The Security Insights Show

Rod Trent
  • 0,0 (0)
  • Management
  • Täglich

Hosted by Edward Walton, Frank Grimberg and Rod Trent, THE "AI" Security Insights Show provides information, news, tips on security solutions to help protect AI, agents, SIEM solutions and XDR. www.microsoftsecurityinsights.com

  1. vor 2 Tagen

    The AI & Security Insights Show - We'll be back!

    If any of our listeners are in Vegas for Blackhat or DefCon, come say hello. We may have a prize. Words of Wisdom: “Immediately pay what you owe to vendors, workers and contractors. They will go out of their way to work with you first the next time” * Explore events at Microsoft Security Insights - Foresight - Hindsight – July 2026 Edition General * Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative | Microsoft Security Blog * Least privilege for AI agents: Identity, access, and tool binding | Microsoft Security Blog * Unpacking the AsyncAPI npm supply chain compromise | Microsoft Security Blog AI Security * AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog * Beyond the benchmark: Advancing security at AI speed | Microsoft Security Blog Agent365 * Least privilege for AI agents: Identity, access, and tool binding | Microsoft Security Blog * Agent 365 Registry, local discovery, and runtime protection | Microsoft Learn Azure Security & Defender for Cloud News * What’s new in Defender for Cloud features (July 2026) | Microsoft Learn Threat Intelligence * Unpacking the AsyncAPI npm supply chain compromise | Microsoft Security Blog * GigaWiper: Anatomy of a destructive backdoor | Microsoft Security Blog Microsoft Entra * Microsoft Entra ID security updates: Passkeys as default | Microsoft Security Blog Device Management & Protection (Intune) * What’s new in Microsoft Intune (July 2026) | Microsoft Learn Defender XDR & Sentinel * Monthly news – July 2026 | Microsoft Defender XDR Blog * Sentinel Graph tools and custom detection rules as code | Microsoft Learn * Defender XDR + Sentinel unified operations | Microsoft Learn Copilot for Security * Security Copilot agentic capabilities | Microsoft Learn Purview – Compliance & Governance * Purview data protection for AI agents | Microsoft Learn * Purview for Agent 365 | Microsoft Learn Non Microsoft Security News * Polymarket supply chain compromise and theft → Podcast * FBI Kali365 phishing warnings → Podcast * AI-discovered vulnerabilities in summer campaigns → Podcast * GitHub researcher bans and anti-tech trends → Podcast AI for the Masses (from “AI Security OPS”) * LiteLLM supply chain risks → AI Security Ops * Model ablation and safety bypasses → AI Security Ops * Embedding space attacks → AI Security Ops * Open-weight models and harness risks → AI Security Ops * Agent pentesting and bug bounties → AI Security Ops Featured Resources & Deep Dives * Defender XDR deployment guide * Advanced hunting best practices * Sentinel best practices * Secure Copilot foundation * Security for AI hub What’s New in Defender (July 2026) * What’s new in Microsoft Defender XDR | Microsoft Learn * Local AI agent discovery + runtime protection * Sentinel Graph + custom detection as code * July Patch Tuesday follow-up Daily Defender Dispatch – July 16, 2026 Daily Defender Dispatch: Least-Privilege Agents, AsyncAPI Breach, and Graph Tools Least Privilege for AI AgentsNew guidance on identity, access, and tool binding for secure agentic AI.Takeaway: Review Agent 365 policies for least-privilege enforcement. AsyncAPI npm Supply Chain CompromiseThreat actors weaponized trusted CI/CD workflows.Takeaway: Audit open-source dependencies in AI pipelines. Sentinel Graph & Custom DetectionsEnhanced graph tools and custom detection rules as code now in preview.Takeaway: Test graph reasoning for faster investigations. Non-MS HighlightsPolymarket breach and AI supply chain risks.Takeaway: Strengthen third-party AI vendor reviews. AI for the MassesLiteLLM and model ablation attacks. This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com

    The AI & Security Insights Show - We'll be back!

  2. 10. Juli

    Just Us! The AI & Security Insights Show Episode 295 | "What is Security in the World of AI"?

    Can AI ever be secure as the AI technology adoption is often out pacing security innovation? This is one of those episodes that we will have a ton of “highly” opinionated facts. Words of Wisdom: “If someone asks you the same question three times, trust me they know the answer” * Explore events at Microsoft * General * Microsoft Build 2026: Securing code, agents, and models across the development lifecycle | Microsoft Security Blog * AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog * Reconstructing AI activity in investigations | Microsoft Security Blog * June 2026 Patch Tuesday – Record volume with multiple zero-days | Microsoft Security Response Center AI Security * Updating the taxonomy of failure modes in agentic AI systems | Microsoft Security Blog * Securing CI/CD in an agentic world: Claude Code Github action case | Microsoft Security Blog Agent365 * Microsoft Build 2026: Securing code, agents, and models | Microsoft Security Blog * Agent 365 Agent Registry and local agent discovery expansions | Microsoft Learn * Overview of Microsoft Agent 365 | Microsoft Learn Azure Security & Defender for Cloud News * What’s new in Defender for Cloud features (July 2026 updates) | Microsoft Learn Threat Intelligence * AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog Microsoft Entra * What’s New in Microsoft Entra: July 2026 | Microsoft Tech Community Device Management & Protection (Intune) * What’s new in Microsoft Intune (July 2026) | Microsoft Learn Defender XDR & Sentinel * Monthly news – July 2026 | Microsoft Defender XDR Blog * Reason over Microsoft Sentinel graphs with graph tool (Preview) | Microsoft Learn * Best practices for Microsoft Sentinel | Microsoft Learn * Defender XDR + Sentinel integration guide | Microsoft Learn Copilot for Security * Microsoft Security Copilot overview | Microsoft Learn * Security Copilot agents overview | Microsoft Learn Purview – Compliance & Governance * Microsoft Purview protections for generative AI & Copilot | Microsoft Learn * Use Microsoft Purview to manage data security for Microsoft 365 Copilot | Microsoft Learn * Purview for AI agents & Agent 365 | Microsoft Learn Non Microsoft Security News * Polymarket supply chain compromise leading to theft from high-value accounts | Talkin’ Bout Infosec News * FBI urgent warning on Kali365 phishing targeting Teams/Outlook/OneDrive users | Talkin’ Bout Infosec News * Heavy summer for AI-discovered vulnerabilities and supply chain attacks | Talkin’ Bout Infosec News * GitHub bans on vindictive security researchers | Talkin’ Bout Infosec News * Anti-tech extremism and opposition to AI infrastructure projects | Talkin’ Bout Infosec News AI for the Masses * LiteLLM supply chain compromise highlighting AI system weaknesses | AI Security Ops * Model ablation techniques removing safety mechanisms | AI Security Ops * Embedding space attacks on modern AI systems | AI Security Ops * Open weight models and open source harnesses risks | AI Security Ops * Agent pentest benchmarking and AI bug bounties | AI Security Ops Featured Resources & Deep Dives * Setup & deployment guide for Microsoft Defender XDR * Advanced hunting best practices in Defender XDR * Best practices for data collection in Sentinel * Configure a secure foundation for Microsoft 365 Copilot * Security for AI solutions hub What’s New in Defender (July 2026) * What’s new in Microsoft Defender XDR | Microsoft Learn (Official Reference) * Expanded local AI agent discovery and runtime protection * Continued Sentinel Graph tool enhancements * July Patch Tuesday and baseline updates addressing ongoing threats Daily Defender Dispatch – July 9, 2026 Daily Defender Dispatch: Agent 365 Expansions, July Patch Tuesday, Sentinel Graph, and Non-MS Threats Microsoft Agent 365 & Build 2026 MomentumAgent 365 continues expanding with stronger local agent discovery and runtime protection. Build 2026 highlighted new SDKs and registry features for secure agent development.Takeaway: Prioritize Agent Registry onboarding and Intune policies for local agents. July Patch Tuesday & Zero-DaysRecord volume patches released with multiple zero-days addressed, including Defender elevations of privilege.Takeaway: Deploy immediately and monitor Defender offline update packages. Sentinel Graph Tool EnhancementsPublic preview graph tools now support deeper reasoning over identities, devices, and AI agent signals.Takeaway: Test in your Sentinel workspace for faster investigations. Non-MS Highlights (from Talkin’ Bout Infosec News)Polymarket supply chain breach and FBI Kali365 phishing warnings dominate.Takeaway: Review third-party vendor risks and phishing training for M365 tools. AI for the Masses (from AI Security OPS)LiteLLM supply chain risks and model ablation techniques removing safety rails are key concerns.Takeaway: Audit open-source AI components and test for ablation-style jailbreaks. * Expanded local AI agent discovery and runtime protection * Continued Sentinel Graph tool enhancements * July Patch Tuesday and baseline updates addressing ongoing threats This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com

  3. 25. Juni

    The Security Insights Show Episode 294 | Andre Keartland | The Microsoft SC-500 exam

    The crew will talk about Franks favorite topic, exam and exam taking. We will have Andre Keartland from Netsurit.com to talk about the exam and his perspective about what it covers and why it is important to certain security operators. Show Links - This is why SC-500 is full-stack - Microsoft CISO advice: Securing AI with full stack red teaming - Inside Track Blog Words of Wisdom: “Aim to die broke. Give to your beneficiaries before you die; it’s more fun and useful. Spend it all! Your last check should go to the funeral home and it should bounce” General * Microsoft Build 2026: Securing code, agents, and models across the development lifecycle | Microsoft Security Blog * AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog * Reconstructing AI activity in investigations | Microsoft Security Blog * June 2026 Patch Tuesday – Record volume with multiple zero-days | Microsoft Security Response Center AI Security * Updating the taxonomy of failure modes in agentic AI systems | Microsoft Security Blog * Securing CI/CD in an agentic world: Claude Code Github action case | Microsoft Security Blog Agent365 * Microsoft Build 2026: Securing code, agents, and models | Microsoft Security Blog * Agent 365 Agent Registry + local agent discovery (Preview) | Microsoft Learn * Overview of Microsoft Agent 365 | Microsoft Learn Azure Security & Defender for Cloud News * What’s new in Defender for Cloud features (June 2026 updates) | Microsoft Learn Threat Intelligence * AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog Microsoft Entra * What’s New in Microsoft Entra: June 2026 | Microsoft Tech Community Device Management & Protection (Intune) * What’s new in Microsoft Intune (June 2026) | Microsoft Learn Defender XDR & Sentinel * Monthly news – June 2026 | Microsoft Defender XDR Blog * Reason over Microsoft Sentinel graphs with graph tool (Preview) | Microsoft Learn * Best practices for Microsoft Sentinel | Microsoft Learn * Defender XDR + Sentinel integration guide | Microsoft Learn Copilot for Security * Microsoft Security Copilot overview | Microsoft Learn * Security Copilot agents overview | Microsoft Learn Purview – Compliance & Governance * Microsoft Purview protections for generative AI & Copilot | Microsoft Learn * Use Microsoft Purview to manage data security for Microsoft 365 Copilot | Microsoft Learn * Purview for AI agents & Agent 365 | Microsoft Learn Featured Resources & Deep Dives * Setup & deployment guide for Microsoft Defender XDR * Advanced hunting best practices in Defender XDR * Best practices for data collection in Sentinel * Configure a secure foundation for Microsoft 365 Copilot * Security for AI solutions hub What’s New in Defender (June 2026) * What’s new in Microsoft Defender XDR | Microsoft Learn (Official Reference) * (Preview) Local AI agent discovery and runtime protection on Windows endpoints * (Preview) Enhanced graph tool collection in Microsoft Sentinel for reasoning over relationships * Record Patch Tuesday volume with multiple zero-days addressed (including Defender elevations of privilege) * Expanded Agent 365 context mapping, registry, and local agent capabilities This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com

  4. 11. Juni

    The Security Insights Show Episode 293- Agent 365

    Edward will ask the burning question, is Agent 365 a security tool, product or just a hyper dense reporting tool. The world needs to know. Gary brings extensive hands-on experience and has contributed to official Microsoft guidance on these topics. Expect practical insights you can use immediately. Guest link - Home - Cyclotron Nathan Carlisle - linkedin.com/in/nathan-carlisle-780846149 Gary Bushey - linkedin.com/in/gary-bushey Websites and blog: github.com (Other) garybushey.com (Blog) Words of Wisdom: “It is always in the first or last place you look” General * Microsoft Build 2026: Securing code, agents, and models across the development lifecycle | Microsoft Security Blog * AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog * Reconstructing AI activity in investigations | Microsoft Security Blog * June 2026 Patch Tuesday – Record 200+ CVEs including multiple zero-days | Microsoft Security Response Center AI Security * Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us | Microsoft Security Blog * Securing CI/CD in an agentic world: Claude Code Github action case | Microsoft Security Blog Agent365 * Microsoft Build 2026: Securing code, agents, and models across the development lifecycle | Microsoft Security Blog * Agent 365 Agent Registry and local agent discovery (Preview) | Microsoft Learn * Overview of Microsoft Agent 365 | Microsoft Learn Azure Security & Defender for Cloud News * What’s new in Defender for Cloud features (June 2026 updates) | Microsoft Learn Threat Intelligence * AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog * June 2026 Patch Tuesday highlights | Microsoft Security Response Center Microsoft Entra * What’s New in Microsoft Entra: June 2026 | Microsoft Tech Community Device Management & Protection (Intune) * What’s new in Microsoft Intune (June 2026) | Microsoft Learn Defender XDR & Sentinel * Monthly news – June 2026 | Microsoft Defender XDR Blog * Reason over Microsoft Sentinel graphs with graph tool (Preview) | Microsoft Learn * Best practices for Microsoft Sentinel | Microsoft Learn * Defender XDR + Sentinel integration guide | Microsoft Learn Copilot for Security * Microsoft Security Copilot overview | Microsoft Learn * Security Copilot agents overview | Microsoft Learn Purview – Compliance & Governance * Microsoft Purview protections for generative AI & Copilot | Microsoft Learn * Use Microsoft Purview to manage data security for Microsoft 365 Copilot | Microsoft Learn * Purview for AI agents & Agent 365 | Microsoft Learn Featured Resources & Deep Dives * Setup & deployment guide for Microsoft Defender XDR * Advanced hunting best practices in Defender XDR * Best practices for data collection in Sentinel * Configure a secure foundation for Microsoft 365 Copilot * Security for AI solutions hub What’s New in Defender (June 2026) * What’s new in Microsoft Defender XDR | Microsoft Learn (Official Reference) * (Preview) Local AI agent discovery and runtime protection on Windows endpoints * (Preview) Enhanced graph tool collection in Microsoft Sentinel for reasoning over relationships * Multiple zero-day patches addressed in June Patch Tuesday (including Defender-specific elevations of privilege) * Expanded Agent 365 context mapping and registry capabilities This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com

  5. 28. Mai

    The Security Insights Show Episode 292 - Sentinel Graph and data lake

    We’re excited to welcome back Gary Bushey (Security Architect at Cyclotron) for a deep technical episode covering: * Microsoft Sentinel Data Lake – architecture, scaling, cost optimization, and real-world best practices * Sentinel Graph – powerful new capabilities, dynamic investigations, hidden risk discovery, and how it’s changing threat hunting Gary brings extensive hands-on experience and has contributed to official Microsoft guidance on these topics. Expect practical insights you can use immediately. Guest link - Home - Cyclotron Gary Bushey - linkedin.com/in/gary-bushey Websites and blog: github.com (Other) garybushey.com (Blog) Words of Wisdom: “You can be whatever you want, so be the person who ends meetings early” General * Monthly news – May 2026 | Microsoft Defender XDR Blog * Microsoft Agent 365, now generally available, expands capabilities and integrations | Microsoft Security Blog * How Storm-2949 turned a compromised identity into a cloud-wide breach | Microsoft Security Blog * Kazuar: Anatomy of a nation-state botnet | Microsoft Security Blog AI Security * When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps | Microsoft Security Blog * Defense at AI speed: Microsoft’s new multi-model agentic security system | Microsoft Security Blog Agent365 * Microsoft Agent 365, now generally available, expands capabilities and integrations | Microsoft Security Blog * What’s New in Agent 365: May 2026 | Microsoft Tech Community * Overview of Microsoft Agent 365 | Microsoft Learn * Microsoft Agent 365 documentation hub | Microsoft Learn Azure Security & Defender for Cloud News * What’s new in Defender for Cloud features (May/June 2026 updates) | Microsoft Learn Threat Intelligence * How Storm-2949 turned a compromised identity into a cloud-wide breach | Microsoft Security Blog * Kazuar: Anatomy of a nation-state botnet | Microsoft Security Blog Microsoft Entra * What’s New in Microsoft Entra: May 2026 | Microsoft Tech Community Device Management & Protection (Intune) * What’s new in Microsoft Intune (May/June 2026) | Microsoft Learn Defender XDR & Sentinel * Monthly news – May 2026 | Microsoft Defender XDR Blog * What’s new in Microsoft Sentinel | Microsoft Learn * Best practices for Microsoft Sentinel | Microsoft Learn * Defender XDR + Sentinel integration guide | Microsoft Learn * Agent 365 connector: Monitor, hunt, and investigate AI agent activity in Microsoft Sentinel | Microsoft Sentinel Blog Copilot for Security * Microsoft Security Copilot overview | Microsoft Learn * Security Copilot agents overview | Microsoft Learn Purview – Compliance & Governance * Microsoft Purview protections for generative AI & Copilot | Microsoft Learn * Use Microsoft Purview to manage data security for Microsoft 365 Copilot | Microsoft Learn * Purview for AI agents & Agent 365 | Microsoft Learn Featured Resources & Deep Dives * Setup & deployment guide for Microsoft Defender XDR * Advanced hunting best practices in Defender XDR * Best practices for data collection in Sentinel * Configure a secure foundation for Microsoft 365 Copilot * Security for AI solutions hub What’s New in Defender (May / June 2026) * What’s new in Microsoft Defender XDR | Microsoft Learn (Official Reference) * (Preview) Automatic attack disruption can now isolate compromised devices from the network * In advanced hunting, the Take action wizard now lets you allow or block top-level domains and file attachment hashes in emails * New identity-focused predefined scenarios in the hunting graph (Kerberoast, AS-REP roast, OAuth risks, etc.) * Enhanced AI agent visibility and context mapping (expanding in June) Featured Items This Week: New Roadmap Items: Updated Roadmap Items: New Message Center Items: Updated Message Center Items: This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com

    The Security Insights Show Episode 292 - Sentinel Graph and data lake

  6. 15. Mai

    The "AI" Security Insights Show Episode 291 - Aditya and Nithya from DataBahn

    Guest link - https://www.databahn.ai/ * Nithya Nareshkumar - President & Cofounder * https://www.linkedin.com/in/nithya-nareshkumar-80955a30/ * Aditya Sundararam - Chief Products Officer & Cofounder * https://www.linkedin.com/in/adityasundararam/ Words of Wisdom: “You can be whatever you want, so be the person who ends meetings early” General * Monthly news – May 2026 | Microsoft Defender XDR Blog * Microsoft Agent 365, now generally available, expands capabilities and integrations | Microsoft Security Blog * World Passkey Day: Advancing passwordless authentication | Microsoft Security Blog AI Security * When prompts become shells: RCE vulnerabilities in AI agent frameworks | Microsoft Security Blog * Microsoft named an overall leader in Kuppinger Cole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report | Microsoft Security Blog Agent365 * Microsoft Agent 365, now generally available, expands capabilities and integrations | Microsoft Security Blog * What’s New in Agent 365: May 2026 | Microsoft Tech Community * Overview of Microsoft Agent 365 | Microsoft Learn * Microsoft Agent 365 documentation hub | Microsoft Learn Azure Security & Defender for Cloud News * What’s new in Defender for Cloud features (May 2026 updates) | Microsoft Learn Threat Intelligence * Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise | Microsoft Security Blog Microsoft Entra * What’s New in Microsoft Entra: May 2026 | Microsoft Tech Community Device Management & Protection (Intune) * What’s new in Microsoft Intune (May 2026) | Microsoft Learn Defender XDR & Sentinel * Monthly news – May 2026 | Microsoft Defender XDR Blog * What’s new in Microsoft Sentinel | Microsoft Learn * Best practices for Microsoft Sentinel | Microsoft Learn * Defender XDR + Sentinel integration guide | Microsoft Learn Copilot for Security * Microsoft Security Copilot overview | Microsoft Learn * Security Copilot agents overview | Microsoft Learn Purview – Compliance & Governance * Microsoft Purview protections for generative AI & Copilot | Microsoft Learn * Use Microsoft Purview to manage data security for Microsoft 365 Copilot | Microsoft Learn * Purview for AI agents & Agent 365 | Microsoft Learn Featured Resources & Deep Dives * Setup & deployment guide for Microsoft Defender XDR * Advanced hunting best practices in Defender XDR * Best practices for data collection in Sentinel * Configure a secure foundation for Microsoft 365 Copilot * Security for AI solutions hub What’s New in Defender (May 2026) * What’s new in Microsoft Defender XDR | Microsoft Learn (Official Reference) * In advanced hunting, the Take action wizard now lets you allow or block top-level domains and file attachment hashes in emails * New identity-focused predefined scenarios in the hunting graph (Kerberoast, AS-REP roast, OAuth risks, etc.) * (GA) Built-in alert tuning rules expanded * Enhanced AI agent visibility and context mapping Featured Items This Week: 2026 Microsoft 365 Packaging UpdateID: MC1304290 | Service: Exchange Online, Microsoft Intune | Tags: User impact, Admin impactStarting mid-June 2026, Microsoft 365, Office 365, and EMS suites will receive enhanced security features like Microsoft Defender Plan 1, URL time-of-... Lock-free coauthoring in Microsoft WordID: MC1304289 | Service: Microsoft 365 apps | Tags: New feature, User impactLock-free coauthoring in Microsoft Word allows multiple users to edit the same paragraph simultaneously, enhancing real-time collaboration. It will ro... Outlook: Support for storing S/MIME certificates in contacts in new OutlookID: MC1302908 | Service: Exchange Online, Microsoft 365 apps | Tags: New feature, User impactThe new Outlook for Windows will support storing S/MIME certificates directly in Contacts, enabling encrypted emails and continuity from classic Outlo... Microsoft 365 Copilot: Schedule prompts in Agent BuilderID: MC1302906 | Service: Microsoft Copilot (Microsoft 365) | Tags: New feature, User impact, Admin impactMicrosoft 365 Copilot’s Agent Builder will support scheduled workflows to run prompts automatically on hourly, daily, weekly, monthly, or yearly caden... (Updated) Flux.2 Flex model availability in PowerPoint for Microsoft 365 CopilotID: MC1302900 | Service: Microsoft Copilot (Microsoft 365) | Tags: Updated message, New feature, User impactMicrosoft 365 Copilot in PowerPoint now supports the Flux.2 Flex image generation model, offering higher-quality visuals and layout. Available worldwi... Microsoft Copilot Studio - Create workflows using natural language with the Agentic Workflow BuilderID: MC1302852 | Service: Microsoft Copilot (Power Platform) | Tags: New feature Microsoft 365 Copilot Cowork: Plugins, connectors, and partner integrations (Frontier)ID: MC1301832 | Service: Microsoft Copilot (Microsoft 365) | Tags: New feature, User impact, Admin impactMicrosoft 365 Copilot Cowork is expanding with plugins, connectors, and partner integrations for Frontier participants starting May 2026. It enables s... Upgrade to Windows Server 2025, now via Windows UpdateID: MC1301827 | Service: Windows | Tags: Admin impact Change Optics report for Exchange Online begins public previewID: MC1301802 | Service: Exchange Online | Tags: New feature, User impact, Admin impactThe Change Optics report for Exchange Online is in public preview, providing administrators visibility into email traffic affected by upcoming transpo... Microsoft Copilot Studio - Use MCP-compliant tools in agent workflowsID: MC1301505 | Service: Microsoft Copilot (Power Platform) | Tags: New feature New Roadmap Items: Outlook: Export to PDF (preserving sensitivity labels)ID: 561651 | Product: Outlook | Status: In developmentAbility to create PDFs from email messages and preserve Sensitivity labels. This feature is accessible from File -> Open & Export -> Create PDF. Microsoft Teams: Room availability signal for Teams eventsID: 561647 | Product: Microsoft Teams | Status: In developmentIn the Events app in Teams, Teams events organizers will now be able to see if the chosen room or space they have selected for their event is availabl... Microsoft Teams: Chat panel open by default in the gallery view on Teams Rooms on AndroidID: 561604 | Product: Microsoft Teams | Status: In developmentThe chat panel will open by default in gallery view, allowing participants in Teams Room on Android to quickly see ongoing meeting chat when they join... Microsoft Edge: Passkey Sync for Enterprise UsersID: 561652 | Product: Microsoft Edge | Status: In developmentMicrosoft Edge is introducing support for passkey synchronization for enterprise users, enabling secure, passwordless authentication across devices. P... Microsoft Purview: Information Protection- File Labeler and File Viewer for MacOSID: 561327 | Product: Microsoft Purview | Status: In developmentThis feature is bringing the Information Protection Filer Labeler and Viewer applications to the MacOS platform. Enabling customers to have the same c... Updated Roadmap Items: Microsoft Edge: Validate Edge builds early with enterprise previewID: 557185 | Product: Microsoft Edge | Status: In developmentEnterprise preview provides a simpler way for admins to flight pre-release Edge builds to their users. To reduce friction and bolster usage, users wil... Microsoft Teams: Chat with anyone who has an email addressID: 513271 | Product: Microsoft Teams | Status: CancelledWe are not releasing this feature at this time. We apologize for any inconvenience this may cause. Start a chat with anyone who has an email address, ... Microsoft Viva: Feature conversations to all network membersID: 558438 | Product: Microsoft Viva | Status: LaunchedThe featured conversation feature in public Viva Engage communities will include the option to feature a conversation to all network members or only t... Microsoft Purview: Data Loss Prevention – Enrich Defender alerts Graph API with DLP event dataID: 558681 | Product: Microsoft Purview | Status: In developmentEnhance current API infrastructure to provide easy and simple way for customers to export data to integrate with SIEM tools, create automated workflow... Microsoft Edge: Extensions monitoring in the Edge management serviceID: 552597 | Product: Microsoft Edge | Status: In developmentThe Microsoft Edge management service now allows admins to gain visibility into extensions installed across their managed users. New Message Center Items: Finance and operations apps - Monitor data management framework with Azure Application InsightsID: MC1305579 | Service: Finance and Operations Apps | Tags: New feature Updates to SharePoint home sitesID: MC1304293 | Service: SharePoint Online | Tags: New feature, User impact, Admin impactSharePoint home sites are being updated with simplified setup, new Resources and Announcements web parts, and enhanced customization for the renamed V... 2026 Microsoft 365 Packaging UpdateID: MC1304290 | Service: Exchange Online, Microsoft Intune | Tags: User impact, Admin impactStarting mid-June 2026, Microsoft 365, Office 365, and EMS suites will receive enhanced security features like Microsoft Defender Plan 1, URL time-of-... Lock-free coauthoring in Microsoft WordID: MC1304289 | Service: Microsoft 365 apps | Tags: New feature, User impactLock-free coauthoring in Microsoft Word allows multiple users to edit the same paragraph simultaneously, enhancing real-time collaboration. It will ro... Microsoft Exchange Online: Upcoming secure-by-default changes for Exchange APIsID: MC1304287 | Service: Exchange Online | Tags: New feature, User impact, Admin impactStarting June 2026, Microsoft will update the default user consent policy for Microsoft Graph to require admin consent for additional Exchange-related... Updated Message Center Items: (Updated) Microsoft 365 admin center - Usage reports: Agent usage (preview)ID: MC1148545 | Service: Microsoft 365 suite, Microsoft Copilot (Microsoft 365) |

  7. 1. Mai

    The "AI" Security Insights Show Episode 290 - A little Sentinel, a little Agent365, is Mythos a myth, how to learn MSFT AI solutions and a LOT of opinions! Plus the Return of Alistair!

    Words of Wisdom: “When introduced to someone, make eye contact with them and count to 4. You’ll both remember each other” “Average returns sustained over an above-average period of time yield extraordinary results. Buy and Hold! General * Monthly news – April 2026 | Microsoft Defender XDR Blog * Monthly news – March 2026 | Microsoft Defender XDR Blog * What’s new in Microsoft Defender XDR | Microsoft Learn AI Security * Incident response for AI: Same fire, different fuel | Microsoft Security Blog * Secure agentic AI end-to-end | Microsoft Security Blog * Secure agentic AI for your Frontier Transformation | Microsoft Security Blog * What’s new in Microsoft AI security | Microsoft Learn Agent365 * Microsoft Agent 365: The Control Plane for Agents | Microsoft Official Page * Secure AI agents at scale using Microsoft Agent 365 | Microsoft Learn * Overview of Microsoft Agent 365 | Microsoft Learn * Microsoft Agent 365 documentation hub | Microsoft Learn Azure Security & Defender for Cloud News * What’s new in Defender for Cloud features (April 2026 updates) | Microsoft Learn Threat Intelligence * Inside an AI‑enabled device code phishing campaign | Microsoft Security Blog Microsoft Entra * Microsoft Entra agents for identity security | Microsoft Learn Device Management & Protection (Intune) * What’s new in Microsoft Intune (April 2026) | Microsoft Learn Defender XDR & Sentinel * Monthly news – April 2026 | Microsoft Defender XDR Blog * What’s new in Microsoft Sentinel | Microsoft Learn * What’s New in Microsoft Sentinel: March 2026 | Microsoft Community Hub * Best practices for Microsoft Sentinel | Microsoft Learn * Defender XDR + Sentinel integration guide | Microsoft Learn Copilot for Security * Microsoft Security Copilot overview | Microsoft Learn * Security Copilot agents overview | Microsoft Learn Purview – Compliance & Governance * Microsoft Purview protections for generative AI & Copilot | Microsoft Learn * Use Microsoft Purview to manage data security for Microsoft 365 Copilot | Microsoft Learn * Purview for AI agents & Agent 365 | Microsoft Learn Featured Resources & Deep Dives * Setup & deployment guide for Microsoft Defender XDR * Advanced hunting best practices in Defender XDR * Best practices for data collection in Sentinel * Configure a secure foundation for Microsoft 365 Copilot * Security for AI solutions hub What’s New in Defender (March & April 2026) * What’s new in Microsoft Defender XDR | Microsoft Learn (Official Reference) * March 2026: New identity security capabilities for human and non-human identities * April 2026: * (Preview) View current status of automatic attack disruption and predictive shielding actions in the Activities tab of incidents * (Preview) Enhanced AIAgentsInfo table with broader visibility into all AI agents * (GA) Built-in alert tuning rules now generally available for Defender for Endpoint and Defender for Office 365 * New Defender Experts navigation entry in the Microsoft Defender portal Featured Items This Week: General Availability: Microsoft Entra passkeys on WindowsID: MC1282568 | Service: Microsoft Entra | Tags: Feature update, User impact, Admin impactMicrosoft Entra passkeys on Windows will be generally available from late April 2026, enabling passwordless, phishing-resistant sign-in on Windows dev... Message center post structure updates may require admin script changesID: MC1282308 | Service: Microsoft 365 suite | Tags: Feature update, Admin impactMicrosoft 365 Message center post headings will be standardized starting May 16, 2026, affecting admins using scripts or automation based on old headi... Modernized Change Management for Microsoft 365ID: MC1282306 | Service: Microsoft 365 suite | Tags: New feature, User impact, Admin impactMicrosoft 365 introduces a modernized change management model with flexible release audiences (Frontier, Standard, Deferred), enhanced Message center ... Microsoft Purview: Data Lifecycle Management- Azure PST Import New Roadmap Items: Outlook: ICS Preview experienceID: 560534 | Product: Outlook | Status: In developmentUsers can now seamlessly import calendar events from ICS files & preview them before importing in three cases: when dragging ICS files directly into t... Microsoft Purview: Insider Risk Management – Viewing AI interaction messages for anonymized users in IRMID: 560599 | Product: Microsoft Purview | Status: In developmentCustomers can now access and review the underlying risky prompt and response interactions generated by users during AI usage, even when user anonymiza... Microsoft Viva: Viva Glint - Configure data retention policy for Viva GlintID: 560551 | Product: Microsoft Viva | Status: In developmentThis feature will introduce the capability for Glint service administrators to configure a data retention policy for their Glint instances based on th... Microsoft Viva: Viva Glint - Configure user and survey data retention for deleted users in Viva GlintID: 560548 | Product: Microsoft Viva | Status: In developmentWith the new control in Viva Glint, service administrators can now configure whether to retain or delete survey and relevant indefinable user data for... Microsoft Teams: Report external users for security concerns in TeamsID: 560547 | Product: Microsoft Teams | Status: In developmentUsers can now report suspicious external users directly within Teams, alongside existing block actions. Reports are surfaced in the Teams admin center... Updated Roadmap Items: Microsoft 365: Modernized Access Denied Web ExperienceID: 553214 | Product: Microsoft 365, OneDrive, SharePoint | Status: Rolling outWe’re introducing a visual refresh of the Access Denied web experience across Microsoft 365, where users can request access to files, sites, and meeti... Microsoft Teams: Create workflows with slash commandsID: 558544 | Product: Microsoft Teams | Status: Rolling outNow you can create workflows quickly and easily using slash commands directly from the Teams compose box. Microsoft 365: The Next Generation of File & Folder SharingID: 492622 | Product: Excel, Microsoft 365, OneDrive, PowerPoint, SharePoint, Word | Status: In developmentWe’re now introducing the third generation of the Microsoft 365 sharing experience designed to make collaboration simpler, smarter, and more secure by... Microsoft 365 app: Microsoft Loop - Departed user content workflows for user-owned Loop workspacesID: 421612 | Product: Microsoft 365 app | Status: Rolling outManage retention and deletion workflows for user-owned Loop workspaces like Copilot Pages when users leave the organization. Notify and provide tempor... Microsoft Purview: Data Security Posture Management for AI: Fabric integration in Data Risk AssessmentID: 553217 | Product: Microsoft Purview | Status: LaunchedWithin Purview’s Data Security Posture Management (preview), Data Risk Assessment now supports scanning all Fabric workspaces for potentially oversharing This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com

    The "AI" Security Insights Show Episode 290 - A little Sentinel, a little Agent365, is Mythos a myth, how to learn MSFT AI solutions and a LOT of opinions! Plus the Return of Alistair!

  8. 15. Apr.

    The "AI" Security Insights Show Episode 289 - The RSA Recap Part 2 The Microsoft Partner Edition.

    AI Pen Testing Power- What is the deal with Mythos? Sentinel Cost Estimator Tool is a go. - Sentinel Cost Estimator Words of Wisdom: “Don’t believe everything you think you believe” “Actual great opportunities do NOT have “Great Opportunies” in the subject line” General · Secure agentic AI for your Frontier Transformation [agenticainews.net] · Secure agentic AI end-to-end [microsoft.com] · Microsoft Pre-Day: Your first look at what’s next in Security [techcommun...rosoft.com] · Strengthening your Security Posture with Microsoft Security Store Innovations at RSAC 2026 [techcommun...rosoft.com] · Crawl, Walk, Run: A Practitioner’s Guide to AI Maturity in the SOC [techcommun...rosoft.com] · From Manual Vetting to Continuous Trust: Automating Publisher Screening with AI AI Security · Join the Agent 365 “Ask Microsoft Anything” session on March 18 [techcommun...rosoft.com] · Get to know these Agent 365 community all-stars [techcommun...rosoft.com] · ICYMI: Microsoft Agent 365 AMA [techcommun...rosoft.com] · Governing AI Agent Behavior: Aligning User, Developer, Role, and Organizational Intent Azure Security & Defender for Cloud News · Microsoft Defender for Cloud Customer Newsletter (March edition) [techcommun...rosoft.com] · Malware scan results now in blob tags (ADLS Gen2 HNS | Public Preview) [techcommun...rosoft.com] · Defending Container Runtime from Malware with Microsoft Defender for Containers [techcommun...rosoft.com] · Defending the AI Era: New Microsoft Capabilities to Protect AI [techcommun...rosoft.com] · New innovations in Microsoft Defender to strengthen multi-cloud, containers, and AI model security [techcommun...rosoft.com] · Secure AI Workloads in Azure: Join Our Next Azure Decoded Session on April 8th [techcommun...rosoft.com] · Detect, correlate, contain: New Azure Firewall IDPS detections in Microsoft Sentinel and XDR [techcommun...rosoft.com] · Azure Bastion: Enterprise-grade secure access made simple Threat Intelligence When Trust Becomes the Attack Vector: Analysis of the EmEditor Supply-Chain Compromise [techcommun...rosoft.com] Microsoft Entra · Secure access in the age of AI: Key findings from our 2026 Report [techcommun...rosoft.com] · Microsoft Entra innovations announced at RSAC 2026 [techcommun...rosoft.com] · Microsoft Entra Tenant Governance: Secure and Manage Multi-Tenant Environments at Scale [techcommun...rosoft.com] · Evolving Identity Security: How the Conditional Access Optimization Agent Helps You Adapt [techcommun...rosoft.com] Device Management & Protection (Intune) · Announcing three new partners for multi-tenant management with Microsoft Intune [techcommun...rosoft.com] · Secure apps: Where people, data, and AI intersect Defender XDR & Sentinel · Monthly news – March 2026 (Microsoft Defender) [techcommun...rosoft.com] · RSA 2026: What’s new in Microsoft Defender? [techcommun...rosoft.com] · Security Copilot in Defender: empowering the SOC with assistive and autonomous AI [techcommun...rosoft.com] · From Impersonation Calls to Transparent Reporting: Defending the New Front Door of Attacks [techcommun...rosoft.com] · What’s New in Microsoft Sentinel: March 2026 [techcommun...rosoft.com] · What’s new in Microsoft Sentinel: RSAC 2026 [techcommun...rosoft.com] · How Granular Delegated Admin Privileges (GDAP) allows Sentinel customers to delegate access Copilot for Security · Introducing Secret Finder: Finding Real Credentials Where Traditional Tools Fail [techcommun...rosoft.com] · From alert overload to decisive action: How Security Copilot agents are transforming security and IT Purview - Compliance & Governance · AI‑Powered Troubleshooting for Microsoft Purview Data Lifecycle Management [techcommun...rosoft.com] · Priority Cleanup V2: Faster, Simpler Data Purging for Exchange Online [techcommun...rosoft.com] · Microsoft Purview securing data and enabling apps and agents across your AI stack [techcommun...rosoft.com] · Secure data as AI scales: New Microsoft Purview innovations at RSA 2026 [techcommun...rosoft.com] · New Microsoft Purview innovations for Fabric to safely accelerate your AI transformation ✨ Featured Items This Week New Roadmap Items: * Microsoft Teams: New chat sections for muted and meeting chatsID: MC1269864 | Service: Microsoft Teams | Tags: New feature, User impact, Admin impactMicrosoft Teams will introduce two new chat sections—Muted chats (enabled by default) and Meeting chats (disabled by default)—to organize chats. These... Microsoft 365 Copilot (Premium): Choose your AI model when editing presentations in PowerPointID: MC1267867 | Service: Microsoft 365 apps, Microsoft Copilot (Microsoft 365) | Tags: New feature, User impact, Admin impactMicrosoft 365 Copilot (Premium) in PowerPoint will let users choose AI models, including OpenAI and Anthropic’s Claude, when editing presentations. Th... Microsoft Secure Score: New recommendation for Microsoft Defender for EndpointID: MC1266905 | Service: Microsoft Defender XDR | Tags: New feature, User impact, Admin impactMicrosoft Secure Score will add a new recommendation to block outbound traffic from mshta.exe in Microsoft Defender for Endpoint, starting public prev... Copilot Cowork now available in FrontierID: MC1265767 | Service: Microsoft Copilot (Microsoft 365), Microsoft 365 Copilot Chat | Tags: New feature, User impactCopilot Cowork is now available in Frontier for Microsoft 365 Copilot Premium users, enabling multi-step task orchestration across apps with user appr... Auto Critique and Model Council features in Researcher (Frontier program)ID: MC1265765 | Service: Microsoft Copilot (Microsoft 365), Microsoft 365 Copilot Chat | Tags: New feature, User impact, Admin impactResearcher’s new Auto Critique improves draft quality by reviewing structure, sources, and citations. Model Council compares reports from multiple AI ... Updated Roadmap Items: * Microsoft Teams: Sharing recap accessID: 559606 | Product: Microsoft Teams, Microsoft Copilot (Microsoft 365) | Status: In developmentRecording and transcript owners can now grant recording and transcript access to specified people when copying or sharing recap link, and the specifie... Microsoft Purview: Purview in Microsoft Admin CenterID: 559617 | Product: Microsoft Purview | Status: In developmentAI and IT admins in Microsoft Admin Center can 1) gain visibility around oversharing risks and drive remediations 2) Understand how much of sensitive ... Microsoft Teams: Annotations on Teams Single Window Sharing on macOSID: 559611 | Product: Microsoft Teams | Status: In developmentPresenters can now share a single application window and enable participants to annotate directly on top of that content, without exposing their entir... Microsoft Purview: Data Loss Prevention – Inline DLP for Prompts for Microsoft Foundry apps and agentsID: 558565 | Product: Microsoft Purview | Status: In developmentWith Purview enabled in Microsoft Foundry, Purview admins can setup inline DLP policies to prompts on Foundry built apps and agents to ensure data los... Microsoft Viva: Viva Glint and Viva Insights Integration - Exclusion List for data sharingID: 559266 | Product: Microsoft Viva | Status: In developmentViva Glint admins will be able to manage an exclusion list in Viva Feature Access Management that prevents selected people and groups from being inclu... New Message Center Items: * Microsoft Teams: Meeting Notes now available for instant meetingsID: 541831 | Product: Microsoft Teams | Status: Rolling outTeams meeting Notes, powered by Loop, are now available for instant meetings that started via ‘Meet now’ from the calendar. Notes are Loop components ... Microsoft 365 app: Overview Page in Copilot NotebooksID: 512430 | Product: Microsoft 365, Microsoft 365 app, Microsoft Copilot (Microsoft 365) | Status: LaunchedUsers will find Copilot-powered Notebook summaries and insights as a landing page within their Copilot Notebook. Microsoft Copilot (Microsoft 365): Now smarter with visuals: Declarative Agents leverage embedded images for richer, more accurate answersID: 531758 | Product: Microsoft Copilot (Microsoft 365) | Status: LaunchedDeclarative Agents have been enhanced to interpret and ground responses using images embedded in files such as Word documents (.docx), PowerPoint pres... Outlook: Prepare for your meeting with Copilot chat in Outlook mobileID: 516568 | Product: Outlook | Status: LaunchedOutlook mobile users can now prepare for their meetings using Copilot chat in a single tap. This feature requires a Microsoft 365 Copilot license. Microsoft Copilot (Microsoft 365): Files found via Chat search can be now analyzed by code interpreterID: 519570 | Product: Microsoft Copilot (Microsoft 365) | Status: LaunchedCode interpreter runs on files you upload in your agent or that the user explicitly attaches in the interaction. Files that Copilot Chat finds via ent... Updated Message Center Items: (Updated) Microsoft 365 Copilot: Session persistence enhancement for Copilot chatID: MC1174856 | Service: Microsoft Copilot (Microsoft 365), Microsoft 365 Copilot Chat | Tags: Updated message, New feature, User impact, Admin impactMicrosoft 365 Copilot chat will preserve conversations by creating session entries in the navigation pane upon prompt submission, allowing users to re... (Updated) Microsoft Viva Engage | Email sender domain migration from @yammer.com to @engage.mail.microsoftID: MC1251200 | Service: Microsoft Viva | Tags: Updated message, Feature update, User impact, Admin impactMicrosoft Viva Engage email sender domains have migrated from @yammer.com to @engage.mail.microsoft (and @eu.engage.mail.microsoft for Europe) as of M... (Updated) Microsoft 365 Copilot: Manage and deploy user-level connectors in Microsoft 365 admin centerID: MC1188234 | Service: Microsoft Copilot (Microsoft 365) | Tags: Updated message, New feature, User impact, Admin impactMicrosoft 365 Copilot introduces f

    The "AI" Security Insights Show Episode 289 - The RSA Recap Part 2 The Microsoft Partner Edition.
Alle anzeigen (258)

Info

Hosted by Edward Walton, Frank Grimberg and Rod Trent, THE "AI" Security Insights Show provides information, news, tips on security solutions to help protect AI, agents, SIEM solutions and XDR. www.microsoftsecurityinsights.com

Informationen

  • Erstellt von
    Rod Trent
  • Jahre aktiv
    2024 - 2026
  • Folgen
    258
  • Bewertung
    Unbedenklich
  • Copyright
    © Rod Trent
  • Sendungswebsite
    The Security Insights Show

Das gefällt dir vielleicht auch