Microsoft Defender

Headlines · 2

1. Oct 20
   REA backlash: client hardening, anti-AI reversing tools and trojan fake repos

   A 字母AI article republished by 钛媒体 describes the fallout from REA, an agent that does not decompile itself but orchestrates tools such as Ghidra, IDA and Hopper. French tech blogger Korben tested it with Opus 5.5: the agent wrote a working Python keygen for a crackme binary in about two minutes at roughly $0.5 in API cost, and the keygen passed verification with 479 random usernames. Elias Bachaalany, co-author of Practical Reverse Engineering, called it hype, noting GhidraMCP and IDA Pro MCP already enabled AI-assisted reversing in 2025. The article also reports Thales releasing Sentinel Envelope Plus, which in Thales' own controlled test left an agent finding none of 10 vulnerabilities it found in the unprotected app, with 970x token consumption; and a fake GitHub org, rea-tools, shipping an 82.6 MB trojanized archive that had been downloaded 172 times when reported, after which maintainers merged a README warning on Oct 13 listing only three official channels.

   钛媒体 · 🔥 0
2. Oct 19
   Microsoft unveils Guardian Agents to police AI agents as insider threats

   Microsoft on Monday announced new security features in Microsoft 365 E7 and its Project Perception platform that treat AI agents as potential insider threats, with Guardian Agents as the centerpiece: another set of AI agents that check other agents' actions, investigate anomalies and apply limits. Microsoft Security chief Hayete Gallot wrote that frontier models, regardless of origin, cannot be trusted because they are unpredictable, while CEO Satya Nadella argued companies must separate the supply of intelligence from authority over it. The rollout also includes dynamic permissions that give an agent only the access one task needs, dynamic risk scoring, conditional access that can restrict or stop an agent, and Defender discovery of agent types such as Claude Code, Codex and GitHub Copilot, with reports differing on whether the total is 60 types or 35 additional ones. Microsoft did not say when the features will be available or whether they cost extra beyond an E7 licence.

   iThome 台湾 · 🔥 0

Experience and discussion from the community

Share my Microsoft Defender experienceAsk about Microsoft Defender