Profile avatar
sarahyo.com
Principal Security Advocate @ Microsoft | Co-host of @azsecpod.bsky.social | Dogs, food and cyber security posts | Opinions mine, not my employer's | 🇬🇧 living in 🇦🇺 | Sarahyoung.io
318 posts 2,799 followers 584 following
Prolific Poster
Conversation Starter

The first episode of Secure Future Initiative Tech Tips with Michael Howard and Nick Wryter is out and it's all about using phishing resistant creds: www.youtube.com/watch?v=YV8E...

Happy Pokémon day to those that celebrate.

Next week my Learn Live Security 101 series is starting! Join us to start your journey learning some security fundamentals and core concepts! Register here: aka.ms/LL/Sec101/1x

Are you using managed identities for keyless authentication with your AI app? It's SUPER easy and we have a Learn module per language to help you out: learn.microsoft.com/en-us/traini... learn.microsoft.com/en-us/traini... learn.microsoft.com/en-us/traini... learn.microsoft.com/en-us/traini...

Timeline cleanser for your Monday

Elliptic is following the money on this ByBit hack - the biggest theft ot all time. “Within 2 hours of the theft, the stolen funds were sent to 50 different wallets, each holding approximately 10,000 ETH. These are now being systematically emptied”. www.elliptic.co/blog/bybit-h...

Has anyone watched Zero Day on Netflix yet? Is it silly cybers or does it have any basis in reality?

Been a hot minute since I got an Air NZ coffee

Voting on the real issues @dddmelbourne.bsky.social #DDDMelb

Hanging at @dddmelbourne.bsky.social with @codess-aus.bsky.social !

🚨🚨 **FINAL CALL!** 🚨🚨 @pink_tangent and I are researching the delta between perception and reality within the realm of security architecture. We are wrapping up our survey by the month's end, please consider helping if you haven't completed it already! 🔗 docs.google.com/forms/d/e/1F...

Mentally, I am here.

Episode #109 is out! We speak to guest @baileybercik.bsky.social about the problem of over permissioning and how to use Microsoft Entra Permissions Management to identify and manage over-permissioned identities. Also, the news.

Coming very soon: a new show where Michael Howard and I discuss how to implement the Secure Future Initiative in your environment with Microsoft security experts! #SFI #securityaboveallelse

Best PR ever

The 2nd ever BlueHat India in Hyderabad will take place May 14-15 and the CFP is now open! This is your chance to showcase research in the vuln and mitigation space, emerging threats and techniques, new and novel research findings, Submit by March 14: microsoft.com/bluehat. #BlueHatIndia #BlueHat

Next month I'm running an online series with @MSFTReactor about security basics and some of the core concepts you need to know to kick-start learning about cyber security, get registered! Bonus: it's in a not-horrible time for Australia and this side of the world! aka.ms/LL/Sec101/1x

Good morning #MicrosoftAITour NYC! See you at 11.30am and 2.30pm!

Back in NYC for the first time in a very long time! See you at the #MicrosoftAITour New York on Thursday!

This Purview guide is really great It's not so much the content (though it's good), but I just really like this layout for deployment guidance and steps to maturity with the products The docs can get overwhelming, and this is a nice companion guide :) learn.microsoft.com/...

Episode #108 is out! In this episode we speak to Diana Vicezar from the Entra team about securing Gen AI apps. This is the first episode of a mini-series on this topic. Also, the news! Available in all the usual places you get podcasts.

Am I the only person who is very excited for the Switch 2, will pre-order it and then hardly ever play it because of adulting? (not a slight on people who find time to play games, I just don't ever seem to be able to find the time nowadays 🥲)

Droppy and the Sleuth want to thank you all for the love pouring in! We're super excited about hosting our 10th CrikeyCon! Just a reminder for anyone that wants to take part, the CFP and CFE submissions close end of this month, so we can give notice to travelers. Looking forward to your submissions!

Our AI Red Team are the coolest folks and one of the industry’s first ever AI red teams: when they write a white paper, you gotta listen. www.microsoft.com/en-us/securi...

Did you miss the security announcements at Ignite in November? Tomorrow I'll be giving you the TL;DR at 9.30am AEDT, register below. Shib for attention. #Cybersecurity #MSIgnite2024 msevents.microsoft.com/event?id=327...

I don’t think there’s anything as terrifying as trying to put a new screen protector on your phone and not get dust underneath 😬

Episode #107 is out! In this episode, we talk to Emily Blundo and Maxime Bombardier about Purview blueprints for secure by default and Copilot oversharing. Very topical at the moment, definitely one to check out! Also, the news!

Hey… #CactusCon is Free to Students. Students: send an email to [email protected] from your student email address to request a ticket. @cactuscon.bsky.social will send you a promo code for one free student ticket. 🎟️ #LFG www.cactuscon.com/cc13-tickets

Happy new year! I spent the new year with beaches and friends and dogs, perfect start to 2025.

I have a few days in New York at the end of the month. I haven’t been to New York for over 10 years. I’ve done all the usual tourist stuff, where should I eat/drink/see things?

@serena.nz I’m coming to New York at the end of the month, DM meeeee

I said I was done with socials for 2024 but just one more before I go: if you want to check out the amazing folks that I had the privilege of interviewing during #MSIgnite 2024 you can do that here: aka.ms/MSIgniteHost... I speak to some awesome folks including @sherrod.bsky.social and more!

Being an #MSIgnite host is such a privilege. I love it. This year all our interviews are in the session catalog. Bite sized, informative & fun with product makers, customers and partners. Check them out for a quick hit of knowledge! aka.ms/MSIgniteHosts

Episode #106 is out! In this episode we look at our favourite security announcements from Ignite 2024 in Chicago and get the news from the floor.

It’s that time of year where I sign out of all my public socials to take a break over Christmas and New Year. Have a lovely rest and see you in 2025. 🫡

Great to see @sarahyo.com at the #MicrosoftAITour in Sydney... good to get our selfie this year again

How would I hack YOU during the holidays? By messaging you about the packages, deals & giveaways you care about! Share these scam types with your fam so they know exactly which emails, texts, calls, and posts to be wary of this December. Stay politely paranoid, folks! www.youtube.com/watch?v=6Ewt...

Back doing more interviews at #MicrosoftAITour