Microsoft patents AI agents that fix network security breaches
Microsoft describes a system using three distinct AI agents to handle security threats on computer networks. One agent picks the best tool or process to fix the issue, a second creates the specific steps to repair it, and a third watches to ensure the fix actually works.
In the filing’s own words
Systems, methods, devices, and computer readable storage media described herein for mitigation and remediation of security events. In an aspect, a first artificial intelligence (AI) agent selects a candidate for remediating a security event based at least on event information related to a security event detected with respect to a computing network and candidate data identifying candidates of the computing network. A second AI agent generates a remediation task for remediating the security event and assigns the remediation task to the selected candidate. A third AI agent monitors performance of the remediation task and detects if the selected candidate fails to remediate the security event. In a further aspect, the first AI agent selects the candidate based on a similarity between the security event and another security event previously remediated by the candidate. In another aspect, the second AI agent generates the remediated task based on the previously remediated event.
What exactly they claim (claim 1)
1. A task assignment system comprising: a processor; and a memory that stores program code executable by the processor, the program code comprising: a candidate search agent that: receives information related to a first with respect to a computing resource of a computing network, access candidate data identifying candidates associated with the computing network, and selects a first candidate from the candidate data for remediating the first security event, a remediation agent comprising a first generative artificial intelligence (AI) model trained on a corpus of first task data to generate remediation tasks for remediating security events, the remediation agent: utilizes the first generative AI model to generate, based on the first candidate and the first security event, a first remediation task for remediating the first security event, and assigns the first remediation task to the first candidate, and a monitoring agent that: monitors performance of the first remediation task by the first candidate, determines the first candidate has failed to remediate the first security event, and in response to the determination that the first candidate has failed to remediate the first security event, causes a mitigation step to be performed with respect to the first security event.
Facts
- Company
- Microsoft (Microsoft Technology Licensing, LLC)
- Official title
- MITIGATION OF SECURITY EVENTS UTILIZING ARTIFICIAL INTELLIGENCE AGENTS
- Publication number
- US20260303618A1
- Application number
- 19094310
- Filed
- Mar 28, 2025
- Published
- Oct 1, 2026
- Inventors
- 6
- Claims
- 20
Classified under
H04L 63/1416 Electricity & electronicsH04L 41/16 Electricity & electronicsMore from Microsoft in Security & privacy
- Microsoft patents system to call 911 for others during video calls Sep 22, 2026
- Microsoft patents system to block fake code suggested by AI Sep 15, 2026
- Microsoft patents one-way data flow to block network attacks Sep 10, 2026
- Microsoft patents voice coding that hides speaker identity for secure calls Sep 17, 2026
- Microsoft patents security checks for AI chats using user and model profiles Oct 1, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.