Securing our future: April 2025 progress report on Microsoft’s Secure Future Initiative

Microsoft’s Secure Future Initiative progress report outlines company-wide advances in secure-by-design, default, and operations, including a new Secure by Design UX Toolkit, migration of Entra ID and MSA token signing to HSMs and Azure confidential VMs, strengthened identity and network controls, and improved engineering system security and logging. The company reports a security-first culture with organization-wide priorities and governance, 92% phishing-resistant MFA for employee accounts, 90% token validation via a hardened SDK, 99%+ network asset inventory with enhanced standards, and 99.2% pipeline inventory. It adds four new network security capabilities, over 200 new TTP detections (to be integrated into Microsoft Defender), and proactive discovery of 180 cloud/AI vulnerabilities, all aimed at reducing lateral movement and strengthening detection and response.