Principal Product Manager @Microsoft #MicrosoftEmployee #Microsoft #Entra #Identity #EntraID - Tweets are my own
Chicago, IL
Joined February 2007
- Tweets642
- Following2.9K
- Followers5K
- Likes12.8K
Jef Kazimer retweeted
VS Code was already used by millions of developers for agentic coding. However, the editor layout has traditionally been optimized for single-task and single-workspace workflows.
Today, we're introducing a new window to enable our users (and ourselves!) to work with multiple agents across multiple projects: Agents.
Now available in VS Code stable!
Jef Kazimer retweeted
Hey folks, some personal news.
I’m leaving Microsoft.
It’s been a privilege to work here, and I’m incredibly grateful for the people I’ve worked with, the customers I’ve learned from, and the support so many of you have shown me along the way.
I’m now starting out on my own and chasing a dream I’ve had for a long time: building software that makes security more practical, accessible, and useful for the people doing the work every day.
Why now?
With all the change happening around us, I feel like new possibilities are opening up. I want to spend this next chapter building things I care deeply about, solving problems that matter, and doing work that brings me joy.
I’m excited. Nervous. Grateful.
My newsletters, podcast, Maester and other tools will all be part of this next chapter, and I’ll share more in the coming weeks.
Thank you for being part of the journey so far. I’m looking forward to building this next chapter with your support.
Jef Kazimer retweeted
Our new multi-model agentic security system brings together more than 100 specialized agents across frontier and custom models to find exploitable bugs, delivering top performance on the CyberGym benchmark.
We used it ahead of Patch Tuesday to help find and fix 16 vulnerabilities. Today we’re announcing that customers can sign up to test it in private preview.
microsoft.com/en-us/security…
Jef Kazimer retweeted
Microsoftが公開したwaza、Agent Skillの品質を体系的に評価するためのGo製CLI。「Skillを書く」から「Skillを運用する」フェーズに進むためのツールという位置付け
github.com/microsoft/waza
何ができるか:
▼ Skillのscaffold
waza init でプロジェクト作成、waza new でSkill.mdとevalスイートのテンプレを生成。skills/ と evals/ を分離した構造で管理。
▼ Evalの自動生成
waza suggest がSkill.mdをLLMに読ませて、評価タスクとfixtureを提案。ゼロからeval書く手間を削減。
▼ ベンチマーク実行
waza run eval.yaml でタスクを並列実行。9種類のgrader（text/diff/behavior/action_sequence/skill_invocation/LLM-as-judge等）を組み合わせて多面的に採点。結果はキャッシュされて反復が速い。
▼ A/Bテスト
--baseline でskill適用あり/なしを同一タスクで実行し、改善度を定量化。「このSkillは本当に効いているか」を数字で示せる。
▼ Readinessチェック
waza check でcompliance score、トークン予算、agentskills.io spec準拠、advisoryチェック（モジュール数、複雑度、negative delta riskパターン等）をまとめて判定。
▼ CI/CD統合
exit code（0/1/2）が定義済み、JUnit XML出力、GitHub Actions用のreusable workflow付き。PRごとにSkill品質をゲートできる。
▼ 結果の蓄積
Azure Blob Storageへ自動アップロード、waza results compare でラン間の差分を可視化。チームでSkillをイテレーションする運用を想定。
Skill開発を「プロンプトエンジニアリングの職人芸」から「テスト駆動の工学」に寄せようとしている設計思想が面白い。
Jef Kazimer retweeted
Microsoft’s AI Red Teaming Agent is a solid move toward repeatable GenAI security testing, helping teams test for prompt injection, data leakage, prohibited actions, task adherence, vulnerable code, and harmful content earlier in the lifecycle.
Automation isn’t going to replace expert red teaming, but it does give teams a stronger baseline before production.
learn.microsoft.com/en-us/az…
Jef Kazimer retweeted
Hey all, I'm going to be joining @merill on Entra Chat again! We are going to talk about some of those pesky gotchas with APIs, secrets EVERYWHERE!, hidden risks of application owners you would only know if you RTFM and some post-exploitation attack surface you may not be thinking about, and Zero Trust to Hero Trust with Managed Device requirements to access M365 resources.
Also, is your enterprise ready to respond in M365? We will talk about my favorite log sources when performing investigations.
Jef Kazimer retweeted
👋 Check out this new Microsoft Entra blog post 👇
Passkeys aren’t the finish line: Eliminating fallbacks and fixing recovery
techcommunity.microsoft.com/…
Jef Kazimer retweeted
👋 Folks cybersecpods.com is live!
It's the home of cyber security podcasts, a place to explore and find podcasts for all of us in cyber.
It's open source and crowd sourced, if I'm missing any please add them.
PS. I blame @ZackKorman for this one
Jef Kazimer retweeted
👋 Here's a quick birds eye view of Microsoft Agent 365 licensing
Enjoy!
Disclaimer: I'm not a licensing person. Please refer to the official licensing FAQ for details microsoft.com/licensing/faqs…
Jef Kazimer retweeted
This is a big release, and a great example of the Microsoft security community in action.
✅ AI agent security checks
✅Azure DevOps tests
✅CIS updates
✅Multi-tenant reporting
+ more
Watch or listen at entra.news/p/how-to-secure-c…
Jef Kazimer retweeted
Agent 365 is now generally available!
We’re extending the systems customers already use for identity, security, governance, and management to every AI agent and their interactions across the enterprise. microsoft.com/en-us/security…
I love that we keep adding more resources that can be assigned AND governed by entitlement management access packages. If your org is still doing access management the traditional way you really should explore how to modernize access beyond just groups using Entra
Hot off the press: Entra ID Governance Entitlement management native support for Azure resources in access packages is now in public preview! learn.microsoft.com/en-us/en…
Jef Kazimer retweeted
Microsoft is extending Zero Trust to AI.
New ZT4AI guidance, workshop updates, assessment changes, and reference architecture are worth a look for teams working on secure AI adoption.
Zero Trust has to cover all AI aspects in production.
buff.ly/Kd4PQkJ
#zerotrust #ai
Jef Kazimer retweeted
Super to see Accenture roll out 740,000+ M365 Copilot seats—our largest deployment to date!
news.microsoft.com/source/fe…
Jef Kazimer retweeted
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.mdfile that primes Claude with expert-level methodology for a specific attack surface from SQLi to shellcode, EDR evasion to exploit development.
Resource: github.com/SnailSploit/Claud…
Jef Kazimer retweeted
New Tool: Live Microsoft Entra change tracker by @aboutcloudio
Tracks updates across Entra ID (e.g. Conditional Access, policies) in near real time.
Useful for anyone in IAM—visibility into changes is still a blind spot in many environments.
buff.ly/M77fozX
#EntraID
Jef Kazimer retweeted
I sometimes defend open source stuff that’s “vibe coded” because like why does it matter?
The common argument is something along the lines of “they don’t know what the code does. They don’t know the code quality.”
How many people who have written any code have been 100% satisfied with the code they wrote?
Stop demonizing technology.