Microsoft 推出首个网络安全模型及全新 Agent 网络安全系统

Microsoft 周一在旧金山举行的一场小型活动上，发布了其首个网络安全专用模型，以及一个新的 AI 网络安全平台，向该领域的主要参与者——尤其是 Anthropic、Google 和 OpenAI——发起了强势挑战。

该公司将 MAI-Cyber-1-Flash 描述为一款旨在“从复杂代码库中发现高难度漏洞”的模型。该模型旨在驱动 MDASH——Microsoft 专用于识别和修复软件漏洞的框架。

这一新的安全平台名为 Perception，其设计目标是部署 Agent 团队，协助并自动化多种安全工作流，包括识别和修复漏洞。该平台还可以与 MDASH 集成。

公司称，根据其在一项既有 AI 网络安全基准测试中的表现，MAI-Cyber-1-Flash 的能力显著强于竞争模型，且成本效益更高。

“我们非常非常激动地宣布这一结果，”DeepMind 联合创始人、现任 Microsoft AI CEO Mustafa Suleyman 表示。“我们将 MAI-1 Cyber Flash 与 GPT 5.4 绑定 [原文如此] 在 MDASH 框架中——它在 Cyber Gym 上击败了 Gemini、GPT 5.5 Cyber、GPT 5.6 Sol 和 Mythos 5。Cyber Gym 是我们所有人使用的主要基准测试，也是黄金基准。”

“我们将立即把它部署到生产环境中，”他补充道。

Microsoft 安全副总裁 Hayete Gallot 指出，黑客正越来越多地在网络攻击中使用 AI。她将 Perception 描述为一种让企业防御者能够“以攻击者同等的规模和速度，用 AI 对抗 AI”的方式。

Perception 使用 Agent 红队、蓝队和绿队。红队可对潜在攻击提供详细模拟，包括潜在威胁行为者的背景信息，以及他们可能利用的漏洞。蓝队专注于检测和分诊现有漏洞，绿队则针对这些漏洞采取“纠正措施”。

Perception 首席工程师 Dave Weston 将该平台称为企业防御者在效率上的重大升级。“过去，这需要安全组织中多位专业人员投入数小时的手动工作——应用安全漏洞猎手、修复工程师等等；而现在，几分钟内我们就能完成修复。我们不仅能够发现问题并确定优先级，还可以进行检测、修复安全态势，甚至直接修复代码。”

尽管 AI 为企业带来了新的防御能力，但其同样可被网络犯罪分子利用，也因此催生了令人眼花缭乱的潜在威胁。

Microsoft 表示，其新安全工具将于 11 月 3 日开启预览，并将进入一个日益拥挤的 AI 网络安全解决方案市场。今年早些时候，Anthropic 推出了 Mythos，这是一个通过名为 Glasswing 的项目向少数合作伙伴机构发布的安全平台。OpenAI 也已在 5 月通过名为 Daybreak 的项目推出了自己的安全解决方案。

Microsoft on Monday launched its first cybersecurity-specialized model alongside a new AI cybersecurity platform at a small event in San Francisco, taking a big swipe at major players in the space — namely Anthropic, Google, and OpenAI.

The company describes MAI-Cyber-1-Flash as a model that’s built “to find challenging vulnerabilities in complex codebases.” The model is built to animate MDASH, Microsoft’s harness dedicated to software vulnerability identification and remediation.

The new security platform is dubbed Perception, and it’s designed to deploy teams of agents to assist with and automate various security workflows, including identifying and remediating bugs. The platform can also integrate with MDASH.

The company claims MAI-Cyber-1-Flash is significantly more powerful (and more cost-effective) than competitor models, based on its performance on an established AI cybersecurity benchmark.

“We’re very very excited to announce our results,” said Mustafa Suleyman, the co-founder of DeepMind and current CEO of Microsoft AI. “We have MAI-1 Cyber Flash binded [sic] with GPT 5.4 inside of the MDASH harness — which beats out Gemini, GPT 5.5 Cyber, GPT 5.6 Sol, and Mythos 5 on Cyber Gym, which is the primary benchmark that we all use. The golden benchmark.”

“We’re shipping this into production immediately,” he added.

Noting that hackers are increasingly using AI in their cyberattacks, Hayete Gallot, Microsoft’s vice president for security, described Perception as a way for enterprise defenders to “defend against AI with AI at the scale and speed that the attackers have.”

Perception uses agentic red teams, blue teams, and green teams. The red teams can provide detailed simulations of potential attacks — providing context about potential threat actors and the likely vulnerabilities that they might exploit. Blue teams are dedicated to detecting and triaging existing bugs, while green teams take “corrective actions” against those bugs.

Dave Weston, the lead engineer for Perception, described the platform as a massive efficiency upgrade for corporate defenders. “We’ve gone from this taking hours and hours of manual work from multiple specialized folks across the security organization — appsec hunters, remediation engineers, you name it — and in minutes, we have a fix for all of this. Not only do we discover the issues and prioritize them, but we have detection, posture fixing, and even a code fix.”

Though AI has offered new defensive capabilities to companies, its availability to cybercriminals has given rise to a dazzling array of potential threats.

Microsoft’s new security tools, which the company said will be available in preview on November 3, will enter an increasingly crowded field of AI cybersecurity solutions. Earlier this year, Anthropic launched Mythos, a security platform that was released to a small coterie of partner organizations through a program called Glasswing. OpenAI has also launched its own security solution in May through a program called Daybreak.