Turn specs into evals for any agent with ASSERT

Collection of Microsoft Security Blog posts (June 2026) covering AI- and supply-chain-related threats and mitigations. Key items include: ASSERT — an open-source framework to convert natural-language specs into executable evaluations for agents; an investigation playbook for reconstructing AI activity in Microsoft 365 Copilot and Azure AI; analysis of threat actors using AI branding as social-engineering bait; a discovered prompt-injection pathway in the Claude Code GitHub Action that could expose workflow secrets and required responsible disclosure and mitigation; an updated taxonomy of agent