Microsoft Enhances Security Copilot: Develops AI Agents to Combat Cyber Threats
Microsoft has introduced new AI agents for cybersecurity. They are part of the Security Copilot tool and are designed to automate routine tasks so that security teams can focus on more complex issues. What does this mean? And how exactly does artificial intelligence combat cyberattacks?
Artificial intelligence is an excellent everyday assistant. However, it has long since moved beyond merely creating text, images, or translations. Its importance is far greater—it can protect against cyberattacks very effectively and ensure the security of data or entire companies.
What Is Security Copilot?
If you use artificial intelligence, you have almost certainly encountered Microsoft Copilot. It assists with creating articles and graphics, brainstorming, or learning. Security Copilot is also an assistant. However, it was developed specifically for security teams, and its role is to analyze threats, identify weaknesses in protection, and recommend measures. This tool has now received a major upgrade in the form of 11 new agents—digital assistants focused on specific cybersecurity tasks.
11 New Security AI Agents
Being a security analyst means handling an endless number of tasks every day. These include investigating suspicious emails, reviewing access settings, and fixing errors in security systems. Microsoft has now decided to automate some tasks, freeing up security teams to address more complex challenges. The solution comes in the form of AI agents tailored to identifying and resolving threats in specific areas. Six agents were developed directly by Microsoft, while the other five were contributed by partner companies such as OneTrust, Aviatrix, and Fletch. Here are a few specific agents:
- Phishing Triage Agent: This agent sorts phishing alerts and determines whether they represent a genuine cyber threat or a false alarm. It supports every decision with an explanation, reducing the risk of attacks that could result in the theft of sensitive information such as passwords or card numbers.
- Conditional Access Optimization Agent: The Conditional Access Optimization Agent acts as an inspector that monitors the behavior of new users or applications. As soon as it detects that someone is not complying with security rules, it recommends effective fixes that security analysts can then easily apply.
- Vulnerability Remediation Agent: Is there a flaw in an application or system that makes it vulnerable to attackers? This agent helps detect the flaw and fix it quickly and effectively.
- Threat Intelligence Briefing Agent: The world of cyber threats is constantly changing, and staying informed is not easy. This agent therefore independently searches for timely information about current threats and prepares a concise overview specifically for the company in question.
Why Is AI Support Important for Security?
The number of cyberattacks is increasing every day, security teams face thousands of attacks daily, and human teams can no longer process such a large volume of threats. AI agents are therefore designed to resolve routine tasks independently, leaving analysts free to address larger and more complex issues. AI agents also offer a major advantage to small and medium-sized businesses that simply do not have enough staff to deal with online threats. In addition, individual agents are connected to specific tools such as Defender, Entra, and Purview. This means they are integrated directly into the tools that security teams already use in their work.
Artificial Intelligence as a Tool for Both Attacks and Protection
Hackers are becoming increasingly inventive, and artificial intelligence serves as a means for carrying out their attacks. To gain an advantage and stay ahead, security teams must also incorporate artificial intelligence into their work—and Security Copilot AI agents provide this integration seamlessly. Vasu Jakkal, Microsoft’s Corporate Vice President of Security, told TechRadar Pro that the company processes 84 trillion attack signals every day. This trend continues to grow because cyberattacks are a highly profitable business. The increasing volume of threats can therefore be particularly difficult for organizations with a shortage of trained employees. Cybersecurity can no longer function without the help of artificial intelligence, and AI agents will provide these companies with invaluable support.
Microsoft is completely transforming AI security. Instead of offering general-purpose AI assistance, it provides 11 specialized agents that strategically monitor their respective areas of cybersecurity. This produces a unique result—less routine work, faster responses to attacks, and sufficient capacity to uncover more sophisticated threats.
