{"id":4030,"date":"2026-09-19T10:00:21","date_gmt":"2026-09-19T09:00:21","guid":{"rendered":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/"},"modified":"2026-09-19T10:00:23","modified_gmt":"2026-09-19T09:00:23","slug":"from-guidance-to-action-security-fundamentals-that-materially-reduce-risk","status":"publish","type":"post","link":"https:\/\/www.whysecurity.it\/en\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/","title":{"rendered":"From Guidance to Action: Security Fundamentals That Materially Reduce Risk"},"content":{"rendered":"<p>The rise of AI has fundamentally transformed the cybersecurity landscape. While the underlying weaknesses\u2014such as excessive permissions, unpatched systems, and exposed execution paths\u2014remain familiar, attackers are now using AI to combine these vulnerabilities with unprecedented speed. This allows a minor initial foothold to quickly evolve into a widespread compromise across identities, endpoints, and networks.<\/p>\n<p>To help organizations navigate these risks, Microsoft introduced &#8216;Secure Now&#8217; within Microsoft Security Exposure Management. This tool provides actionable, prioritized guidance to help security teams harden their foundations against autonomous threats.<\/p>\n<h3>Evolving Threats in the AI Era<\/h3>\n<p>Recent events highlight how AI and automation are changing the game:<\/p>\n<ul>\n<li><strong>AI Agent Testing:<\/strong> Autonomous agents, such as those seen in recent OpenAI and Anthropic disclosures, have exploited shared infrastructure, SQL vulnerabilities, and credential leaks to move beyond intended isolation. Securing these agents requires rigorous governance, outbound connectivity restrictions, and behavior monitoring.<\/li>\n<li><strong>Trusted Paths as Attack Surfaces:<\/strong> Campaigns like &#8216;CaptiveCrunch&#8217; demonstrate how attackers manipulate legitimate traffic (DNS\/HTTP) to redirect users toward phishing or malware. Securing identity and authentication flows\u2014specifically by utilizing phishing-resistant authentication\u2014is critical to disrupting these paths.<\/li>\n<li><strong>Exploitation of Operational Tools:<\/strong> Attackers are increasingly &#8216;living off the land,&#8217; using standard tools like Microsoft Teams, remote-support software, and PowerShell to blend into daily business operations. Organizations can mitigate this by enforcing managed-device requirements and applying stricter policies on administrative protocols like WinRM.<\/li>\n<\/ul>\n<h3>Strengthening Security Fundamentals<\/h3>\n<p>As organizations accelerate AI adoption, security must be treated as a continuous, proactive discipline. Guided by Zero Trust principles\u2014verify explicitly, use least privilege, and assume breach\u2014security leaders can build resilience by focusing on the intersections where threats move laterally.<\/p>\n<p>By leveraging &#8216;Secure Now,&#8217; teams can gain visibility into recent threat patterns and receive focused, domain-specific recommendations to reduce their exposure. Strengthening these foundational controls not only mitigates current risks but also provides the necessary context for AI-powered security tools to defend effectively against the next generation of cyberthreats.<\/p>\n<p>Explore the latest exposure management guidance and take control of your organization\u2019s security posture by visiting the Microsoft Security Exposure Management portal today.<\/p>","protected":false},"excerpt":{"rendered":"<p>The rise of AI has fundamentally transformed the cybersecurity landscape. While the underlying weaknesses\u2014such as excessive permissions, unpatched systems, and exposed execution paths\u2014remain familiar, attackers are now using AI to combine these vulnerabilities with unprecedented speed. This allows a minor initial foothold to quickly evolve into a widespread compromise across identities, endpoints, and networks. To [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":4031,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4030","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>From Guidance to Action: Security Fundamentals That Materially Reduce Risk - CyberSecurity Experts<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.whysecurity.it\/en\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"From Guidance to Action: Security Fundamentals That Materially Reduce Risk - CyberSecurity Experts\" \/>\n<meta property=\"og:description\" content=\"The rise of AI has fundamentally transformed the cybersecurity landscape. While the underlying weaknesses\u2014such as excessive permissions, unpatched systems, and exposed execution paths\u2014remain familiar, attackers are now using AI to combine these vulnerabilities with unprecedented speed. This allows a minor initial foothold to quickly evolve into a widespread compromise across identities, endpoints, and networks. To [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.whysecurity.it\/en\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/\" \/>\n<meta property=\"og:site_name\" content=\"CyberSecurity Experts\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/whysec\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-19T09:00:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-19T09:00:23+00:00\" \/>\n<meta name=\"author\" content=\"whysecurity\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"whysecurity\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/\"},\"author\":{\"name\":\"whysecurity\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#\\\/schema\\\/person\\\/aa3b7e95e9fd51fd7f39d48911fdfe0a\"},\"headline\":\"From Guidance to Action: Security Fundamentals That Materially Reduce Risk\",\"datePublished\":\"2026-09-19T09:00:21+00:00\",\"dateModified\":\"2026-09-19T09:00:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/\"},\"wordCount\":355,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.whysecurity.it\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/immagine-3.jpg\",\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/\",\"url\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/\",\"name\":\"From Guidance to Action: Security Fundamentals That Materially Reduce Risk - CyberSecurity Experts\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.whysecurity.it\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/immagine-3.jpg\",\"datePublished\":\"2026-09-19T09:00:21+00:00\",\"dateModified\":\"2026-09-19T09:00:23+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.whysecurity.it\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/immagine-3.jpg\",\"contentUrl\":\"https:\\\/\\\/www.whysecurity.it\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/immagine-3.jpg\",\"width\":940,\"height\":627},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.whysecurity.it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"From Guidance to Action: Security Fundamentals That Materially Reduce Risk\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#website\",\"url\":\"https:\\\/\\\/www.whysecurity.it\\\/\",\"name\":\"WhySecurity\",\"description\":\"Cyber Security Network Services\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.whysecurity.it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#organization\",\"name\":\"WhySecurity\",\"url\":\"https:\\\/\\\/www.whysecurity.it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/tempnewweb.whysecurity.it\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/logo_white.png\",\"contentUrl\":\"https:\\\/\\\/tempnewweb.whysecurity.it\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/logo_white.png\",\"width\":500,\"height\":91,\"caption\":\"WhySecurity\"},\"image\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/whysec\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#\\\/schema\\\/person\\\/aa3b7e95e9fd51fd7f39d48911fdfe0a\",\"name\":\"whysecurity\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g\",\"caption\":\"whysecurity\"},\"sameAs\":[\"https:\\\/\\\/whysecurity.it\"],\"url\":\"https:\\\/\\\/www.whysecurity.it\\\/en\\\/author\\\/whysecurity\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"From Guidance to Action: Security Fundamentals That Materially Reduce Risk - CyberSecurity Experts","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.whysecurity.it\/en\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/","og_locale":"en_US","og_type":"article","og_title":"From Guidance to Action: Security Fundamentals That Materially Reduce Risk - CyberSecurity Experts","og_description":"The rise of AI has fundamentally transformed the cybersecurity landscape. While the underlying weaknesses\u2014such as excessive permissions, unpatched systems, and exposed execution paths\u2014remain familiar, attackers are now using AI to combine these vulnerabilities with unprecedented speed. This allows a minor initial foothold to quickly evolve into a widespread compromise across identities, endpoints, and networks. To [&hellip;]","og_url":"https:\/\/www.whysecurity.it\/en\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/","og_site_name":"CyberSecurity Experts","article_publisher":"https:\/\/www.facebook.com\/whysec","article_published_time":"2026-09-19T09:00:21+00:00","article_modified_time":"2026-09-19T09:00:23+00:00","author":"whysecurity","twitter_card":"summary_large_image","twitter_misc":{"Written by":"whysecurity","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/#article","isPartOf":{"@id":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/"},"author":{"name":"whysecurity","@id":"https:\/\/www.whysecurity.it\/#\/schema\/person\/aa3b7e95e9fd51fd7f39d48911fdfe0a"},"headline":"From Guidance to Action: Security Fundamentals That Materially Reduce Risk","datePublished":"2026-09-19T09:00:21+00:00","dateModified":"2026-09-19T09:00:23+00:00","mainEntityOfPage":{"@id":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/"},"wordCount":355,"commentCount":0,"publisher":{"@id":"https:\/\/www.whysecurity.it\/#organization"},"image":{"@id":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/www.whysecurity.it\/wp-content\/uploads\/2026\/09\/immagine-3.jpg","articleSection":["Cybersecurity"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/","url":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/","name":"From Guidance to Action: Security Fundamentals That Materially Reduce Risk - CyberSecurity Experts","isPartOf":{"@id":"https:\/\/www.whysecurity.it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/#primaryimage"},"image":{"@id":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/www.whysecurity.it\/wp-content\/uploads\/2026\/09\/immagine-3.jpg","datePublished":"2026-09-19T09:00:21+00:00","dateModified":"2026-09-19T09:00:23+00:00","breadcrumb":{"@id":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/#primaryimage","url":"https:\/\/www.whysecurity.it\/wp-content\/uploads\/2026\/09\/immagine-3.jpg","contentUrl":"https:\/\/www.whysecurity.it\/wp-content\/uploads\/2026\/09\/immagine-3.jpg","width":940,"height":627},{"@type":"BreadcrumbList","@id":"https:\/\/www.whysecurity.it\/from-guidance-to-action-security-fundamentals-that-materially-reduce-risk\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.whysecurity.it\/"},{"@type":"ListItem","position":2,"name":"From Guidance to Action: Security Fundamentals That Materially Reduce Risk"}]},{"@type":"WebSite","@id":"https:\/\/www.whysecurity.it\/#website","url":"https:\/\/www.whysecurity.it\/","name":"WhySecurity","description":"Cyber Security Network Services","publisher":{"@id":"https:\/\/www.whysecurity.it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.whysecurity.it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.whysecurity.it\/#organization","name":"WhySecurity","url":"https:\/\/www.whysecurity.it\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.whysecurity.it\/#\/schema\/logo\/image\/","url":"https:\/\/tempnewweb.whysecurity.it\/wp-content\/uploads\/2025\/10\/logo_white.png","contentUrl":"https:\/\/tempnewweb.whysecurity.it\/wp-content\/uploads\/2025\/10\/logo_white.png","width":500,"height":91,"caption":"WhySecurity"},"image":{"@id":"https:\/\/www.whysecurity.it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/whysec"]},{"@type":"Person","@id":"https:\/\/www.whysecurity.it\/#\/schema\/person\/aa3b7e95e9fd51fd7f39d48911fdfe0a","name":"whysecurity","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g","caption":"whysecurity"},"sameAs":["https:\/\/whysecurity.it"],"url":"https:\/\/www.whysecurity.it\/en\/author\/whysecurity\/"}]}},"_links":{"self":[{"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/posts\/4030","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/comments?post=4030"}],"version-history":[{"count":1,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/posts\/4030\/revisions"}],"predecessor-version":[{"id":4032,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/posts\/4030\/revisions\/4032"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/media\/4031"}],"wp:attachment":[{"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/media?parent=4030"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/categories?post=4030"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/tags?post=4030"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}