CYBERSECURITY

For example, Microsoft Security Exposure Management uses enterprise security graph to visualise attack paths, show how assets are connected and highlight choke points. Plus, Microsoft expanded Sentinel with dedicated Attack Graph capabilities, turning siloed data into visual, interconnected paths so analysts can see exactly where an attacker can move next.

“ Graph technologies use all of this data and connect the dots to prevent security attacks,” Vasu says.“ You can look at your environment like an attacker would. It’ s called attack disruption and exposure management. Once you see the choke points, you can proactively fix them.”

Feeding this graph information to agents is extremely powerful because agents can automatically detect, respond and prevent attacks.

Microsoft details new security patterns and practices, including strict network isolation, Zero Trust for source code commits and a baseline security mode for Microsoft 365

The new role of the human defender Today, there are more than four million open cybersecurity jobs across the globe, according to the 2025 ICS2 Cybersecurity Workforce Study. At the same time, 87 % of security professionals are seeing more AI-driven threats in 2026, according to Darktrace’ s State of AI Cybersecurity report. These statistics indicate that defenders are outnumbered and being outpaced by attacks.

“ There’ s high burnout in security teams where we just cannot keep up with the number of threats out there,” Vasu admits.“ This is why I’ m a massive AI optimist that AI is going to help defenders. But the roads are going to change. Now, congratulations! Every single person has become a manager because you’ re managing teams of agents and having to learn how to do that.” Transitioning from frontline triage to managing teams of AI agents requires a fundamental rethink of cybersecurity skills, turning the workforce gap into an opportunity for career elevation.

“ The role of humans is always going to be central in security to govern agents,” Vasu affirms.“ I hope we can get so much more joy in what we do in security because of all these tools that we have. Imagine if we can all put our intellectual horsepower into making security seamless, with agents working for us 24 / 7. I believe humans have the ability and the opportunity to elevate security for themselves and for all the organisations they support."

cybermagazine. com 65