What's going on this week
For twenty years the answer to most security problems has been to patch faster. SASIG's session on Tuesday argues that AI has broken that model, and the numbers back it up: exploit windows measured in hours, and a growing share of risk that has no patch at all. On Thursday CyberOne and Microsoft pick up the other end of the same problem, which is the agents your own staff are already building in Copilot Studio and nobody owning them.
The third pick is deliberately the opposite. Valto are demoing controlled documents in SharePoint: version control, approvals and read tracking with what's already in Microsoft 365. No AI, no new licence, just a thing most organisations haven't set up.
Also worth knowing about if you work in or with a law firm: ANS and Microsoft are demoing AI agents built for legal, compliance and risk teams on Thursday at 11:00. Too specific to be a pick for everyone, so it's in Read next.
Tuesday 11:00
SASIG on why patching faster no longer saves you. Exploitation timelines have shrunk from days to hours, zero-days are a growing share of attacks, and many AI-related risks have no patch at all. Broadcom's Dick O'Brien makes the case for tracking mean time to mitigate rather than mean time to patch, with real examples. SASIG isn't selling anything, which is why it's first.
PickLiveTue 10 Nov, 11:001 hour
You Can't Patch Your Way Out of AI: Measuring Mitigation, Not Patching
SASIGCybersecurityFree
Thursday 14:00
CyberOne and Microsoft on Microsoft Agent 365, which is new enough that most people haven't seen it. Finding the agents already operating across your organisation, giving each one an owner, applying least privilege, governing what they can touch (apps, APIs, MCP servers), and feeding what they do into your existing security monitoring. If you watched Proofpoint last week, this is the next question.
PickLiveThu 12 Nov, 14:00
Building a Secure Foundation for Agentic AI
CyberOneArtificial Intelligence & CopilotFree
Wednesday 11:00
Valto with a live demo of controlled documents in SharePoint: how a document moves from draft to approved, who signed it off, and who has actually read it. If your policies still live in a shared drive with "FINAL v3" in the filename, this is an hour that will pay for itself at the next audit.
PickLiveWed 11 Nov, 11:0030 min
Controlled Documents in SharePoint
ValtoGovernance, Risk & ComplianceFree
Picked by FrontRow. Nobody pays to be in the brief.
If you've only got 45 minutes
Bridewell on designing a Security Operations Centre around your actual risks rather than a generic blueprint: in-house, outsourced or hybrid, and how to plan the route from where you are now. The one to watch if someone has asked "do we need a SOC". Tuesday 10:00, 45 minutes.
Live · Tue 10 Nov 2026, 10:00
Designing an Effective SOC: From Strategy to Target Operating Model
Bridewell45 min
From the library
Bistech and Druva on protecting and recovering the data AI agents generate. Once agents are producing records, something has to back them up and get them back. Forty minutes, no sign-up, and a natural follow-on to Thursday's session.
Are you protecting everything AI depends on?
Recording · Bistech · 40 min
Read next
For legal teams: The Agent House: The AI-Powered Legal Team from ANS and Microsoft, Thursday 11:00. If Thursday's agent sessions leave you wanting the groundwork first, Getting your organisation Copilot-ready puts six sessions in the right order, and Getting ready for the cyber attack you'll actually get does the same for the security side.
That’s it for this week.
If this was useful, have next Monday’s sent to you.