Workplace Ninja Summit

Workplace Ninja Summit

All recordings that took place at the Workplace Ninja Summit.

  1. 3d ago

    They Don't Hack, They Log In | With Sami Laiho & Mikael Nyström

    Most breaches don't need clever hacking: someone logs in with real credentials. Sami Laiho and Mikael Nyström (Truesec incident response) on why, what to do in the first hour, and which security measures are pure theater. In this episode - Why 'they don't hack, they log in' is how most incidents really start - Windows 11 isn't secure by default until you configure and harden it - Attackers specialise in one weakness and try it everywhere - The first hour after the phone rings: assume breach, don't reboot, pull cables, cut outbound internet - A recovery plan fits on one page, and IT needs a 'wartime' mode - The controls that matter most: privileged access workstations, no password reuse, no admin rights for developers - Why remote tools are risky and RDP gives you logs - Security theater: BitLocker as your main control and expensive 'AI' firewalls Chapters 00:00 Welcome: Sami Laiho and Mikael Nyström 05:02 They don't hack, they log in 07:35 Is Windows 11 secure by default? 16:19 The first hour after the call 20:09 A recovery plan on one page 22:26 One control: separate admin devices 23:53 Admin rights and developers 28:56 Security theater 33:08 Why does your DC need internet? 36:52 The hilarious history of Windows Guests Sami Laiho – Microsoft MVP, Adminize Workplace Ninja Summit 2026: 11 Ways to Hack Windows 11 (Tue 15 Sep 14:30, Trafohall) · Hilarious History of Windows (Tue 15 Sep 17:00, Trafohall) · Keynote: Cybersecurity from Disabler to Enabler (Wed 16 Sep 09:50, Trafohall) Mikael Nyström – Incident response (CSIRT), Truesec Workplace Ninja Summit 2026: IT disaster bootcamp (Wed 16 Sep 13:10, Glassaal, with Andreas Hammarskjöld) · You Don't Get Hacked — They Log In (Thu 17 Sep 13:10, Trafohall) Hosts Frans Oudendorp & Peter Daalmans Recorded at Workplace Ninja Summit 2026 in Baden, Switzerland. Follow the Workplace Ninja Summit Website: https://summit.wpninjas.global LinkedIn: https://www.linkedin.com/company/wpninjasummit X: https://x.com/wpninjasummit Instagram: https://www.instagram.com/wpninjasummit/ #WPNinjaSummit #CyberSecurity #IncidentResponse

  2. 5d ago

    AI for Security vs. Security for AI | With Itay Peled & Yuri Diogenes

    Itay Peled (Project Perception) and Yuri Diogenes (Defender for Cloud) on the two sides of AI in security: using AI to defend, and securing the AI everyone is deploying. Recorded live at Workplace Ninja Summit 2026 with Frans Oudendorp and Alex Verboon. In this episode - Why "AI for security" and "security for AI" are different problems that you can't solve separately - Exposure management for agents: an agent that was never meant to be internet-facing can still be reachable through an attack path - Prompt injection and indirect prompt injection as the big threat to agents, and why MITRE ATLAS is worth knowing - How attackers use AI today: more scale, and digging deeper than they could before - Agent sprawl: start with an inventory through AI security posture management, and give every agent an identity in Entra so Conditional Access applies - Agent 365 as the control plane, Defender as the security view, and why data classification has to be in place before you point an agent at SharePoint - Project Perception is read-only today: it recommends and explains, and a human takes the action - Careers: admins and analysts won't be replaced but will need new skills, and why soft skills and in-person networking still matter Chapters 00:00 Welcome: Itay Peled and Yuri Diogenes 01:52 AI for security vs. security for AI 04:55 Exposure management for AI agents 06:37 Prompt injection and MITRE ATLAS 09:13 How attackers use AI today 10:24 Agent inventory and agent identities 13:07 Agent 365, Defender and data protection 17:55 Human in the loop: when the agent is wrong 19:08 Will AI replace admins and analysts? 25:06 Yuri's 35 books, soft skills and networking 29:56 What Itay wants asked at the AMA Guests Itay Peled – Microsoft Security Research, working on Project Perception, Microsoft's agentic SOC Workplace Ninja Summit 2026: Project Perception / agentic SOC · Threat landscape · Microsoft Security AMA Yuri Diogenes – Microsoft, customer experience engineering for Defender for Cloud and exposure management Workplace Ninja Summit 2026: AI-SPM & Threat Detection · Proactive Security Posture Management Hosts Frans Oudendorp & Alex Verboon Recorded at Workplace Ninja Summit 2026 in Baden, Switzerland. Follow the Workplace Ninja Summit Website: https://summit.wpninjas.global LinkedIn: https://www.linkedin.com/company/wpninjasummit X: https://x.com/wpninjasummit Instagram: https://www.instagram.com/wpninjasummit/ #WPNinjaSummit #AISecurity #MicrosoftDefender

About

All recordings that took place at the Workplace Ninja Summit.