Microsoft has begun utilizing an advanced AI system, codenamed MDASH, to proactively identify software vulnerabilities within its Azure Government cloud environment, according to Channel Insider. This initiative involves deploying over 100 specialized AI agents designed to detect, validate, and prioritize exploitable weaknesses in source code.MDASH operates differently from traditional security scanners by employing AI agents that reason about code behavior to determine exploitability. These agents, each focusing on specific vulnerability classes, analyze code, debate the severity of findings, and consolidate duplicate results before presenting a prioritized list to security teams. Microsoft reports MDASH achieved a score of 96.55 on the CyberGym benchmark, though acknowledges the limitations of benchmarks in capturing real-world complexity.The system is integrated into Azure Government, utilizing FedRAMP High-authorized models to ensure data remains within approved boundaries. This move into regulated environments presents potential opportunities for Microsoft partners, who could offer services such as vulnerability assessment, remediation, DevSecOps integration, compliance, and managed security services. While a dedicated partner program is not yet announced, partners involved in the preview are gaining early access to shape and support this evolving AI-driven security technology.Source: Channel Insider
Risk Identification/Classification/Mitigation, AI/ML, Cloud Security, Government security, DevSecOps
Microsoft deploys AI agents to find software flaws in Azure Government
Business professional using cloud technology for data upload and download while working on a computer in a modern office environment with digital icons Haptic.
An In-Depth Guide to AI
Get essential knowledge and practical strategies to use AI to better your security program.
You can skip this ad in 5 seconds