Microsoft March 2026 Patch Tuesday: Azure Arc MCP and AI Agents Cited as Expanding Attack Surface in 84-Flaw Update
Windows News AI·high signal
Microsoft's March 2026 Patch Tuesday addressed 84 flaws and explicitly named Azure Arc MCP and AI agents as an expanding enterprise attack surface in the release notes — a first for a Microsoft security bulletin. The update includes patches for AI-adjacent infrastructure components, signaling that MCP is now considered a tier-1 enterprise attack vector by Microsoft's security team. Two zero-days were publicly known prior to patching.