Ask Microsoft Anything: How AI-Powered Attacks Happen- Real Threat Scenarios and Security Controls That Stop Them
Presenters Catherine Pidgeon (Catherine Pidgeon | LinkedIn) Partner Director of Product Management, Microsoft Security David McWee (David McWee | LinkedIn) FastTrack Threat Protection Lead, Security See how AI-powered attacks have unfolded in real life —and how you can protect against them at every stage. In this webinar, we’ll walk through real threat attack scenarios, breaking down the attacker’s tactics, the warning signs, and the opportunities to disrupt the attack. At each step, we’ll highlight Microsoft’s recommended security controls to help prevent, detect, and contain threats. You’ll leave with practical guidance to prioritize and implement the necessary security protections and strengthen your organization’s security posture against AI-powered threats. You’ll learn how to: Recognize AI-enabled attack techniques and the weaknesses they exploit. Connect threat scenarios to identity, data, and threat protection controls. Learn practical steps to strengthen your organization’s defenses. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a demo/presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen, so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Securing your Agentic Insiders with New Capabilities
Curious how security needs to evolve for the agentic era and what it takes to secure your newest insiders? Tune in November 11 at 9 a.m. PST for a live AMA with the experts behind Microsoft’s latest Secure AI innovations. Bring your questions and hear firsthand how we’re building security to help you know, contain, protect, and adapt your agentic estate, especially as agent risk changes, helping organizations embrace agents with confidence while securing agents at machine speed & scale, 24/7. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a demo/presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen, so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Integrated Security Operations Center in Microsoft Defender
Curious how ISOC works in practice and what it means for the future of the SOC? Tune in October 6 at 9 a.m. PST for a live AMA with the engineers behind Integrated Security Operations Center (ISOC) in Microsoft Defender. Bring your questions and hear firsthand how we're building a shared foundation for people and agents to perceive, reason, and act across the environment, enabling defenders to spend less time managing tools and more time driving security outcomes. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen, so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Expert-led security services with Microsoft Defender Experts
Learn how Microsoft Defender Experts deliver expert-led security services to help organizations modernize security operations, outpace bad actors, defend against threats, and build cyber resilience. Ask your questions and connect with Microsoft experts on real-world use cases, service capabilities, and best practices. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen, so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Secure multi-tenant environments with Microsoft Entra Tenant Governance
Learn more about Microsoft Entra Tenant Governance – a built-in solution that helps bring an organization’s tenants under control, reduce shadow-tenant risk, and manage tenant configuration at scale. By enabling centralized policies and cross-tenant delegated administration, it helps strengthen identity foundations for AI-powered operations. Bring your questions and hear directly from product experts about why securing tenants matters. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Why Cybersecurity Needs a New Security Stack for the AI Era with David Weston
David Weston leads Agentic Security at Microsoft, where he and his team build the AI models, autonomous agents, and evaluation systems redefining how defenders operate. At Microsoft since the Windows 7 era, he has worked across exploit mitigation design, malware analysis, APT research, and led security engineering for Windows, Xbox, Azure OS, and Microsoft's Offensive Security Research & Engineering group. His current work is leading teams training frontier security models, agentic security systems for defenders, and pushing AI-driven vulnerability discovery through Microsoft's Multi-Model Agentic Scanning Harness (MDASH). A longtime member of the research community and former CISA technical advisor, David is a regular presenter at BlueHat, Black Hat, and DEF CON. Key areas Dave and his team can discuss: The vision behind Project Perception How AI is changing the economics of cyber offense and defense Lessons learned from building MDASH and Microsoft's AI security initiatives Security-first AI development and deployment What's next for defenders as agentic systems become mainstream This will be a TEXT-BASED AMA, so ask your questions in the comment section down below and David and team will be answering via comment replies during the live hour!Feedback on Microsoft Intune and the Intune Suite
Do you use Intune to manage your device estate? Are there features you need to go fully cloud-native? What would make day-to-day device management easier? Are you exploring or the Intune Suite to unify endpoint management and security solutions into one bundle? Are there capabilities you need from Enterprise App Management, Microsoft Cloud PKI, Advanced Analytics, or other Intune Suite solutions? Join us for an opportunity to share your feedback and requests with the product team and engineers building Microsoft Intune, the Intune Suite, and the Intune admin center.Ask Microsoft Anything: Microsoft Defender Attack Disruption
Learn more about attack disruption—Microsoft Defender’s built‑in, AI-powered capability that stops in‑progress attacks at machine speed by analyzing attacker intent, identifying compromised assets, and containing threats before they spread. Bring your questions and hear directly from product experts on real‑world scenarios and best practices. What is an AMA? An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up evergreen so come back and use it as a resource anytime. We hope you enjoy!Ask Microsoft Anything: Secure Boot - May 2026
Join us in May for our fourth Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they start expiring in June of 2026. If you've already bookmarked Secure Boot playbook, but need more details or have a specific question, join us to get the answers you need to prepare for this milestone. No question is too big or too small. Update scenarios, inventorying your estate, formulating the right deployment plan for your organization -- we're here to help! How do I participate? Registration is not required. Simply select Add to calendar then sign in to the Tech Community and select Attend to receive reminders. Post your questions in advance, or any time during the live broadcast Get started with these helpful resources Secure Boot resources and guidance Secure Boot playbookAsk Microsoft Anything: Secure Boot - June 2026
Whether you're actively managing device security or planning your next steps, this AMA is your opportunity to connect directly with Microsoft experts and get clear, actionable guidance on updating Secure Boot certificates and monitoring status of update efforts. Bring your questions on rollout plans, challenges, reporting, and best practices. We’ll cover real-world scenarios, common challenges, and the steps you can take to confidently navigate the process. If Secure Boot certificate updates are on your project list—or you just want to make sure you’ve updated certificates successfully across your estate—this live, interactive event will help you move forward with clarity and confidence. Browse our most recent AMAs Secure Boot AMA - May 2026 Secure Boot AMA - April 2026 Get started with these helpful resources Secure Boot resources and guidance Secure Boot playbook
