project
SIEM to which Microsoft says Microsoft 365 Copilot memory update events are surfaced for analysts.
No evidence-backed relationships are recorded.
NetApp has added a behavior-based policy engine to its AI Data Engine that flags unusual data use by AI agents, with six months free. For storage admins running agents, its value depends on what happens once a flag fires.
Reality
Microsoft says China-linked operators have used NeedyMantis since at least October 2025 to keep access to telecom, university and government-linked networks. It goes in after the break-in, so defenders have to hunt for it inside networks already breached.
Perspective Coverage
3 publishersReality
The Integrated Security Operations Center preview puts case management and workbooks in the Defender portal with no setup, while behavior analytics and third-party feeds wait on a new Azure-linked workspace. Microsoft has not disclosed pricing.
Reality
Akeyless has made Agentic Runtime Authority generally available. It judges each agent action against the task the agent was given, and blocks a database delete or a bulk export even where the agent's credentials permit it.
Reality
Microsoft's managed detection service now works third-party telemetry ingested into Sentinel, on the MDR P2 tier and with no published price. Anyone paying a separate provider to read those same tables has a renewal conversation.
Reality