Microsoft AI Revenue Mostly Comes from OpenAI: What the Disclosures Reveal 2026

Microsoft AI Revenue Mostly Comes from OpenAI: What the Disclosures Reveal 2026

How Much of Microsoft’s AI Revenue Actually Comes from OpenAI? Microsoft’s fiscal 2026 Form 10-K, filed with the SEC on August 5, 2026, reveals that the company recorded $24.1 billion in AI-related revenue from its partnership with OpenAI for the fiscal year ended June 30, 2026. According to Bloomberg’s analysis of the filing, this single customer relationship accounts for approximately 70% of Microsoft’s total AI revenue, which is estimated at $37–40 billion on an annualized basis. The disclosure offers the clearest public window yet into the financial architecture of one of the technology industry’s most consequential partnerships. ...

August 6, 2026 · 11 min · baeseokjae
Semantic Kernel Agent RCE Vulnerabilities Guide 2026: When Prompt Injection Becomes Code Execution

Semantic Kernel Agent RCE Vulnerabilities Guide 2026: When Prompt Injection Becomes Code Execution

If you’re building AI agents with Microsoft’s Semantic Kernel, stop and check your version right now. Two critical vulnerabilities — CVE-2026-26030 (CVSS 9.9) and CVE-2026-25592 (CVSS 9.9) — turn prompt injection from a content-quality annoyance into a full host compromise primitive. I’ve spent the last few weeks digging into both exploits, and the implications go far beyond Semantic Kernel itself. Here’s the uncomfortable truth: AI models are not security boundaries. Every parameter an LLM can influence when calling a tool is attacker-controlled input. If your framework passes that input to eval(), a file write function, or a shell command without validation, you’ve built a remote code execution vector that only needs a cleverly crafted prompt to trigger. ...

July 7, 2026 · 6 min · baeseokjae
Microsoft Agent Governance Toolkit: Open-Source Runtime Security for AI Agents

Microsoft Agent Governance Toolkit: Open-Source Runtime Security for AI Agents

Released on April 2, 2026, the Microsoft Agent Governance Toolkit is the first open-source runtime security framework to address all ten risks on the OWASP Agentic AI Top 10. Shipped under the MIT license, it provides deterministic policy enforcement at the agent action layer with less than 5ms overhead per evaluated action. As the agentic AI security market grows from a projected $1.65 billion in 2026 toward an estimated $13.52 billion by 2032 at roughly 42% CAGR, this toolkit arrives at exactly the moment enterprises need a vendor-neutral, community-owned standard for governing what their AI agents are actually permitted to do. ...

May 15, 2026 · 19 min · baeseokjae
Microsoft Agent Framework 1.0: Build Production AI Agents in .NET and Python

Microsoft Agent Framework 1.0: Build Production AI Agents in .NET and Python

Microsoft Agent Framework 1.0 is the official, production-ready framework from Microsoft for building AI agents and multi-agent systems, available natively in both .NET (C#) and Python. Built on top of Semantic Kernel and deeply integrated with the Azure AI ecosystem, it represents the clearest path to deploying enterprise-grade AI agents at scale in 2026. Microsoft Agent Framework 1.0: The Official Microsoft Path to Production AI Agents Enterprise adoption of Microsoft Agent Framework 1.0 grew 350% between 2025 and 2026, driven by organizations that needed a supported, enterprise-grade runtime for AI agents that integrated natively with their existing Azure and Microsoft 365 infrastructure. Unlike research-originated frameworks that were adapted for production use, Microsoft Agent Framework 1.0 was designed from the start with production requirements in mind: deterministic orchestration, identity-aware execution, structured observability, and deployment primitives that match enterprise operations. The 1.0 milestone signals API stability — Microsoft has committed to a stable public API surface, semantic versioning, and long-term support for both the .NET and Python SDKs. For organizations running workloads on Azure, the framework eliminates the integration tax that comes with open-source alternatives: Azure OpenAI, Azure AI Foundry, Azure Monitor, and Entra ID are all first-class citizens in the framework’s configuration model, not afterthoughts bolted on through community plugins. The framework’s Semantic Kernel foundation means teams that have already built with Semantic Kernel can adopt it incrementally, migrating plugin-based workflows to full agent orchestration without rewriting existing code. ...

May 15, 2026 · 18 min · baeseokjae