Microsoft logo

Microsoft

microsoft.com Information Technology & ServicesRedmond, USLast updated: 10 Sep 2026

Risk Score

55/ 100
C

Bottom Line

Global US software and cloud platform. Full certs, thoroughly evidenced assessment; a continuous stream of platform vulnerabilities holds the breach score down.

Security questionnaire

Public evidence mapped to 52 security questions for Microsoft. Questions without a supported answer are marked Undisclosed.

Questions answered49/52

AI Posture

AI-Enhanced
AI posture score82/100

LLM providers

AnthropicOpenAIOpen SourceProprietary

Data handling & training

Training policyTrains on data · Opt-out available
Training scopeAnonymized before training
Third-party sharingShared with third parties
AI data retentionLimited retention

Customer controls

Disable AICannot disable AI
Granular controlsPartial opt-out available
Training opt-outOpt-out available

AI security & compliance

Compliance frameworksEU AI Act, ISO 42001, NIST AI RMF

See how Shift helps you understand your organization's AI exposure.

Understand your exposure to Microsoft.

Shift connects vendor security information to your organization's access and integrations to help you understand what is exposed.

Score breakdown

How the five categories combine into the overall risk grade.

Risk Score
55/ 100

Category contributions, sorted by weight.

External Exposure40%
What attackers can see
51/ 100
C
Company Posture30%
Structural readiness
67/ 100
B
Breach History15%
Time-decayed recency
0/ 100
F
Certificates10%
Verifiable attestations
100/ 100
A
Supply Chain5%
Direct-dependency health
80/ 100
A

Understand your vendor exposure

Connect vendor security information to your organization's access and integrations with Shift.

Shift for enterprise

Breaches

Disclosed incidents and active campaigns targeting Microsoft.

Breach History score0/ 100

Showing 5 of 37 disclosed incidents, most recent first.

Sep 3, 2026

Microsoft Edge Targeted in Data Breach by Silver Fox

www.csoonline.com
Aug 19, 2026

Windows IKE Extension Targeted in Critical Remote Code Execution Vulnerability (CVE-2026-33824)

www.bleepingcomputer.com
Aug 18, 2026

Microsoft Azure Targeted in Data Breach by TheHatman

infosec.exchange
Aug 15, 2026

Microsoft Power Pages Targeted in Data Exposure by ExfilSquad

infosec.exchange
Aug 14, 2026

Microsoft Defender Targeted in Privilege Escalation Vulnerability Disclosure (ShieldBreak/CVE-2026-69414)

www.bleepingcomputer.com