Microsoft Unveils Security Enhancements for Identity, Defense, Compliance

Microsoft has unveiled a raft of security enhancements at Ignite 2025 across Defender, Sentinel, Copilot, Intune, Purview, and Entra, with most announcements aimed at strengthening identity and cloud security. According to SecurityWeek, new Defender capabilities include Predictive Shielding and a Threat Hunting Agent that can orchestrate threat hunting via natural language, while third‑party attack disruption features will draw on data from AWS, Okta, and Proofpoint through the Sentinel SIEM.

The company also announced an integration of Defender for Cloud with GitHub Advanced Security to protect cloud‑native apps across their lifecycle, and said Defender for Cloud would extend posture management to serverless resources. In Entra, Microsoft introduced Agent ID for preventing agent sprawl and AI‑powered Security Copilot agents for identity tasks, plus new Internet Access capabilities and strengthened Entra ID features.

For Intune, new Security Copilot agents support change reviews, policy configurations, and device offboarding, alongside remote management of WinRE, while Purview adds AI‑powered data security, governance, and Copilot agents. Security Copilot will gain 12 new agents and 30 more from partners, and a Security Dashboard for AI aggregates real‑time posture and risk insights; Sentinel received updated SIEM capabilities, with most enhancements available in preview or arriving soon.