Microsoft Unveils AI System To Automatically Detect And Fix Cloud Security Risks

(RTTNews) - Microsoft Corporation (MSFT) has introduced a new internal multi-agent AI system designed to proactively find and help fix security weaknesses across its cloud infrastructure, as AI-driven cyber threats become more sophisticated.

Developed under Microsoft's Secure Future Initiative (SFI), the system checks cloud services against the company's security requirements. It looks beyond application code, analyzing identity settings, network configurations, infrastructure, runtime environments, and other cloud resources.

Microsoft says the goal is to surface vulnerabilities that arise from the way multiple systems interact, not just isolated software bugs.

The platform relies on specialised agents that map cloud architectures, validate security controls, assess defence-in-depth protections, and recommend long-lasting fixes.

Microsoft said reviews that once took weeks of manual effort can now be completed in hours. According to the company, the system is already helping teams harden Microsoft's production environment. More than 90% of the AI-generated findings reviewed by security engineers were confirmed as real security issues, including many cross-domain risks that traditional scanning tools would likely miss.

Microsoft said the system is for internal use and is not being offered as a customer product. However, the company plans to apply what it learns to future security products and services.

Microsoft also urged organisations to take a more AI-driven, holistic approach to security evaluating systems end-to-end, prioritising layered controls over one-off fixes, and continuously testing and improving security posture as attackers increasingly use AI to speed up cyberattacks.