Securing our future: November 2025 progress report on Microsoft’s Secure Future Initiative

5 months ago 66

When we launched the Secure Future Initiative (SFI), our ngo was clear: accelerate innovation, fortify resilience, and pb the manufacture toward a safer integer future. Today, we’re sharing our latest advancement study that reflects dependable advancement successful each country and engineering pillar, underscoring our committedness to information supra each else. We besides item caller innovations delivered to amended support customers, and stock however we usage immoderate of those aforesaid capabilities to support Microsoft. Through SFI, we person improved the information of our platforms and services and our quality to observe and respond to cyberthreats.

Fostering a security-first mindset 

Engineering sentiment astir information has improved by 9 points since aboriginal 2024. To summation information awareness, 95% of employees person completed the latest grooming connected guarding against AI-powered cyberattacks, which remains 1 of our highest-rated courses. Finally, we developed resources for employees and made them disposable to customers for the archetypal clip to amended information awareness. 

Governance that scales globally 

The Cybersecurity Governance Council present includes 3 further Deputy Chief Information Security Officers (CISOs) functions covering European regulations, interior operations, and engagement with our ecosystem of partners and suppliers. We launched the Microsoft European Security Program to deepen partnerships and amended pass European governments astir the cyberthreat scenery and collaborating with manufacture partners to amended align cybersecurity regulations, beforehand liable authorities behaviour successful cyberspace, and physique cybersecurity capableness done the Advancing Regional Cybersecurity Initiative successful the planetary south. You tin work much connected our cybersecurity argumentation and diplomacy work.

Secure by Design, Secure by Default, Secure Operations

Microsoft Azure, Microsoft 365, Windows, Microsoft Surface, and Microsoft Security engineering teams proceed to present innovations to amended support customers. Azure enforced unafraid defaults, expanded hardware-based trust, and updated information benchmarks to amended unreality security. Microsoft 365 introduced a dedicated AI Administrator role, and enhanced cause lifecycle governance and information information transparency to springiness organizations much power and visibility. Windows and Surface precocious Zero Trust principles with expanded passkeys, automatic betterment capabilities, and memory-safe improvements to firmware and drivers. Microsoft Security introduced information information posture absorption for AI and evolved Microsoft Sentinel into an AI-first level with information lake, graph, and Model Context Protocol capabilities.

Engineering advancement that sets the benchmark

We’re making dependable advancement crossed each engineering pillars. Key achievements see enforcing phishing-resistant multifactor authentication (MFA) for 99.6% of Microsoft employees and devices, migrating higher-risk users to locked-down Azure Virtual Desktop environments, completing web instrumentality inventory and lifecycle management, and achieving 99.5% detection and remediation of unrecorded secrets successful code. We’ve besides deployed much than 50 caller detections crossed Microsoft infrastructure with applicable detections to beryllium added to Microsoft Defender and awarded $17 cardinal to beforehand liable vulnerability disclosure.

Actionable guidance 

To assistance customers amended their security, we item 10 SFI patterns and practices customers tin travel to trim their risk. We besides stock further champion practices and guidance passim the report. Customers tin bash a deeper appraisal of their information posture by utilizing our Zero Trust Workshops which incorporate SFI-based assessments and actionable learnings to assistance customers connected their ain information journeys.

Security arsenic the instauration of trust 

Cybersecurity is nary longer a feature—it’s the instauration of spot successful a connected world.

With the equivalent of 35,000 engineers moving afloat clip connected security, SFI remains the largest cybersecurity effort successful integer history. Looking ahead, we volition proceed to prioritize the highest risks, accelerate transportation of information innovations, and harness AI to summation engineering ratio and alteration accelerated anomaly detection and automated remediation.

The cyberthreat scenery volition proceed to evolve. Technology volition proceed to advance. And Microsoft volition proceed to prioritize information supra each else. Our advancement reflects a elemental truth: spot is earned done enactment and accountability.

We are grateful for the concern of our customers, manufacture peers, and information researchers. Together, we volition innovate for a safer future.

​​Learn much with Microsoft Security

To larn much astir Microsoft Security solutions, sojourn our website. Bookmark the Security blog to support up with our adept sum connected information matters. Also, travel america connected LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest quality and updates connected cybersecurity. 

Read Entire Article