the entire campus, colleges risk wasting resources, duplicating efforts, and ultimately failing to deliver on the promise of deploying technology to improve learning and operations.

  • humanoid robot with circuit board background

    Meta Expands into Physical AI with Acquisition of Robotics AI Startup

    Meta Platforms has acquired Assured Robot Intelligence (ARI), a robotics artificial intelligence startup focused on humanoid systems, as the company expands its AI work beyond software and into models that could help robots operate in physical environments.

  • abstract cybersecurity data protection

    Rubrik Intros Google Workspace Data Protection

    Rubrik has announced the launch of Rubrik Data Protection for Google Workspace, a product the company said is designed to help enterprise customers protect data and restore operations across Google Workspace environments.

  • digital partnership handshake with glowing network effect

    Microsoft and OpenAI Rework Alliance, Loosening Exclusive Ties

    Microsoft and OpenAI have adjusted the terms of their high-profile partnership, signaling a shift in how the two companies will collaborate as competition in the AI market intensifies.