Microsoft Announces AI Security Agents

Microsoft has introduced a new set of AI-powered security agents aimed at helping organizations defend against cyber threats, including phishing and data breaches.

The latest updates to Microsoft Security Copilot, announced on March 24, 2025, expand its capabilities by introducing autonomous AI agents designed to assist security teams.

The move comes as cyberattacks continue to rise in volume and complexity, often overwhelming human security teams. Microsoft reports that it detects over 30 billion phishing emails annually and processes 84 trillion security signals per day. These threats include 7,000 password attacks per second, as explained in the announcement.

Among the new AI agents is the Phishing Triage Agent in Microsoft Defender, which can automatically analyze phishing emails to distinguish real threats from false alarms. Other agents focus on data security, insider threats, and vulnerability management.

Microsoft stated that its AI agents help security teams by automating routine tasks, allowing them to focus on complex cyberthreats. The company highlighted that these tools are integrated within its Zero Trust framework, ensuring security teams maintain control.

In addition to Microsoft’s own agents, five AI security agents developed by third-party partners will also be available. For instance, the OneTrust Privacy Breach Response Agent assists organizations in analyzing data breaches to comply with privacy regulations.

Blake Brannon, Chief Product and Strategy Officer at OneTrust, called this “game-changing” for the industry, saying, “Autonomous AI agents will help our customers scale, augment, and increase the effectiveness of their privacy operations.”

Additionally, the announcement states that Microsoft Defender will now extend AI security posture management beyond Azure and AWS to include Google VertexAI and other AI models. New detection tools are set to also help security teams identify AI-specific threats, such as indirect prompt injection attacks and data leaks.

The updates, including enhanced phishing protections for Microsoft Teams, will roll out starting in April 2025.