Microsoft Defender email security benchmarking: Key insights from one year of data

Microsoft Security Blog posts (June 2026) cover multiple high-risk findings and guidance: a one‑year Microsoft Defender email security benchmarking study; ASSERT — an open‑source framework to turn natural‑language specs into executable AI evaluations; forensic playbook and telemetry guidance for reconstructing AI activity in Microsoft 365 Copilot/Azure AI; analysis of social‑engineering lures that weaponize AI branding; a disclosed prompt‑injection pathway in the Claude Code GitHub Action that could expose workflow secrets (responsible disclosure and mitigations discussed); an updated taxonomy