CTI-REALM: A new benchmark for end-to-end detection rule generation with AI agents

Collection of Microsoft Security Blog posts (March 2026) covering AI security and threat intelligence: announcement of CTI-REALM, an open benchmark for evaluating AI agents on end-to-end detection rule generation from CTI; guidance and new capabilities for securing agentic AI and a “Zero Trust for AI” pillar; observability recommendations for AI systems and Purview innovations for governance. Operational threat coverage includes seasonal tax-themed phishing and malware campaigns, a Microsoft Teams voice-phishing (vishing) compromise case study, and a detailed write-up on Storm-2561 using SEO‑p