RunAs Radio

What are the risks of using agents in your organization? While at NDC in Oslo, Richard sat down with Will Velida to talk about the OWASP Top 10 for Agentic Applications. AI agents promise productivity gains, but they also introduce entirely new attack surfaces. Richard and Will explore threats such as prompt injection, agent goal hijacking, memory poisoning, privilege abuse, and cascading failures across multi-agent workflows. They also discuss the tooling, governance frameworks, and security practices organizations need to adopt to move agentic applications from proof-of-concept to production safely.
Links
OWASP Top 10 for Agentic Applications 2026
Microsoft Purview
OpenTelemetry AI Agent Observability
Microsoft Agent Governance Toolkit
Microsoft AI Foundry
Hugging Face
Agent Plugins
Microsoft Entra Agent ID Documentation
Agentic Authorization
Recorded Sept 17, 2026

Turning on every tool in M365 is rarely a successful strategy - so how do you choose? Richard chats with Joy Apple about her work as a consultant helping organizations use the huge array of products in the M365 universe. Joy talks about meeting people where they are - understanding how they currently work, and then finding tools that can best amplify their productivity. Collaboration tools are a huge part of that story - finding ways to work together is always a challenge. And that's one of the many reasons there are so many tools in M365... It's all about addressing what people want to do!

Links

OneDrive

Viva Engage

Search in M365 Copilot

Microsoft Planner

Microsoft Loop

Azure SRE Agent

Recorded Sep 1, 2026

What can Cloudflare do for you? While at KCDC in Kansas City, Richard chatted with Bob Fornal about how his organization uses Cloudflare - not just for content delivery or DDoS protection, but also edge compute - and more! Bob talks about moving workloads between the client and server, where Cloudflare Workers can run some code and save time while staying secure. This leads to a broader conversation about introducing these tools to your organization - it's not likely something web developers will ask for. Still, it can help them, and collaboration between development and operations is always a positive in an organization!
Links
Cloudflare
Planetscale
Azure Front Door
Cloudflare Workers
Recorded Sep 11, 2026

How is artificial intelligence changing cybersecurity and penetration testing? Richard talks to Paula Januszkiewicz about how her team now uses large language models throughout the security workflow, from vulnerability research and data analysis to penetration testing and incident response. Paula explains that AI hasn't replaced security professionals, but it has dramatically accelerated the work, making it possible to analyze more data, build better tools, and identify attack paths faster than ever before. The conversation also explores the defender's perspective, including monitoring, logging, incident response, and why organizations still need to eliminate insecure technologies like NTLM. AI is changing cybersecurity rapidly, but the fundamentals of security remain the same.
Links
Defense at AI Speed
Claude Mythos
Microsoft Sentinel
Automatic Attack Disruption with Liz Tesch
Recorded Aug 26, 2026

Microsoft offers a surprising number of ways to build agents in Microsoft 365. Which one should you choose? Richard talks to Andrew Connell about the evolving Microsoft 365 Copilot landscape and the four major approaches to building agents. Starting with SharePoint Agents for document-focused scenarios, Andrew walks through Agent Builder inside Microsoft 365 Copilot, the increasingly popular Copilot Studio in the Power Platform ecosystem, and the often-overlooked Agents Toolkit for VS Code. Along the way, he discusses governance, licensing, publishing models, security concerns, and when Azure Foundry makes sense. The result is a practical guide to understanding Microsoft's growing agent platform and choosing the right tool for your organization.
Links
Microsoft Copilot Architecture
SharePoint Agents
Agent Builder in Microsoft 365 Copilot
Microsoft Copilot Studio
Agents Toolkit
Microsoft Foundry
Recorded Sep 2, 2026