Expert insights on Microsoft Azure, Cloud Architecture, and Enterprise Technology
14 articles
The OWASP Top 10 for Agentic Applications (2026) is out, and Microsoft has mapped it to Copilot Studio and the upcoming Agent 365 platform. Here is what security and architecture teams need to take from it.
Read article
Microsoft Defender's high-value asset protection framework applies differentiated detection and prevention logic based on a system's role in the environment — meaning a domain controller gets stronger protection than a general workstation even when the same activity is observed on both. Here is how it works, and what you need to do to make it effective in your environment.
Read article
The recent compromise of Trivy, Aqua Security’s well-regarded open-source vulnerability scanner, is a sobering moment for the security community
Read article
Agentic AI is no longer a futuristic concept—it’s rapidly becoming boardroom reality for CISOs and tech leaders alike. 🤖 At RSAC’s milestone 35th year, Microsoft spotlighted an eye-opening stat: 80% of Fortune 500 companies now deploy intelligent agents. The scale is impressive, but so are the security challenges that come with defending automated systems that act on their own.
Read article
Microsoft’s announcement of Zero Trust for AI (ZT4AI) marks a significant moment in enterprise security thinkin
Read article
Tax season has always been a favourite hunting ground for cybercriminals, but Microsoft’s recent intelligence points to increasingly sophisticated campaigns exploiting the urgency and familiarity of tax-related correspondence.
Read article
Contagious Interview: Malware delivered through fake developer job interviews The intersection of recruitment and cybersecurity has rarely been as fraught as it is today. Recent research from Microsoft Defender Experts exposes a campaign that weaponises the very workflows meant to identify and onboard technical talent. The so-called “Contagious Interview” operation, active since at least December… Continue Reading →
Read article
The rise of AI automation in operational environments has been transformative, yet it introduces a new set of exposures that traditional controls rarely surface. As Copilot Studio agents become embedded within core business workflows—automating tasks, accessing sensitive data, and interacting with critical systems—the line between operational efficiency and security vulnerability grows thin. In my experience,… Continue Reading →
Read article
Read the source article: Microsoft SDL: Evolving security practices for an AI-powered world The rapid integration of artificial intelligence into enterprise operations is fundamentally altering how we think about software security. Having spent years guiding organisations through digital transformation, I recognise that conventional approaches to secure development are struggling to keep pace with the complexity… Continue Reading →
Read article
When Satya Nadella discusses the importance of trust in technology, especially within the realm of governmental data protection, I see a direct alignment with the strategic trajectory outlined in Microsoft’s latest Deputy CISO blog. Tim Langan, Microsoft’s Deputy Chief Information Security Officer for Government and Trust, provides a compelling perspective on the complexity and urgency… Continue Reading →
Read article
The continual evolution of phishing tactics reflects a broader shift in cyber threat sophistication, with attackers now exploiting the very infrastructure that underpins digital trust. In recent research published by Microsoft Threat Intelligence, I see clear evidence that malicious actors are leveraging complex email routing and subtle domain misconfigurations to craft convincing spoofed emails. These… Continue Reading →
Read article
Unpacking the Threat of Synthetic Identities The evolving landscape of cyber threats continues to challenge technology leaders in fundamental ways. Microsoft’s recent incident response analysis, detailed in their blog post, brings attention to a sophisticated and troubling vector: attackers using fake identities to gain privileged access within enterprise environments. This tactic, while not new in… Continue Reading →
Read article