Use ACS to enforce Scope, Anchored Decisions, Flow Integrity, and Escalation while the agent runs, then prove the controls without model variance. Two sign-in failures, two correct outcomes A help desk agent receives two reports that sound almost identical: “I cannot sign in.” In the first case, the identity service is healthy, the account is […]
The AI agent has moved from pilot project to production faster than most security programs were built to handle. Every AI agent you deploy is now a security problem before it is a productivity win. This Microsoft Agent 365 security deep dive breaks down exactly how the platform observes, governs, and secures agents in your
On-Device AI Inference Changes the Architecture, Not the Risk As organizations transform into Frontier Firms and integrate AI into more applications, cloud-hosted inference is not always the optimal architectural choice. Some applications operate with limited connectivity, require low-latency responses, or involve data that organizations prefer to process locally. As AI usage scales, token economics also
Securing On-Device AI: Evaluating Foundry Local Models with AI Red Teaming Agent Continue Reading
Security operations centers are overwhelmed. Analysts face a relentless queue of alerts, most of which will go unresolved. Research cited by Microsoft estimates that as much as 67% of security incidents go unresolved each year, and the average analyst spends 2.7 hours daily just resolving incidents, at an aggregate cost of $3.3 billion in the
If you are an identity architect or cloud security engineer, you already know that password-based verification is a liability. Microsoft Entra Verified ID gives enterprises a practical path to decentralized, cryptographically verifiable credentials that work across organizational boundaries without exposing raw identity data. This Azure Verified ID implementation guide walks you through every configuration stage:
Large Language Models (LLMs) are rapidly moving from experimentation to production. While training often gets the spotlight, inference at scale is where real-world complexity emerges—especially when performance, cost, and user experience must all be balanced under unpredictable traffic. In this post, we’ll walk through how Azure Kubernetes Service (AKS) combined with NVIDIA Dynamo enables scalable, production‑ready
NVIDIA Dynamo on AKS – Autoscaling LLM Inference Continue Reading
This second post in our AI Application Security series is all about moving from planning to practice. AI Application Series 1: Security considerations when adopting AI tools established how AI adoption expands the attack surface and our threat-modelling guidance on the Microsoft security blog provided a structured approach to identifying risks before they reach production. Now we turn to what comes after you’ve threat-modelled your AI application, how you detect and
Detecting and analyzing prompt abuse in AI tools Continue Reading
If you had to point out the top trends of IT these days, two strong candidates would be Generative AI and Cybersecurity. Especially around the latter, sophistication, reach and volume of cyberattacks have seen significant increases in the last years, with added ingredients such as advanced persistent threats, state actors or “crime-as-a-service” providers. Interestingly enough,
We are currently living through the “fragmentation phase” of the AI revolution. If you’re a developer, you know the drill: You have Claude Code open for reasoning. You have ChatGPT open for logic checks. Then you drop into your terminal to actually build the thing—manually copy-pasting context between three different windows. We call this the
The OS for Intelligence: How GitHub Bridges the Fragmented AI Landscape Continue Reading
Welcome to part 9 and the final part of this blog post series. If you missed the previous parts, visit the links below: In this blog post, I’ll test the autonomous agent end to end to ensure everything works as expected. During this test, I will: Submit the Microsoft Form created in part 1, selecting
