Microsoft and Google Introduce New Standards for Authentication and Information Protection

Microsoft and Google have launched new measures to address three significant risks faced by IT departments: input errors in generative AI, misuse of stolen cookies, and the difficulty in assessing authentication strength. Microsoft has begun general availability of a feature in Microsoft 365 Copilot that detects sensitive information before processing input, halting the action if such data is identified.

These advancements are crucial as the use of generative AI in business increases, leading to greater threats from accidental input of confidential information and session hijacking. The new capabilities from Microsoft and Google aim to enhance security and reduce reliance on traditional password-based defenses.

Looking ahead, organizations should monitor the implementation of these new features, including Google's technology to invalidate stolen cookies on a device-by-device basis and the introduction of new session metadata to better assess login strength. No further timeline was disclosed at the time of publication.