Episode
Think Like an Attacker: Microsoft Security Exposure Management with Uros Babic [MVP-MCT]
- Published
- Jul 2, 2026
- Duration seconds
- 4198
- Processing state
not_requested
Actions
POST https://stenobird.com/v1/public/podcasts/m365-fm-modern-work-security-and-productivity-with-microsoft-365-7311214/episodes/think-like-an-attacker-microsoft-security-exposure-management-with-uros-babic-mvp-mct/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365-7311214/think-like-an-attacker-microsoft-security-exposure-management-with-uros-babic-mvp-mct.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
Traditional cybersecurity focuses on vulnerabilities, alerts, and dashboards. Attackers don't. They look for opportunities, weak identities, exposed cloud resources, excessive permissions, forgotten endpoints, and misconfigurations they can chain together into a successful attack. In this episode of the M365 FM Podcast, host Mirko Peters takes a unique approach by stepping into the role of the attacker while Microsoft Security MVP and Microsoft Certified Trainer Uros Babic defends a modern Microsoft environment using Microsoft Security Exposure Management, Microsoft Defender XDR, Microsoft Sentinel, Security Copilot, and Zero Trust principles. Instead of discussing security theory, this episode follows a realistic attack scenario from reconnaissance and phishing to privilege escalation, lateral movement, ransomware, and data exfiltration. Along the way, Uros explains how organizations can stop attackers before they reach critical assets by focusing on exposure rather than simply fixing vulnerabilities. The discussion demonstrates why modern security operations are shifting from reactive incident response to proactive risk reduction powered by Microsoft's latest security technologies. THINKING LIKE AN ATTACKER The episode begins with one fundamental mindset shift: attackers don't see security dashboards or compliance reports—they see attack paths. Uros explains why organizations should stop asking "How many vulnerabilities do we have?" and instead ask "Which attack path would an attacker exploit first?" Topics include: Social engineering Phishing attacks Credential theft Privilege escalation Lateral movement Ransomware Data exfiltration Insider threats Supply chain attacks Cloud misconfigurations Understanding how attackers think is becoming one of the most valuable ski…