Show Notes
Itay Peled (Project Perception) and Yuri Diogenes (Defender for Cloud) on the two sides of AI in security: using AI to defend, and securing the AI everyone is deploying. Recorded live at Workplace Ninja Summit 2026 with Frans Oudendorp and Alex Verboon.
In this episode - Why "AI for security" and "security for AI" are different problems that you can't solve separately - Exposure management for agents: an agent that was never meant to be internet-facing can still be reachable through an attack path - Prompt injection and indirect prompt injection as the big threat to agents, and why MITRE ATLAS is worth knowing - How attackers use AI today: more scale, and digging deeper than they could before - Agent sprawl: start with an inventory through AI security posture management, and give every agent an identity in Entra so Conditional Access applies - Agent 365 as the control plane, Defender as the security view, and why data classification has to be in place before you point an agent at SharePoint - Project Perception is read-only today: it recommends and explains, and a human takes the action - Careers: admins and analysts won't be replaced but will need new skills, and why soft skills and in-person networking still matter
Chapters 00:00 Welcome: Itay Peled and Yuri Diogenes 01:52 AI for security vs. security for AI 04:55 Exposure management for AI agents 06:37 Prompt injection and MITRE ATLAS 09:13 How attackers use AI today 10:24 Agent inventory and agent identities 13:07 Agent 365, Defender and data protection 17:55 Human in the loop: when the agent is wrong 19:08 Will AI replace admins and analysts? 25:06 Yuri's 35 books, soft skills and networking 29:56 What Itay wants asked at the AMA
Guests Itay Peled – Microsoft Security Research, working on Project Perception, Microsoft's agentic SOC Workplace Ninja Summit 2026: Project Perception / agentic SOC · Threat landscape · Microsoft Security AMA
Yuri Diogenes – Microsoft, customer experience engineering for Defender for Cloud and exposure management Workplace Ninja Summit 2026: AI-SPM & Threat Detection · Proactive Security Posture Management
Hosts Frans Oudendorp & Alex Verboon
Recorded at Workplace Ninja Summit 2026 in Baden, Switzerland.
Follow the Workplace Ninja Summit Website: https://summit.wpninjas.global LinkedIn: https://www.linkedin.com/company/wpninjasummit X: https://x.com/wpninjasummit Instagram: https://www.instagram.com/wpninjasummit/
#WPNinjaSummit #AISecurity #MicrosoftDefender
More from Workplace Ninja Summit
Why does a commercial vendor keep giving tools away? Ben Ward, Field CTO UK & Ireland at Recast Software, on Right Click Tools Community, OSDCloud and why application management is still the hard part.
Why do Windows updates and device recovery belong in one conversation? Lia Vargas (Windows recovery) and Mounica Battula (Windows Autopatch) from Microsoft explain how they keep devices current, and what happens when an update goes wrong.
Most breaches don't need clever hacking: someone logs in with real credentials. Sami Laiho and Mikael Nyström (Truesec incident response) on why, what to do in the first hour, and which security measures are pure theater.
The Ninja BE organizing team — Nicky, Kenny, and Dieter — take the stage to explain what the Ninja BE user group is all about: its mission, community, and what members can expect from future events. 📍 Recorded live at the Ninja BE User Group Event, June 4, 2026 (Belgium) #NinjaBE #UserGroup #Community #ITCommunity #Belgium
Joeri Kumbruck and Jon Jarvis explore the world of Windows 365 and Azure Virtual Desktop (AVD), covering the latest features, use cases, and best practices for deploying cloud PCs and virtual desktop environments in the modern workplace. 📍 Recorded live at the Ninja BE User Group Event, June 4, 2026 (Belgium) #Windows365 #AVD #AzureVirtualDesktop #CloudPC #Microsoft365 #NinjaBE