One compromised npm package, more than 100 million systems. I walk through how the attackers got in through Axios, step by step, from the poisoned release to the first foothold on a developer machine. Then the real question: how could we have stopped this inside a Microsoft environment? The right set of policies, awareness that actually sticks, and Defender with a unified SOC that connects the dots before the attacker does. You leave with a list of things to turn on tomorrow.

Target audience: IT admins, security engineers, consultants and MSPs working with Microsoft Defender and Microsoft 365. Also relevant for development teams.
Level: 200 to 300.
Duration: 45 or 60 minutes.
Language: English or Dutch.