Product Manager in Microsoft Security team. Focusing on Identity and Network Access, Zero Trust
Berlin
Joined December 2009
- Tweets644
- Following279
- Followers507
- Likes239
Stronger AI deployments start with understanding risk in context.
Our Microsoft Security team and NVIDIA outline five risk categories for open-weight models: msft.it/6017aIrJ5
I value the emphasis on evaluating the model and surrounding system.
Cross-domain #OAuth token exchange does not remove multi-provider risk or dual client registration. It only removes the boundary prompt while wiring a silent compromise path across your identity estate.
dev.to/astaykov/to-exchange-…
An AI agent kill switch is a procedure, not token revocation. Stopping #AIAgents means blocking model and tool paths, containing execution and verifying the result; an #APIGateway is one enforcement point, not the whole procedure.
dev.to/astaykov/the-ai-agent…
More efficient AI infrastructure can support increasingly demanding workloads.
Our EVP of Cloud + AI, Scott Guthrie, shares how we’re approaching that challenge: msft.it/6015aSyyv
Maia 300 is designed for long-context reasoning and multi-step agentic tasks.
In #MicrosoftEntra, synced #Passkeys on an employee's own phone avoid the cross-device detour. #Passwordless phone sign-in is not the same method; bootstrap registration before enforcing passkey access.
dev.to/astaykov/to-passkey-o…
#A2A standardizes how agents communicate. It does not replace authorization. In v3 of my #AWS #AgentCore, Blueprint 2 uses #EntraAgentID scopes and app roles to separate delegated tools from autonomous chat.
dev.to/astaykov/agent-to-age…
TLS protects each hop, not the trust boundary. A gateway can inspect prompts before they reach a model. Unsanctioned #GenAI is a #CyberSecurity problem because the organization no longer controls the data lifecycle. dev.to/astaykov/encryption-i…
Admin consent delegation is not a trade-off between a central queue and broad directory roles. #MicrosoftEntra app consent policies can bound a custom role to an approved permission envelope, so #AIAgents scale without multiplying standing privilege.
dev.to/astaykov/flexibility-…
Microsoft Graph least privilege is not just a smaller permission. #MicrosoftGraph consent and #MicrosoftEntra ownership are separate control planes. If you govern only scopes, owners can still change an application's blast radius. dev.to/astaykov/microsoft-gr…
An AWS-hosted #EntraAgentID does not need an Entra client secret. With #WorkloadIdentity federation, AWS STS issues a short-lived assertion that Entra validates before the Agent ID token exchange. dev.to/astaykov/how-an-aws-h…
Consent is the start of agent authorization, not the whole model. With #Entra #AgentID, user assignment, #ConditionalAccess, app roles, group claims and access packages govern different boundaries.
dev.to/astaykov/authorizatio…
Knowing what an app can access is not the same as seeing what it does. #AppGovernance in #DefenderForCloudApps connects #OAuth app permissions with activity and risk signals. Check the capability you may already own.
learn.microsoft.com/en-us/de…
An API gateway that mints identity is an authorization server, whether you govern it as one or not. Count it, govern it, then fund getting it out of the identity business.
dev.to/astaykov/your-api-gat…
Anton Staykov retweeted
. @Thomas_Live shows live the cool features come with attack path analysis integrated in #DefenderforCloud and shows the possibilities in #DefenderforCSPM.
#AzureBonn goes #GlobalAzure
Anton Staykov retweeted
Am 10. April findet ein ganz besonderes #AzureBonn meetup im Microsoft Office Köln statt. Wir freuen uns auf @astaykov, Thomas Detzner und @PeterLenzke. An dem Abend wird sich alles um #GlobalSecureAccess drehen mit einer spannende Session und Roundtable.
meetup.com/azure-bonn-meetup…
Hey @Allianz, have you noticed your Wohngebäudeversicherung Rechner is broken. This is what you get when you are signed in:
Microsoft has blocked almost 35 bln Identity threats in 2022. That is more than 1000 per second! Please join @joychik, @vasujakkal and Sinead O'Donovan on June 20 to learn how to make identity your first line of defense! Register here: lnkd.in/eVMS-_zD
Anton Staykov retweeted
Microsoft Secure is in 6 days! Make sure to register to attend this new, digital event designed for security professionals. Be among the first to see what an AI-powered future means for cybersecurity. Join Microsoft on March 28th @ 8 am PT. 425.show/MSFTSecureEvent
#AI #Microsoft
Anton Staykov retweeted
Need help keeping track of settings and resources in your Azure AD tenant? Introducing Azure AD Recommendations! This feature helps monitor the status of your tenant and recommends identity best practices with guidance. Check it out here 425.show/AADRecs #AAD #AzureAD
ALT Shows where recommendations is located in Azure AD tenant portal
Anton Staykov retweeted
Do you like hands-on experience and the ability to ask questions in real time? Then register for Microsoft Secure! Ask experts in live Q&A sessions or join a guided walkthrough of Microsoft Learn modules. Click here to register and view available sessions: 425.show/MSFTSecureEvent
