Changing the physics of cyber defense

A Microsoft security leader outlines how defenders can regain advantage by adopting attack-graph thinking and multiple data representations to interrogate telemetry, strengthening preventative controls and asset/entitlement hygiene, enforcing phishing-resistant MFA and constrained admin access, and building layered, predictable defenses, while leveraging AI and cross-industry collaboration to reduce noise, spot anomalies faster, and optimize remediation.