{"id":213998,"date":"2026-05-14T11:57:00","date_gmt":"2026-05-14T15:57:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/05\/14\/mdash-is-microsofts-new-agentic-security-system-for-discovering-software-vulnerabilities\/"},"modified":"2026-05-14T15:35:14","modified_gmt":"2026-05-14T19:35:14","slug":"mdash-is-microsofts-new-agentic-security-system-for-discovering-software-vulnerabilities","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/05\/14\/mdash-is-microsofts-new-agentic-security-system-for-discovering-software-vulnerabilities\/","title":{"rendered":"MDASH is Microsoft’s new ‘agentic security system’ for discovering software vulnerabilities"},"content":{"rendered":"

MDASH is Microsoft’s new ‘agentic security system’ for discovering software vulnerabilities<\/a><\/p>\n

https:\/\/tech.yahoo.com\/cybersecurity\/article\/mdash-is-microsofts-new-agentic-security-system-for-discovering-software-vulnerabilities-155736764.html<\/a><\/p>\n

Publish Date: 2026-05-14 11:57:00<\/a><\/p>\n

Source Domain: tech.yahoo.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. There are plenty of fears of AI being used to exploit software vulnerabilities as it becomes more capable, but it also has the potential to be used in a defensive capacity. Microsoft is exploring this area of AI use by introducing MDASH \u2014 short for multi-model agentic scanning harness \u2014 this week, a new agentic security system that it says has already discovered 16 vulnerabilities across the Windows networking and authentication stack.Microsoft says the system coordinates more than 100 AI agents to hunt down exploitable bugs, and it\u2019s proven pretty capable so far. Built by Microsoft\u2019s Autonomous Code Security team, the system tops the industry\u2019s CyberGym benchmark for finding 1,507 real-world vulnerabilities. It also found 21 of 21 planted vulnerabilities in a private test driver with zero false positives, Microsoft says.\u201cThe strategic implication is clear: AI vulnerability discovery has crossed from research curiosity into production-grade defense at enterprise scale, and the durable advantage lies in the agentic system around the model rather than any single model itself,\u201d Microsoft\u2019s VP of agentic security, Taesoo Kim, said in a blog post covering MDASH. \u201cCodename MDASH is being used by Microsoft security engineering teams and tested by a small set of customers as part of a limited private preview.\u201dAdvertisementAdvertisementMDASH comes a little over a month since AI firm Anthropic announced Claude Mythos, an AI model that spooked the cybersecurity world by finding vulnerabilities in every major browser and operating system. Those capabilities led Anthropic to hold the model back from the public, instead launching it in preview for major tech companies and security researchers. They\u2019re using the model as part of what Anthropic dubbed Project Glasswing, an effort to understand the security implications of powerful AI models and patch critical vulnerabilities before similar capabilities start popping up in publicly available models.
<\/p>\n","protected":false},"excerpt":{"rendered":"

MDASH is Microsoft’s new ‘agentic security system’ for discovering software vulnerabilities https:\/\/tech.yahoo.com\/cybersecurity\/article\/mdash-is-microsofts-new-agentic-security-system-for-discovering-software-vulnerabilities-155736764.html Publish Date: 2026-05-14…<\/p>\n","protected":false},"author":1,"featured_media":213999,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/s.yimg.com\/ny\/api\/res\/1.2\/6TlcCWKEPP_HAaPkULSi1A--\/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-\/https:\/\/d29szjachogqwa.cloudfront.net\/images\/2026-05\/8715dec9-8a39-484e-9e3c-2da38e875892","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,24,31,27],"class_list":["post-213998","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-cybersecurity","tag-exploit","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/213998"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=213998"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/213998\/revisions"}],"predecessor-version":[{"id":214000,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/213998\/revisions\/214000"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/213999"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=213998"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=213998"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=213998"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}