19 Alerts, One Incident: An Azure-to-AWS Attack @MSFTMechanics

Uploaded July 2026 | Updated September 2026, 2 weeks ago

What does a multi-stage cloud attack look like when it's stitched into one story? Microsoft Defender for Cloud correlated 19 alerts into a single incident in near real time — tracing initial access from a Kubernetes API request, identity compromise via a stolen service principal, and cross-cloud lateral movement: a brute-force attack from an exposed Azure Kubernetes Service cluster targeting an AWS RDS resource.

▶ Full episode: youtu.be/CnqmC-CQs48
▶ Get started: https://aka.ms/DefenderCloudSecurity

#Shorts #DefenderForCloud #ContainerSecurity #Kubernetes #MicrosoftSecurity

19 Alerts, One Incident: An Azure-to-AWS Attack

What Is Token Theft? The Theme-Park Pass Explained

Pin down AI agent data security exposure #Cybersecurity, #AIAgents, #MicrosoftPurview, #DataSecurity

Block sensitive prompts. #MicrosoftEdge #CyberSecurity #ZeroTrust #MicrosoftPurview

Zero Cloud Tokens To Build And Run This App

Embed business rules in the Fabric IQ ontology. #MicrosoftFabric #AIAgents #PowerBI #MicrosoftAI

Token Theft Attacks Jumped 111% — Why MFA Alone Wont Save You

Improve AI output quality across every query. #MicrosoftAI #AIAgents #AzureAI #EnterpriseAI

$90% reduction with no quality tradeoffs. #TokenEconomics #MicrosoftFoundry #AICosts #GenerativeAI Control what youre billed on. Tokens are the currency of AI, and how you design your app determines how many you spend. Compress conversation history instead of resending it raw, cap output tokens with matching prompt instructions, and cache static context so each reuse costs a fraction of the first request. Route each prompt to the right model by complexity, or set Model Router in Microsoft Foundry to handle that automatically — balanced, quality, or cost mode. Then optimize the whole stack. Run Agent Optimizer to test your prompt, model, and tool configurations together and surface better setups. Use Toolbox to dynamically select only the tools each request needs and cut input token overhead by 90%. April Gittens, Microsoft Principal Cloud Advocate, joins Jeremy Chapman, Microsoft 365 Director, to share how to seize control of AI token spend through smarter app design. ► Unfamiliar with Microsoft Mechanics? As Microsofts official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics #TokenEconomics #MicrosoftFoundry #AICosts #GenerativeAI$

Co-author Excel files from any device. #MicrosoftExcel #Copilot #Microsoft365 #Excel

Every tenant, surfaced. #MicrosoftEntra #IdentitySecurity #ZeroTrust #CloudSecurity

One CLI command.#MicrosoftFabric #GitHubCopilot #Copilot #AppDevelopment