Derk van der Woude·Aug 27Agent 365 settings explainedThis blog explains all Agent 365 settings [aug-2026]. A graphical version is available at…A response icon1A response icon1
Derk van der Woude·Aug 24Conditional Access for Agents: Blocking Agent Identities with Risk and Custom Security AttributesWhy this matters
Derk van der Woude·Jul 21Two doors into your tenant: delegated vs application permissions in multi‑tenant Entra appsA CISO’s guide to what you’re really approving when you click “Accept”, and the far quieter grant that hands a vendor a standing key.
Derk van der Woude·Jul 20The Invisible Factory: Four Security ‘Weaknesses’ in Entra Agent ID BlueprintsThe blueprint mints privileged identities the directory, the portal, and the audit log won’t show you. This lab shows you how to see them.
Derk van der Woude·Jul 16Entra Agent Blueprints, from an Offensive perspective.Microsoft gave every AI agent an identity. Blueprints are the template that mints them, and the single object that can compromise all of…
Derk van der Woude·Jun 27Ollama ScannerOllama is a tool that runs large language models (LLMs) locally leveraging the GPU or CPU through a simple REST API on localhost:11434.
Derk van der Woude·Jun 18Microsoft Agent 365 License Enforcement — July 1, 2026 Security Impact SummaryMicrosoft Agent 365 is $15 per user per month standalone, or included in Microsoft 365 E7 ($99/user/month, which also bundles E5, Copilot…A response icon1A response icon1
Derk van der Woude·Jun 16AIAgentsInfo → AgentsInfo: A Technical Migration Guide Before the July 1, 2026 CutoffDeadline: July 1, 2026. The AIAgentsInfo Advanced Hunting table is being deprecated and replaced by the new, unified AgentsInfo table…A response icon1A response icon1
Derk van der Woude·May 12Entra Enterprise App ReconLet’s start with the following Security quote:A response icon1A response icon1
Derk van der Woude·Apr 24Claude Mythos is coming , are you ready?On 7 April 2026, Anthropic announced Claude Mythos Preview, a frontier model that can find and exploit software vulnerabilities [0-days] at…
