Dennis

We're publishing our most detailed threat intelligence report to date. It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them. We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies. These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve. We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop. Read the report: anthropic.com/threat-intelli…

Heads up. Spotted by a colleague this morning: deception capabiliites in MDE are not making it past public preview.

After running 150+ Zero Trust workshops with Fortune 500 companies, Microsoft's customer experience architects dropped some truth bombs on my podcast... "60% of what we find, customers already know. 40% is something that surprises someone in the room." - Ramiro Calderon, Microsoft Architect The most eye-opening revelation? Teams work in silos: → Intune team deploys compliance policies ✅ → Identity team handles conditional access ✅ → But they NEVER talk to each other ❌ "We'll ask: 'Your compliance policy looks great. Do you block non-compliant devices?' And they say 'No, we don't do that part.'" - Clay Taylor, Microsoft Architect Result: Million-dollar security theater that doesn't actually secure anything. These architects have codified their learnings into a framework that partners are fighting to get trained on. In this episode, they reveal: 1️⃣ The "first, then, next" methodology that actually works 2️⃣ Why policy hygiene is the silent killer of security programs 3️⃣ How AI is about to change everything (again) Worth 53 minutes of your time. Link below. Have you seen this disconnect between security teams in your org? #ZeroTrust #EnterpriseSecurity #Microsoft #Leadership

New public statement from Apple (sent to me privately): “As of Friday, February 21, Apple can no longer offer Advanced Data Protection as a feature to new users in the UK.”

🆕 What's new in Microsoft Intune July 2024 MacOS - PKG and DMG Apps can now be assigned as "available". Your users can now install them from the company portal on demand. There is no uninstall option. Windows 365 - The Security Baseline has been updated. Test and adjust it to suit your environment, as not every setting may be appropriate. Copilot for Intune - Now generates #KQL Queries based on your input. Read more: techcommunity.microsoft.com/… #MSIntune #WhatsNew #CommunityRocks

The "Illicit Consent Grant Attack", showcased for Microsoft 365 / Azure Active Directory Entra ID / whatever you call it now, with a rogue app to install leveraging Oauth permissions to do your dirty work in a cloud tenant: jh.live/Bd3Tv_n9Kh4

I just sent out this week's Entra newsletter. Get the latest at entra.news