My ACM TechTalk: A Look at AI Security — hallucinations, indirect prompt injection, jailbreaks + mitigations. www.youtube.com/watch?v=kW6n...

A Look at AI Security with Mark Russinovich

YouTube video by Association for Computing Machinery (ACM)

youtube.com

Join our session at #SnowflakeBUID, From Vibes to Production: The Art, Discipline, and Pitfalls of Vibe Coding, where we share our experience on how to benefit from the speed of vibe coding, while still applying best practices to deploy production ready software. www.snowflake.com/en/build/ame...

BUILD

The Dev Conference for AI & Apps

snowflake.com

I'm a Chrome/Edge web developer now! If you play Wordle like I do but wanted more insight into your past games and trends than the Wordle page shares, you will like Wordle Stat Explorer. chromewebstore.google.com/detail/ighph...

Learn about the dCISO role at Microsoft in this SecurityWeek interview of me and Ann Johnson: www.securityweek.com/ciso-convers...

CISO Conversations: Are Microsoft’s Deputy CISOs a Signpost to the Future?

SecurityWeek talks to Microsoft Deputy CISOs Ann Johnson and Mark Russinovich.

securityweek.com

More Rust goodness for security critical code: Microsoft has joined the Open Device Partnership (ODP) and is investing in foundational security capabilities that will ship in every Surface device and is available for the PC ecosystem: techcommunity.microsoft.com/blog/surface...

Surface Joins the Open Device Partnership (ODP) | Microsoft Community Hub

Surface joins the Open Device Partnership (ODP) to drive innovation in secure, reliable, and future-ready device firmware—leveraging Rust, modern EC...

techcommunity.microsoft.com

New ZoomIt release with image smoothing during both static and live zoom: ZoomIt v9.10 ZoomIt, a screen zooming, recording and annotation utility, adds image smoothing for higher-quality visuals. learn.microsoft.com/en-us/sysint...

Sysinternals - Sysinternals

Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain Windows with Sysinternals utilities.

learn.microsoft.com

Drasi turns 1! 🎉 We launched Drasi to make change-driven systems easier—and now we’re adding GQL support for continuous queries alongside openCypher. This means more flexibility and a future-proof path for graph-based apps. opensource.microsoft.com/blog/2025/10...

Drasi at one year: now with GQL for change-driven solutions

Drasi’s first year brings GQL support and community growth, empowering developers to build event-driven apps. Learn more.

opensource.microsoft.com

In our latest podcast episode of Scott and Mark Learn To, Scott Hanselman and I discuss the Microsoft career path for developers, including how we award Distinguished Engineer and Technical Fellow titles: www.youtube.com/watch?v=-lfh...

EPISODE 25 - Scott and Mark Learn To... Level Up: Navigating Career Growth in Microsoft

YouTube video by Scott Hanselman

youtube.com

Publishing my Wordle stats browser extension that I coded with AI soon!

In our latest "Scott and Mark Learn To" podcast episode, we discuss the power of AI-assisted coding and go under the hood of LLM tokens and token probabilities with a web chatbot I AI-coded: "Scott and Mark Learn To… Chatbot, Another Vibe-Coded Project by Mark" www.youtube.com/watch?v=o1hl...

EPISODE 24 - Scott and Mark Learn To… Chatbot, Another Vibe-Coded Project by Mark

YouTube video by Scott Hanselman

youtube.com

I demoed this at Ignite last year—now it's real. Every server gets a dedicated Hardware Security Module. This fundamentally changes how we secure connected systems. End-to-end hardware-protected keys is now the baseline, not the exception: techcommunity.microsoft.com/blog/AzureCo...

Microsoft Azure Introduces Azure Integrated HSM: A Key Cache for Virtual Machines | Microsoft Community Hub

Today we are excited to release the public preview support for Azure Integrated HSM for AMD v7 Virtual Machines. As announced last year at Ignite, Azure...

techcommunity.microsoft.com

I never saw this coming: A Sysinternals tool, procdump, helping to improve the security of MacOS! www.macworld.com/article/2898...

Security expert details how a simple Microsoft tool led to the discovery of a serious macOS flaw

The hole was fixed by Apple in the macOS Sequoia 15.3 update.

macworld.com

I'm looking forward to Microsoft Ignite in San Francisco!

Rick Claus (RicksterCDN)@regularitguy.com · last yr.

Had a Walk N Talk with the CTO of Azure, @markrussinovich.bsky.social From cloud-native computing to live demos, Mark shares what he's excited about, what sessions he's leading, and even drops some pro tips for first-time attendees. #msIgnite #WalkNTalk #CloudNative #msITPro

Microsoft is advancing the state of the art across all aspects of silicon security. In this post I, together with Omar Khan and Bryan Kelly (NCSA), cover our advancements: azure.microsoft.com/en-us/blog/p...

Protecting Azure Infrastructure from silicon to systems | Microsoft Azure Blog

At Microsoft, secure design begins at the foundation of our computing stack—the silicon level—and extends through every layer of the cloud. Learn more.

azure.microsoft.com

In our latest "Scott and Mark Learn To" podcast, Scott and I have fun discussing our approaches to 1:1s, including with peers, people that report to us, and people we report to: www.youtube.com/watch?v=kWNs...

EPISODE 22 - Scott and Mark Learn To… What Makes Good 1-1s

YouTube video by Scott Hanselman

youtube.com

A question I often get from customers is "what's Microsoft's plan to mitigate the threat of quantum computers breaking cryptography". Here's a look at our Quantum Safe Program, which I help lead, and the timelines we've set for ourselves so our systems are ready: www.microsoft.com/en-us/securi...

Communications of the ACM (CACM) published our article, "The Price of Intelligence", which describes three key risks inherent in LLMs that enterprises must consider when designing and operating AI systems: hallucinations, jail breaks, and indirect prompt injection: cacm.acm.org/practice/the...

We've just launched Secure Future Initiative Patterns and Practices, a new set of repeatable, real-world security solutions based on how we protects our own infrastructure. From identity lateral movement to legacy systems, and CI/CD pipelines, this guidance is built to scale. aka.ms/SFI_Patterns...

Launching Microsoft's Secure Future Initiative patterns and practices | Microsoft Security Blog

Learn more about SFI patterns and practices: a new library of actionable guidance designed to help organizations implement security measures at scale.

aka.ms

Project Radius is the future of cloud native application modeling. Read why I believe that it in my Q&A with @marypcbuk.bsky.social

Mary Branscombe@marypcbuk.bsky.social · last yr.

Like Dapr and its predecessor OAM (which underpins Crossplane), Radius originated in @markrussinovich.bsky.social 's Office of the CTO so I asked him to explain why organizations need an application modelling platform and what Radius offers; @salaboy.com and @rstephens.me told me how Dapr fits in

Our USENIX ;login; article on Crescendo just dropped! We discovered what might be the most powerful blackbox jailbreak technique - Crescendo is undefeated against all frontier AI models in every harm domain we tested. I'm presenting at USENIX Security on August 14th. www.usenix.org/publications...

🚨 New open-source tool: RefChecker A tool that checks reference accuracy in academic papers. ✅ Parses PDFs, LaTeX, and text ✅ Catches broken DOIs, wrong authors, messed-up URLs ✅ Built with GitHub Copilot & Claude 🔗 github.com/markrussinov...

GitHub - markrussinovich/refchecker: A tool that validates academic paper references

A tool that validates academic paper references. Contribute to markrussinovich/refchecker development by creating an account on GitHub.

github.com

A preview of my RustConf keynote this September www.youtube.com/watch?v=TuJw...:

Developer Security Quick Fire Questions with Mark Russinovich and Scott Hanselman

YouTube video by Microsoft Developer

youtube.com

Scott and I have a great time in our latest podcast episode vibe coding a web site that analyzes our podcast recordings to show us who talks more...my suspicions were confirmed! www.youtube.com/watch?v=4tST...

We've made major enhancements to Azure virtual machine availability monitoring, including aggregated and individual health views, detailed impact and root cause reporting for disruptions, and trend analysis. Read more in my blog post: azure.microsoft.com/en-us/blog/p...

We've taken another step forward in Microsoft's adoption of confidential computing for our most critical workload by migrating the Windows licensing service into confidential virtual machines: techcommunity.microsoft.com/blog/azureco...

I love the show @scott.hanselman.com and @markrussinovich.bsky.social learn to. Slightly embarrassingly, I thought it was only available on YouTube and not as a podcast. When Mark literally referred to it as "a podcast" I had my revelation. Here's the links: shows.acast.com/scott-and-ma...

Scott & Mark Learn To...

shows.acast.com

What are the latest innovations coming in Azure? @markrussinovich.bsky.social talks on RunAs Radio at runasradio.com/Shows/Show/991 about some of the new hardware in the cloud, and how they helps with extreme optimization for specific workloads!

Latest Scott and Mark To podcast is out, this one on how we manage stress: www.youtube.com/watch?featur...

EPISODE 19 - How Do Executives at Microsoft Manage Their Stress?

YouTube video by Scott Hanselman

youtube.com

This makes no sense:

Just keynoted the Confidential Computing Summit! My talk on "Defining a Spectrum of Guarantees" proposes new terms ("On," "In," "Transparent" CC) to better describe data protection and drive us towards transparent confidential computing.