Microsoft is fielding dedicated cyber agents to fight back against AI powered attacks

[SilverSurfer51]

Microsoft has started deploying specialized AI cyber agents specifically built to counter AI powered attacks, which feels like a milestone moment even though it was probably inevitable the moment offensive AI tooling started showing real results

This is not a hypothetical anymore, the same week this rolled out an autonomous offensive security agent called XBOW found two critical remote code execution vulnerabilities in Microsoft's own Bing infrastructure, both rated CVSS 9.8, one via a command injection in the search by image upload feature and another through the crawler route

So you have offensive AI agents finding real critical vulnerabilities in production systems at the same time defensive AI agents are being stood up to fight exactly that kind of threat, the cat and mouse dynamic has fully arrived and it is moving fast

What worries me a bit is the speed mismatch, offensive tooling seems to be finding and chaining exploits faster than defensive tooling can be verified and deployed at the same organizational scale, that gap is where the actual damage tends to happen

On the other hand having dedicated agentic defense at least means the response cycle is measured in the same timescale as the attack cycle now, rather than humans trying to manually patch against machine speed reconnaissance, which was clearly not going to hold up long term

Microsoft Unveils New Cyber Model Agentic Security Tools To Fight Hackerswww.axios.com