October 2026 Edition – Return from Break
The late summer / early fall break is over.
We return this Thursday, October 22nd to restart the show.
October is Cybersecurity Awareness Month.
After six years of weekly shows, the crew took part of August, all of September and half of October, to recharge, handle back-office work, and rethink the format. Fresh energy (and dad jokes) promised on return.
What the Crew Did on Break
Rod Trent – Kept daily Security Check-in Quick Hits and THE PROMPT running nonstop. Covered ConnectWise M365 compromises, AI agent acceleration, BeyondTrust zero-days, and the collapsing patch window. Planning new Microsoft podcast Security in the Loop.
Gary Bushey (Cyclotron) – Published guidance on Sentinel Notebooks for hunting, investigation, and analytics (including Graph + Data Lake). Continued writing on the Defender portal transition. Cyclotron earned a second consecutive year in the Microsoft AI Business Solutions Inner Circle.
Edward Walton – Refined the newsletter pipeline and prepared the return framing around agent security and Perception.
Frank Grimberg – Took the break (last seen on vacation). Expected to return with strong opinions on exams, XDR, and what security means in the age of AI agents.
Highly Opinionated Facts They’re Bringing Back
Agent security is no longer a side conversation — 2026 attached real incidents, CVEs, and production failures to the OWASP Agentic list.
The patch window is collapsing; detection and containment now matter more than perfect patching speed.
Sentinel Notebooks + Graph + Data Lake remain underused relative to their value.
AI gateways are a primary attack surface, not a side project.
Human control on high-impact agent actions remains non-negotiable.
General
Agents are your newest insiders. Security must move at their speed. | Microsoft Security Blog (Oct 19)
Insights from the 2026 Microsoft Digital Defense Report | Microsoft Security Blog
What’s new in Microsoft Security: September 2026 | Microsoft Security Blog
AI Security
Managing open-weight model risk in enterprise deployments | Microsoft Security Blog (Oct 16) – Microsoft + NVIDIA whitepaper
3 lessons from frontier AI vulnerability research | Microsoft Security Blog (Oct 7) – FORGE Lab
Agent365 / Agentic Security
Agents are your newest insiders. Security must move at their speed. | Microsoft Security Blog (Oct 19) – Microsoft 365 E7 + Project Perception expansions for continuous agent risk assessment, adaptive permissions, and containment
What is Project Perception? | Microsoft Learn
Introducing MAI-Cyber-1-Flash inside MDASH | Microsoft AI
Threat Intelligence
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime | Microsoft Security Blog (Oct 14) – Storm-2990 / Storm-3119
Microsoft Digital Defense Report 2026 | Governments now most impacted sector (27%)
Microsoft Entra
What’s New in Microsoft Entra (October coverage via Rod’s THE PROMPT and Microsoft Security Blog)
Defender XDR & Sentinel
What’s new in Microsoft Defender XDR | Microsoft Learn
What’s new in Microsoft Sentinel | Microsoft Learn
October Patch Tuesday: record ~1,411–1,413 CVEs, including exploited Windows Shell zero-day (CVE-2026-96951)
Purview – Compliance & Governance
Microsoft Purview protections for generative AI & Copilot | Microsoft Learn
Purview for AI agents & Agent 365 | Microsoft Learn
Cybersecurity Awareness Month 2026
Theme: Securing the Next 250 (CISA)
Core steps: avoid phishing, strong passwords + password managers, MFA, keep software updated
Microsoft skilling: Defend the Tenant Challenge, role-based learning, live events, credentials, and AI Skills Navigator content all month
Non Microsoft Security News
ConnectWise Cloud Backup credential compromise granted access to 173+ Microsoft 365 tenants
Burger King Japan app breach (~11.18 million member records)
BAE Systems incident took the U.S. Federal Bankruptcy Noticing Center offline
Featured Resources & Deep Dives
What’s New in Defender
What’s new in Microsoft Defender XDR | Microsoft Learn
AI agent posture risk and Agent 365 runtime protections
Project Perception expansions for continuous agent risk assessment and containment (Oct 19)
Defender Experts MDR P2 third-party coverage via Sentinel
Podcast Stuff for October
Return episode: Thursday, October 22, 2026 — “WE’RE BACK”
Hosts: Edward Walton, Frank Grimberg, Rod Trent
Focus: break recap, Cybersecurity Awareness Month, highly opinionated facts, and current Microsoft Security / agent topicsRecent pre-break episodes:
Episode 298 – Julian Kusenberg on Purview, Agents, and AI
Episode 297 – Black Hat / Defcon recap + Project Perception
Episode 296 – Black Hat prep and the OpenAI agent incident
Full archive and live links: www.microsoftsecurityinsights.com
