0:00
-0:38
Edward, Frank, Gary and Rod are taking the next two weeks off. The crew is prepping for our August episodes with new guests, Black Hat and DefCon and other stuff.
If any of our listeners are in Vegas for Blackhat or DefCon, come say hello. We may have a prize.
“Immediately pay what you owe to vendors, workers and contractors. They will go out of their way to work with you first the next time”
Security Insights - Foresight - Hindsight – July 2026 Edition
General
Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative | Microsoft Security Blog
Least privilege for AI agents: Identity, access, and tool binding | Microsoft Security Blog
Unpacking the AsyncAPI npm supply chain compromise | Microsoft Security Blog
AI Security
AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog
Beyond the benchmark: Advancing security at AI speed | Microsoft Security Blog
Agent365
Least privilege for AI agents: Identity, access, and tool binding | Microsoft Security Blog
Agent 365 Registry, local discovery, and runtime protection | Microsoft Learn
Azure Security & Defender for Cloud News
What’s new in Defender for Cloud features (July 2026) | Microsoft Learn
Threat Intelligence
Unpacking the AsyncAPI npm supply chain compromise | Microsoft Security Blog
GigaWiper: Anatomy of a destructive backdoor | Microsoft Security Blog
Microsoft Entra
Microsoft Entra ID security updates: Passkeys as default | Microsoft Security Blog
Device Management & Protection (Intune)
What’s new in Microsoft Intune (July 2026) | Microsoft Learn
Defender XDR & Sentinel
Monthly news – July 2026 | Microsoft Defender XDR Blog
Sentinel Graph tools and custom detection rules as code | Microsoft Learn
Defender XDR + Sentinel unified operations | Microsoft Learn
Copilot for Security
Security Copilot agentic capabilities | Microsoft Learn
Purview – Compliance & Governance
Purview data protection for AI agents | Microsoft Learn
Purview for Agent 365 | Microsoft Learn
Non Microsoft Security News
Polymarket supply chain compromise and theft → Podcast
FBI Kali365 phishing warnings → Podcast
AI-discovered vulnerabilities in summer campaigns → Podcast
GitHub researcher bans and anti-tech trends → Podcast
AI for the Masses (from “AI Security OPS”)
LiteLLM supply chain risks → AI Security Ops
Model ablation and safety bypasses → AI Security Ops
Embedding space attacks → AI Security Ops
Open-weight models and harness risks → AI Security Ops
Agent pentesting and bug bounties → AI Security Ops
Featured Resources & Deep Dives
What’s New in Defender (July 2026)
What’s new in Microsoft Defender XDR | Microsoft Learn
Local AI agent discovery + runtime protection
Sentinel Graph + custom detection as code
July Patch Tuesday follow-up
Daily Defender Dispatch – July 16, 2026
Daily Defender Dispatch: Least-Privilege Agents, AsyncAPI Breach, and Graph Tools
Least Privilege for AI Agents
New guidance on identity, access, and tool binding for secure agentic AI.
Takeaway: Review Agent 365 policies for least-privilege enforcement.AsyncAPI npm Supply Chain Compromise
Threat actors weaponized trusted CI/CD workflows.
Takeaway: Audit open-source dependencies in AI pipelines.Sentinel Graph & Custom Detections
Enhanced graph tools and custom detection rules as code now in preview.
Takeaway: Test graph reasoning for faster investigations.Non-MS Highlights
Polymarket breach and AI supply chain risks.
Takeaway: Strengthen third-party AI vendor reviews.AI for the Masses
LiteLLM and model ablation attacks.
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.