CTI-REALM: A new benchmark for end-to-end detection rule generation with AI agents

Microsoft Security Blog (Mar 12–20, 2026) published multiple posts covering AI security and operational guidance plus active threat intelligence. Key items: CTI-REALM — an open-source benchmark for evaluating AI agents that generate end-to-end detection rules from CTI; new Secure Agentic AI initiatives and a Zero Trust for AI pillar (guidance, reference architecture, assessment tools); observability and Microsoft Purview enhancements to improve governance and detection for AI systems; and several threat advisories describing seasonal tax-related phishing/malware, a Microsoft Teams voice‑phish/