Improving security posture across the Microsoft partner ecosystem

This Microsoft Security Blog digest highlights product and research updates plus active threat activity. On the product side Microsoft announces partner-ecosystem security improvements (CSP vetting, least-privilege, monitoring), progress on quantum-safe readiness, CNAPP/runtime/cloud risk alignment, and recognition in Frost Radar/Forrester Wave for runtime and endpoint security. On the threat-research side Microsoft describes active campaigns and techniques: MCP/tool-poisoning attacks that manipulate AI agent tool descriptions to trigger unauthorized actions; a malicious Chromium extension (AI