If any of our listeners are in Vegas for Blackhat or DefCon, come say hello. We may have a prize.
Words of Wisdom:
“Immediately pay what you owe to vendors, workers and contractors. They will go out of their way to work with you first the next time”
* Explore events at Microsoft
Security Insights - Foresight - Hindsight – July 2026 Edition
General
* Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative | Microsoft Security Blog
* Least privilege for AI agents: Identity, access, and tool binding | Microsoft Security Blog
* Unpacking the AsyncAPI npm supply chain compromise | Microsoft Security Blog
AI Security
* AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog
* Beyond the benchmark: Advancing security at AI speed | Microsoft Security Blog
Agent365
* Least privilege for AI agents: Identity, access, and tool binding | Microsoft Security Blog
* Agent 365 Registry, local discovery, and runtime protection | Microsoft Learn
Azure Security & Defender for Cloud News
* What’s new in Defender for Cloud features (July 2026) | Microsoft Learn
Threat Intelligence
* Unpacking the AsyncAPI npm supply chain compromise | Microsoft Security Blog
* GigaWiper: Anatomy of a destructive backdoor | Microsoft Security Blog
Microsoft Entra
* Microsoft Entra ID security updates: Passkeys as default | Microsoft Security Blog
Device Management & Protection (Intune)
* What’s new in Microsoft Intune (July 2026) | Microsoft Learn
Defender XDR & Sentinel
* Monthly news – July 2026 | Microsoft Defender XDR Blog
* Sentinel Graph tools and custom detection rules as code | Microsoft Learn
* Defender XDR + Sentinel unified operations | Microsoft Learn
Copilot for Security
* Security Copilot agentic capabilities | Microsoft Learn
Purview – Compliance & Governance
* Purview data protection for AI agents | Microsoft Learn
* Purview for Agent 365 | Microsoft Learn
Non Microsoft Security News
* Polymarket supply chain compromise and theft → Podcast
* FBI Kali365 phishing warnings → Podcast
* AI-discovered vulnerabilities in summer campaigns → Podcast
* GitHub researcher bans and anti-tech trends → Podcast
AI for the Masses (from “AI Security OPS”)
* LiteLLM supply chain risks → AI Security Ops
* Model ablation and safety bypasses → AI Security Ops
* Embedding space attacks → AI Security Ops
* Open-weight models and harness risks → AI Security Ops
* Agent pentesting and bug bounties → AI Security Ops
Featured Resources & Deep Dives
* Defender XDR deployment guide
* Advanced hunting best practices
* Sentinel best practices
* Secure Copilot foundation
* Security for AI hub
What’s New in Defender (July 2026)
* What’s new in Microsoft Defender XDR | Microsoft Learn
* Local AI agent discovery + runtime protection
* Sentinel Graph + custom detection as code
* July Patch Tuesday follow-up
Daily Defender Dispatch – July 16, 2026
Daily Defender Dispatch: Least-Privilege Agents, AsyncAPI Breach, and Graph Tools
Least Privilege for AI AgentsNew guidance on identity, access, and tool binding for secure agentic AI.Takeaway: Review Agent 365 policies for least-privilege enforcement.
AsyncAPI npm Supply Chain CompromiseThreat actors weaponized trusted CI/CD workflows.Takeaway: Audit open-source dependencies in AI pipelines.
Sentinel Graph & Custom DetectionsEnhanced graph tools and custom detection rules as code now in preview.Takeaway: Test graph reasoning for faster investigations.
Non-MS HighlightsPolymarket breach and AI supply chain risks.Takeaway: Strengthen third-party AI vendor reviews.
AI for the MassesLiteLLM and model ablation attacks.
This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit www.microsoftsecurityinsights.com
