The AI & Security Insights Show - We'll be back!

If any of our listeners are in Vegas for Blackhat or DefCon, come say hello. We may have a prize.Words of Wisdom:“Immediately pay what you owe to vendors, workers and contractors. They will go out of their way to work with you first the next time”* Explore events at MicrosoftSecurity Insights - Foresight - Hindsight – July 2026 EditionGeneral* Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative | Microsoft Security Blog* Least privilege for AI agents: Identity, access, and tool binding | Microsoft Security Blog* Unpacking the AsyncAPI npm supply chain compromise | Microsoft Security BlogAI Security* AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog* Beyond the benchmark: Advancing security at AI speed | Microsoft Security BlogAgent365* Least privilege for AI agents: Identity, access, and tool binding | Microsoft Security Blog* Agent 365 Registry, local discovery, and runtime protection | Microsoft LearnAzure Security & Defender for Cloud News* What’s new in Defender for Cloud features (July 2026) | Microsoft LearnThreat Intelligence* Unpacking the AsyncAPI npm supply chain compromise | Microsoft Security Blog* GigaWiper: Anatomy of a destructive backdoor | Microsoft Security BlogMicrosoft Entra* Microsoft Entra ID security updates: Passkeys as default | Microsoft Security BlogDevice Management & Protection (Intune)* What’s new in Microsoft Intune (July 2026) | Microsoft LearnDefender XDR & Sentinel* Monthly news – July 2026 | Microsoft Defender XDR Blog* Sentinel Graph tools and custom detection rules as code | Microsoft Learn* Defender XDR + Sentinel unified operations | Microsoft LearnCopilot for Security* Security Copilot agentic capabilities | Microsoft LearnPurview – Compliance & Governance* Purview data protection for AI agents | Microsoft Learn* Purview for Agent 365 | Microsoft LearnNon Microsoft Security News * Polymarket supply chain compromise and theft → Podcast* FBI Kali365 phishing warnings → Podcast* AI-discovered vulnerabilities in summer campaigns → Podcast* GitHub researcher bans and anti-tech trends → PodcastAI for the Masses (from “AI Security OPS”)* LiteLLM supply chain risks → AI Security Ops* Model ablation and safety bypasses → AI Security Ops* Embedding space attacks → AI Security Ops* Open-weight models and harness risks → AI Security Ops* Agent pentesting and bug bounties → AI Security OpsFeatured Resources & Deep Dives* Defender XDR deployment guide* Advanced hunting best practices* Sentinel best practices* Secure Copilot foundation* Security for AI hubWhat’s New in Defender (July 2026)* What’s new in Microsoft Defender XDR | Microsoft Learn* Local AI agent discovery + runtime protection* Sentinel Graph + custom detection as code* July Patch Tuesday follow-upDaily Defender Dispatch – July 16, 2026Daily Defender Dispatch: Least-Privilege Agents, AsyncAPI Breach, and Graph ToolsLeast Privilege for AI AgentsNew guidance on identity, access, and tool binding for secure agentic AI.Takeaway: Review Agent 365 policies for least-privilege enforcement.AsyncAPI npm Supply Chain CompromiseThreat actors weaponized trusted CI/CD workflows.Takeaway: Audit open-source dependencies in AI pipelines.Sentinel Graph & Custom DetectionsEnhanced graph tools and custom detection rules as code now in preview.Takeaway: Test graph reasoning for faster investigations.Non-MS HighlightsPolymarket breach and AI supply chain risks.Takeaway: Strengthen third-party AI vendor reviews.AI for the MassesLiteLLM and model ablation attacks. This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com