Improving security posture across the Microsoft partner ecosystem

Microsoft Security Blog (Jun–Jul 2026): Multiple posts covering partner ecosystem security improvements (CSP vetting, least-privilege access, monitoring, risk management), advances toward quantum-safe readiness, and product/market recognition (Frost Radar, Forrester Wave). Several active threats and research writeups: securing AI agents (tool‑poisoning risk that can convert AI tools into a control plane for data loss), a malicious Chromium extension that spoofs AI branding to redirect browser search, a multi‑stage Photo ZIP campaign targeting hospitality that delivers a persistent Node.js back