The AI & Security Insights Show

The "AI" Security Insights Show Episode 283 - AI Revolution in Cybersecurity

In this episode, Ed talks about this travel adventures, Frank confesses that he is addicted to life on a cruise ship and Rod was out because of Pop Tart overdose. Oh, we also talked about AI security, Sentinel datalake, AI chips from Google and how we will pivot the show in 2026 to have a deep focus on all things that help secure AI, blah, blah, blah. Words of Wisdom: The best way to get a correct answer on the internet is to post an obviously wrong answer and wait for someone to correct you. Show Links: Learning: Secure your data for AI with Microsoft Purview Tuesday, January 27, 2026, 1:00 – 2:00 PM ET (GMT-05:00) Register now Strengthen Your Security Posture with Advanced Identity Solutions Wednesday, January 28, 2026, 2:00 – 3:00 PM ET (GMT-05:00) Register now Dive into a simulation of Microsoft 365 Defender and Microsoft Sentinel Wednesday, February 04, 2026, 11:00 AM – 6:00 PM (GMT-05:00) Register now General: * Microsoft Ignite: ​​Ambient and autonomous security for the agentic era​​ | Microsoft Security Blog * SesameOp: Novel backdoor uses OpenAI Assistants API for command and control | Microsoft Security Blog * How to build forward-thinking cybersecurity teams for tomorrow | Microsoft Security Blog AI Security: * ​​Learn what generative AI can do for your security operations center | Microsoft Security Blog * Microsoft Entra: What’s New in Secure Access on the AI Frontier * Riding the AI Wave: How Microsoft Entra is Evolving for the Agentic Era * Defender for AI services: Threat Protection and AI red team workshop Azure Security & Defender for Cloud News: * Microsoft Defender for Cloud Innovations at Ignite 2025 * Announcing Microsoft cloud security benchmark v2 (public preview) * Fast-Start Checklist for Microsoft Defender CSPM: From Enablement to Best Practices * Unlocking Business Value: Microsoft’s Dual Approach to AI for Security and Security for AI * Unlocking Business Value: Microsoft’s Dual Approach to AI for Security and Security for AI Fast-Start Checklist for Microsoft Defender CSPM: From Enablement to Best Practices Announcing Microsoft cloud security benchmark v2 (public preview) Microsoft Defender for Cloud Innovations at Ignite 2025 Defender for AI services: Threat protection and AI red team workshop Purview - Compliance & Governance: * Consolidate & Conquer: Driving Business Transformation with Integrated Security (Part 1 of 2) | Microsoft Community Hub Device Management & Protection (Intune): * What’s new in Microsoft Intune at Ignite Microsoft Entra: * Enhance protection of Microsoft Entra ID authentication by blocking external script injection * Building defense in depth: Simplifying identity security with new partner integrations * Driving cloud-first identity: User SOA is now Public Preview and Group SOA is Generally Available * Platform SSO for macOS Threat Intelligence: * What’s New at Ignite: Powerful Enhancements in Unified Threat Intelligence Copilot for Security: * Agents built into your workflow: Get Security Copilot with Microsoft 365 E5 | Microsoft Security Blog Defender XDR & Sentinel: * Ignite 2025: What’s new in Microsoft Defender? * New Compliance Solutions in Microsoft Sentinel: HIPAA & GDPR Reports | Microsoft Community Hub * Ignite 2025: New Microsoft Sentinel Connectors Announcement * Detect more, spend less: the future of threat intelligence correlation * Operationalizing the Sentinel data lake: A Practitioner’s Guide * Automating IOC hunts in Microsoft Sentinel data lake * What’s New in Microsoft Sentinel: November 2025 * Security Copilot for SOC: bringing agentic AI to every defender * Enhancing visibility into your identity fabric with Microsoft Defender * Detect more, spend less: the future of threat intelligence correlation Watch the live replay This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com

• Transcript

THE Security Insights Show Episode 282: Quantum Leaps and Zero-Day Zealots

Join our hosts December 18th, 2025, as they dive into the electrifying world of Microsoft Security’s latest breakthroughs. This episode unpacks real-world triumphs in thwarting sophisticated AI-driven phishing swarms, and debates the hottest zero-day exploits shaking the headlines. Packed with insider tips this is your must-listen guide to staying light-years ahead in the cyber arms race. This episode, we welcome back Alistair Pugin to talk Agent security. Show Notes/Links * Alistair Pugin on LinkedIn: https://www.linkedin.com/in/alistairpugin/ * Learn about Data Security Posture Management for AI: https://learn.microsoft.com/en-us/purview/dspm-for-aiList of AI sites supported by * Microsoft Purview Data Security Posture Management (DSPM) and DSPM for AI: https://learn.microsoft.com/en-us/purview/ai-microsoft-purview-supported-sites * Permissions for Data Security Posture Management for AI: https://learn.microsoft.com/en-us/purview/ai-microsoft-purview-permissions * MITRE ATLAS: https://atlas.mitre.org/ This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com

THE Security Insights Show Episode 281: Jingle Hack '25: Elves on the Shelf (Watching Your Wi-Fi)

After a pre-Ignite cliffhanger, we welcome back the illustrious James Key. This episode, James is back to fill us in on the Ignite announcements around Security Copilot that he couldn’t talk about last time. Show Notes/Links * Learn about Security Copilot inclusion in Microsoft 365 E5 subscription https://learn.microsoft.com/en-us/copilot/security/security-copilot-inclusion * Microsoft 365 adds advanced Microsoft Intune solutions at scale https://techcommunity.microsoft.com/blog/microsoftintuneblog/microsoft-365-adds-advanced-microsoft-intune-solutions-at-scale/4474272 * What is Microsoft Entra Agent ID? https://learn.microsoft.com/en-us/entra/agent-id/identity-professional/microsoft-entra-agent-identities-for-ai-agents * The Microsoft Security Store: https://SecurityStore.Microsoft.com This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com

THE Security Insights Show Episode 280: Turkey-Day Trojans

As the Thanksgiving turkey roasts and the family gathers, cybercriminals are lurking in the digital shadows, ready to crash your holiday feast. In Episode 280 of THE Security Insights Show, hosts serve up a timely platter of cybersecurity wisdom to keep your “gravy secrets”—those juicy credentials, financial data, and personal info—safe from opportunistic hackers.Dive into the rising tide of “Turkey-Day Trojans”: sneaky malware disguised as festive deals, phishing emails from “Aunt Edna” demanding urgent wire transfers, and smart home devices turned into spy cams by unsecured Wi-Fi. We’ll unpack real-world holiday hacks, from ransomware gobbling up your shopping carts to social engineering tricks exploiting family chit-chat. Plus, get actionable Microsoft Security tips—like leveraging Defender for endpoint protection, Entra ID for secure guest access during virtual toasts, and Copilot-powered threat hunting to spot the bad stuffing before it sours the meal.Whether you’re a CISO stress-testing your perimeter or just a home user dodging Black Friday bait, this episode arms you with the tools to feast worry-free. Tune in now on YouTube, Apple Podcasts, Spotify, or your favorite platform—because nothing ruins a holiday like a data breach on dessert. Don’t forget to subscribe for more bites of security insight! This episode of “THE Security Insights Show” covers a range of topics, starting with personal updates and discussions about cybersecurity certifications. The hosts delve into the role of Artificial Intelligence (AI) in cybersecurity, specifically debating the necessity of learning KQL (Kusto Query Language) from scratch given the advent of natural language to KQL models (16:01). They discuss the importance of understanding underlying data and language nuances even with AI assistance (18:56). The conversation then pivots to key announcements from Microsoft Ignite, including: * Work IQ: An intelligent layer that enhances productivity by connecting organizational and personal data, enabling AI-driven insights and recommendations within Microsoft 365 applications (31:31). * Proactive Attack Disruption and Predictive Shielding: Microsoft’s new capabilities to anticipate attacker moves during ongoing attacks, dynamically hardening targets in real-time (35:59). * Expanded Automatic Attack Disruption: This feature extends to work across third-party services like AWS, Okta, and Proofpoint, allowing Microsoft Defender to take decisive actions on external systems even if the threat originates from a non-Microsoft system (39:06). * Rebranding of Defender XDR to Borg XDR: Indicating a consolidation of more Defender for Cloud functionality and assimilation of Sentinel into the unified Defender portal (42:00). * Native Sysmon in Windows 11: A significant announcement for security professionals (42:35). This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com