Blue Security
Blue Security is a podcast for information security defenders, focusing on blue team practices. Hosted by Andy Jaw and Adam Brewer, it covers best practices, tools, and implementation guidance for enterprise security. The show is aimed at professionals responsible for defending networks and systems.
Episodes
Microsoft Digital Defense Report 2026
SummaryIn this episode, Andy and Adam discuss the 2026 Microsoft Digital Defense Report, focusing on the evolving threat landscape shaped by AI. They explore how AI is changing the speed of attacks, the challenges of vulnerability management, and the risks associated with AI workloads. The conversation also highlights the importance of governance and best practices for managing AI agents in cybers
Stop phishing tests, Microsoft's Humanist AI Code of Conduct
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into two significant topics in cybersecurity: the effectiveness of phishing tests and Microsoft's new Humanist AI Code of Conduct. They critically analyze the traditional approach to phishing tests, likening them to outdated fire drills that do not enhance security. The discussion emphasizes the need for
Why Your Cloud Region Is Now a Physical Attack Surface
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss two significant cybersecurity incidents: the emergence of AI API drain attacks and the implications of military strikes on AWS data centers. They explore how attackers can exploit API keys to run up costs without directly breaching networks and the lessons learned from AWS's experience with data loss due to dr
Anthropic Threat Intelligence Report
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Anthropic's latest threat intelligence report, highlighting the evolving landscape of cyber threats facilitated by AI technologies. They explore various harm areas, including cyber operations, influence operations, surveillance, and conventional weapons development, emphasizing how AI is democratizing s
LG TV's data collection and Crowdstrike Zero Day
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam celebrate six years of consistent podcasting, reflecting on their journey and the evolution of their roles in the tech industry. They delve into a significant controversy surrounding LG TVs, discussing privacy concerns related to data collection and microphone usage. The conversation transitions into smart home and IoT securi
LiteLLM Breach, an Entra Connect Deadline, and 153 Million Leaked IDs
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into significant cybersecurity topics, including the Light LLM breach, a supply chain attack that affected thousands of organizations, and an urgent reminder for Microsoft Entra Connect users to upgrade their systems. The discussion emphasizes the importance of understanding the origins of security breaches,
AI 101 - Understanding core AI terminology
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into the complexities of AI in cybersecurity, focusing on the adoption rates and understanding of various AI technologies. They discuss the differences between large language models (LLMs) and small language models (SLMs), the importance of APIs, and the role of harnesses and agents in executing AI tasks. The conversati
DEF CON Is Not Cooked; Why AI Won't Replace Cybersecurity
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the implications of AI on cybersecurity, particularly in light of recent comments from Jason Haddock regarding the future of the industry. They explore the notion that AI will not replace cybersecurity but rather enhance it by reducing the time needed to identify vulnerabilities. The conversation also delve
Evil Twins, AI Agents, and Cyber Privateers
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant cybersecurity topics, including an evil twin attack on a Delta flight, the emergence of fully autonomous cyber attacks, and a new policy allowing private companies to conduct offensive cyber operations against transnational criminal organizations. They explore the implications of these events on
Critical infrastructure hacks and rogue AI agents
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the recent cyberattacks on water systems in Minnesota, attributed to Iran-linked hackers. They explore the vulnerabilities of programmable logic controllers (PLCs) and the broader implications for operational technology (OT) security. The conversation delves into the differences between Iranian and Chinese
Hotel Wi-Fi Hijacks and Border Phone Searches
SummaryIn this episode of the Blue Security Podcast, host Andy Jaw and guest Carly Salmon discuss critical issues in data security, focusing on a recent hotel Wi-Fi hack that exploits DNS settings to capture sensitive information and the legal ramifications of digital privacy through the case of Sam Tulnik, who faces charges for allegedly destroying evidence on his phone during a border search. Th
MDASH in Prod, Intune Sync, OpenAI-Hugging Face Incident
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant developments in cybersecurity, including Microsoft's new AI vulnerability scanner, the long-awaited fix for Intune's sync button, and the implications of the Hugging Face and OpenAI incident. They explore the operationalization of AI in vulnerability discovery, the technical nuances of I
Identity Update: Passkeys by Default, Phone Transfers, Physical Key Security
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the upcoming transition to passkeys as the default method for multi-factor authentication (MFA) in Microsoft Entra ID. They explore the implications of this change, the importance of moving away from SMS and voice authentication, and best practices for organizations to prepare for this shift. The conversati
North Korean IT Worker Scam
SummaryIn this episode of the Blue Security Podcast, host Andy Jaw delves into the alarming rise of North Korean IT worker scams, exploring their historical context, operational tactics, and the financial implications for both the regime and unsuspecting American companies. The discussion highlights the vulnerabilities in the hiring process and offers practical mitigation strategies for organizati
Claude Fable, SharePoint RCE, and CISA's KEV list
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Andy's career transition from Microsoft to Zscaler, the return of the AI model Fable and its user experience, and a critical SharePoint vulnerability that has caught CISA's attention. They delve into the implications of these topics for security professionals and the importance of staying updated on
Helping or Hurting? - An Honest Conversation About AI
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer engage in a deep discussion about the implications of AI on society and the security industry. They explore whether AI is ultimately helping or hurting us, particularly in the context of job displacement and creation. The conversation delves into corporate strategies regarding AI investments, the financial implicat
Your MDM Admin Can Wipe Everything. Are You Protecting Them Like It?
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into the critical topic of Mobile Device Management (MDM) and the associated administrative rights. They discuss the risks posed by MDM admins, who often have significant control over organizational devices, and the need for robust security measures to protect against potential breaches. The conversation high
History Repeating - AI Export Controls and the Lessons We Never Learned
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer celebrate their 300th episode by discussing the recent developments surrounding Anthropic and its AI model, Fable Five. They delve into the historical context of export controls, the implications of government regulations on technology, and the ongoing legal challenges faced by Anthropic. The conversation highlight
What's new in Entra, Facebook privacy settings
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant updates in Microsoft's security landscape, including the shift to passwordless authentication, cross-tenant synchronization, and the convergence of sensitivity labels with security groups. They also delve into Azure role governance and the implications of Facebook's new camera roll setti
BitLocker bypass, Verizon DBIR report, & CISA key leak
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss critical cybersecurity topics, including newly discovered Windows Zero Days, insights from Verizon's latest Data Breach Investigations Report, and a significant credential leak at CISA. They emphasize the importance of vulnerability management, the evolving threat landscape, and best practices for secur
Control the Agents, Find the Bugs - Microsoft's AI Security Double Play
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss two significant topics: Agent 365, a new dashboard for monitoring AI agents in the Microsoft ecosystem, and MDash, a multi-model vulnerability scanner. They explore the importance of visibility and control over AI agents, the innovative licensing model for Agent 365, and the multi-model approach of MDash th
You Can't Patch Fast Enough: Exchange Zero-Day and Tycoon2FA Strike
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss two significant topics: Agent 365, a new dashboard for monitoring AI agents in the Microsoft ecosystem, and MDash, a multi-model vulnerability scanner. They explore the importance of visibility and control over AI agents, the innovative licensing model for Agent 365, and the multi-model approach of MDash th
You Can't Patch Fast Enough: Exchange Zero-Day and Tycoon2FA Strike
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss two significant topics: Agent 365, a new dashboard for monitoring AI agents in the Microsoft ecosystem, and MDash, a multi-model vulnerability scanner. They explore the importance of visibility and control over AI agents, the innovative licensing model for Agent 365, and the multi-model approach of MDash th
Lockdown Mode Success, Howler Cell, and Entra Conditional Access
SummaryThis episode covers Apple Lockdown Mode's effectiveness against spyware, the Phantom Device attack exploiting Azure AD, and best practices for securing device registration and conditional access policies.----------------------------------------------------YouTube Video Link: https://youtu.be/g68OMWYIc0k----------------------------------------------------Documentation: https://techcrunch
Lockdown Mode Success, Howler Cell, and Entra Conditional Access
SummaryThis episode covers Apple Lockdown Mode's effectiveness against spyware, the Phantom Device attack exploiting Azure AD, and best practices for securing device registration and conditional access policies.----------------------------------------------------YouTube Video Link: https://youtu.be/g68OMWYIc0k----------------------------------------------------Documentation: https://techcrunch
Copy Fail, Claude Security, and Microsoft's AI Defense Playboo
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant topics in cybersecurity, including the discovery of a critical Linux vulnerability known as Copy Fail, the introduction of Cloud Security in public beta, and Microsoft's comprehensive AI security strategy. They explore how AI is revolutionizing vulnerability scanning, the implications of the
Copy Fail, Claude Security, and Microsoft's AI Defense Playbook
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant topics in cybersecurity, including the discovery of a critical Linux vulnerability known as Copy Fail, the introduction of Cloud Security in public beta, and Microsoft's comprehensive AI security strategy. They explore how AI is revolutionizing vulnerability scanning, the implications of the
Apple-Signal Bug, NCSC recommends passkeys, Open Source debate
SummaryIn this episode, Andy and Adam discuss a recent vulnerability in the Signal messaging app that allowed the FBI to recover deleted messages from an iPhone due to a flaw in Apple's notification system. They emphasize the importance of user settings and the need for regular updates. The conversation then shifts to the UK National Cyber Security Centre's endorsement of passkeys as a pre
Apple-Signal Bug, NCSC recommends passkeys, Open Source debate
SummaryIn this episode, Andy and Adam discuss a recent vulnerability in the Signal messaging app that allowed the FBI to recover deleted messages from an iPhone due to a flaw in Apple's notification system. They emphasize the importance of user settings and the need for regular updates. The conversation then shifts to the UK National Cyber Security Centre's endorsement of passkeys as a pre
Ep 292 - NIST Taps Out, $21B Lost in cybercrime, and MDI Password Protection
SummaryIn this episode, Andy and Adam discuss significant changes in cybersecurity, focusing on NIST's new policy for handling CVEs, the alarming statistics from the FBI's 2025 Cybercrime Report, and the introduction of a new password protection feature in Defender for Identity. They explore the implications of these developments, including the increasing effectiveness of AI-driven scams a
NIST Taps Out, $21B Lost in cybercrime, and MDI Password Protection
SummaryIn this episode, Andy and Adam discuss significant changes in cybersecurity, focusing on NIST's new policy for handling CVEs, the alarming statistics from the FBI's 2025 Cybercrime Report, and the introduction of a new password protection feature in Defender for Identity. They explore the implications of these developments, including the increasing effectiveness of AI-driven scams a
Hack the Planet, Ban the Router: Your Weekly Dose of Cyber Chaos
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss the recent FCC ban on foreign-made routers, citing national security concerns and the implications for consumer cybersecurity. They explore the potential negative effects of the ban, including the risk of forcing consumers to use older, less secure devices. The conversation then shifts to the introduction of Claude My
Hack the Planet, Ban the Router: Your Weekly Dose of Cyber Chaos
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss the recent FCC ban on foreign-made routers, citing national security concerns and the implications for consumer cybersecurity. They explore the potential negative effects of the ban, including the risk of forcing consumers to use older, less secure devices. The conversation then shifts to the introduction of Claude My
Claude code leak and Axios NPM Supply Chain attack
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents, including a cloud code leak from Anthropic and a supply chain attack on the Axios NPM package. They explore the implications of these events for developers and organizations, emphasizing the need for caution when handling leaked code and the risks associated with supply chain vulne
Claude code leak and Axios NPM Supply Chain attack
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents, including a cloud code leak from Anthropic and a supply chain attack on the Axios NPM package. They explore the implications of these events for developers and organizations, emphasizing the need for caution when handling leaked code and the risks associated with supply chain vulne
Small Business Security from a MSP Perspective
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss various aspects of cybersecurity, particularly focusing on small business security challenges and the features available in Microsoft 365. They address a listener's email regarding the limitations of basic licensing for small businesses and explore the available alerts, security features, and compliance tools. The
Small Business Security from a MSP Perspective
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss various aspects of cybersecurity, particularly focusing on small business security challenges and the features available in Microsoft 365. They address a listener's email regarding the limitations of basic licensing for small businesses and explore the available alerts, security features, and compliance tools. The
Microsoft Frontier Suite (E7)
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss the newly announced E7 Frontier Suite from Microsoft, which consolidates various licensing options into a comprehensive package. They explore the features of Microsoft 365 Copilot, the importance of AI agents, and the components of the Entra Suite. The conversation also evaluates the pricing structure and target audie
Microsoft Frontier Suite (E7)
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss the newly announced E7 Frontier Suite from Microsoft, which consolidates various licensing options into a comprehensive package. They explore the features of Microsoft 365 Copilot, the importance of AI agents, and the components of the Entra Suite. The conversation also evaluates the pricing structure and target audie
Spies, Wipes, and AI Gripes
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant developments in AI ethics and cybersecurity. They delve into the legal battles between Anthropic and the US government, Microsoft's support for Anthropic, and the backlash against OpenAI's military contract. The conversation shifts to the misuse of a US cyber weapon, Karuna, and concludes with a c
Spies, Wipes, and AI Gripes
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant developments in AI ethics and cybersecurity. They delve into the legal battles between Anthropic and the US government, Microsoft's support for Anthropic, and the backlash against OpenAI's military contract. The conversation shifts to the misuse of a US cyber weapon, Karuna, and concludes with a c
Dial 'F' for Fraud: Uncovering IRSF
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into a significant surge in external ID charges experienced by a customer, leading to the discovery of an international revenue share fraud attack. They discuss the mechanics of this fraud, how it exploits telecommunication systems, and the importance of monitoring and mitigating such attacks. The conversation emphasize
Dial 'F' for Fraud: Uncovering IRSF
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into a significant surge in external ID charges experienced by a customer, leading to the discovery of an international revenue share fraud attack. They discuss the mechanics of this fraud, how it exploits telecommunication systems, and the importance of monitoring and mitigating such attacks. The conversation emphasize
Guardrails or Going Off the Rails: Anthropic vs US Government
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into the recent tensions between the U.S. government and the private tech sector regarding artificial intelligence. They discuss the clash between Anthropic and the Department of Defense over AI safety guardrails, the implications of designating Anthropic as a supply chain risk, and the broader impact on the defense sec
Guardrails or Going Off the Rails: Anthropic vs US Government
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into the recent tensions between the U.S. government and the private tech sector regarding artificial intelligence. They discuss the clash between Anthropic and the Department of Defense over AI safety guardrails, the implications of designating Anthropic as a supply chain risk, and the broader impact on the defense sec
ClawdBot, MoltBot, and OpenClaw
SummaryIn this episode, Adam and Andy explore the security challenges and risks associated with OpenClaw, an AI assistant with extensive system access, highlighting recent incidents, vulnerabilities, and best practices for security in AI development.----------------------------------------------------YouTube Video Link: https://youtu.be/TGAbhPQa9iw--------------------------------------------------
ClawdBot, MoltBot, and OpenClaw
SummaryIn this episode, Adam and Andy explore the security challenges and risks associated with OpenClaw, an AI assistant with extensive system access, highlighting recent incidents, vulnerabilities, and best practices for security in AI development.----------------------------------------------------YouTube Video Link: https://youtu.be/TGAbhPQa9iw--------------------------------------------------
Notepad++ supply chain compromise and 7-Zip malware
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents involving Notepad++ and 7-Zip, highlighting the vulnerabilities in open-source software and the importance of enterprise software management. They emphasize the need for ad blockers, the challenges of identifying legitimate software downloads, and the necessity of implementing robus
Notepad++ supply chain compromise and 7-Zip malware
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents involving Notepad++ and 7-Zip, highlighting the vulnerabilities in open-source software and the importance of enterprise software management. They emphasize the need for ad blockers, the challenges of identifying legitimate software downloads, and the necessity of implementing robus
Do we need phishing sims & Upcoming Intune changes
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss the evolving landscape of cybersecurity training, particularly in light of generative AI and the limitations of traditional phishing simulations. They argue that expecting employees to outsmart sophisticated cybercriminals is unrealistic and emphasize the need for a robust security architecture that assumes clicks wil
Do we need phishing sims & Upcoming Intune changes
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss the evolving landscape of cybersecurity training, particularly in light of generative AI and the limitations of traditional phishing simulations. They argue that expecting employees to outsmart sophisticated cybercriminals is unrealistic and emphasize the need for a robust security architecture that assumes clicks wil
Smartphone Privacy, Know Your Rights
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the intersection of cybersecurity, user rights, and the evolving landscape of threats. They explore the importance of understanding the rights individuals have when interacting with law enforcement. The conversation also touches on one's rights at the border. Throughout the episode, the hosts emphasize the
Smartphone Privacy, Know Your Rights
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the intersection of cybersecurity, user rights, and the evolving landscape of threats. They explore the importance of understanding the rights individuals have when interacting with law enforcement. The conversation also touches on one's rights at the border. Throughout the episode, the hosts emphasize the
BSP Maturity Model - Data Security with guest Amren Gill
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam, along with expert Amren Gill, delve into the critical topic of data security. They discuss the importance of data classification and identification, the challenges of data loss prevention, and the significance of lifecycle management in maintaining data integrity. The conversation emphasizes the need for a strong security cu
BSP Maturity Model - Data Security with guest Amren Gill
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam, along with expert Amren Gill, delve into the critical topic of data security. They discuss the importance of data classification and identification, the challenges of data loss prevention, and the significance of lifecycle management in maintaining data integrity. The conversation emphasizes the need for a strong security cu
WEF Security Survey, AI Browsers, NTLMv1
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into the latest AI security concerns facing leaders today. They discuss a World Economic Forum report highlighting the divergence in priorities between CEOs and CISOs, with CEOs focusing on cyber-enabled fraud and AI vulnerabilities, while CISOs are more concerned with ransomware and supply chain resilience.
LinkedIn job scams and Zero-Click Gemini Vulnerability
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss the challenges faced in the job market, particularly the rise of scams on platforms like LinkedIn. They emphasize the importance of verifying recruiters and job postings to avoid falling victim to scams. The conversation then shifts to the vulnerabilities associated with AI tools, particularly a recent incident involv
RC4 Deprecated, Are passkeys still an issue?
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant updates in Microsoft's security protocols, particularly regarding Kerbroasting and the transition from RC4 to AES encryption. They delve into the challenges surrounding the adoption of passkeys, emphasizing the need for user education and the importance of credential managers. The conversation highligh
Our 2026 Predictions
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss key cybersecurity predictions for 2026, focusing on the rise of agentic AI, quantum computing threats, deepfakes, the expanding attack surface due to IoT, the evolution of cybercrime into corporate structures, and the necessity for cybersecurity to be viewed as a strategic business pillar. They emphasize the importanc
Introducing the BSP Maturity Model for Identity
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss the Security Maturity Model, focusing on identity security. They explore the current state of security practices, identifying areas where organizations may be behind the curve, on track, or ahead of the curve in their security measures. Key topics include the importance of multi-factor authentication (MFA), the transi
Microsoft Bug Bounty, CISA hiring surge, US goes offensive in cyber ops, OWASP Top 10
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant updates in cybersecurity, including Microsoft's overhaul of its bug bounty program, CISA's hiring strategy amidst workforce challenges, the US's shift towards a more aggressive cyber strategy, and insights from the updated OWASP Top 10 vulnerabilities. The conversation emphasizes the importance
Salt Typhoon - The Growing China Threat
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into the growing cybersecurity threat posed by the Chinese state-sponsored group, Salt Typhoon. They discuss the group's tactics, motivations, and the implications for global security. The conversation highlights China's strategic focus on economic power as a means of national security, their long-term approach
Chat app vulnerabilities, Use AI or else
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss vulnerabilities in popular chat applications, particularly focusing on Line and WhatsApp. They explore the implications of these vulnerabilities for user privacy and security, emphasizing the importance of API security and rate limiting. The conversation then shifts to the integration of AI in the workplace, highlight
2025 Microsoft Ignite Recap for Security
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss the major announcements from Microsoft Ignite, focusing on the introduction of Security Copilot for Microsoft 365 E5 customers, innovations in identity management through Entra, and the integration of Defender for Cloud with GitHub. They also explore the new capabilities in Intune for remote management of Windows devi
Unencrypted Satellite Data, China AI Cyberattack
SummaryIn this episode of the Blue Security Podcast, hosts Adam Brewer and Andy discuss critical issues surrounding satellite security, particularly the vulnerabilities of unencrypted communications. They explore a recent study revealing how researchers intercepted sensitive data from various satellite communications, highlighting the need for encryption. The conversation shifts to the implication
How Face ID Works, Least Private Browser, Ring and Flock
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into the intricate relationship between privacy and security, particularly focusing on biometric data and the transition to passwordless technology. They discuss the security implications of various biometric methods, the privacy risks associated with popular web browsers like Chrome, and explore alternatives that prior
Microsoft Digital Defense Report 2025
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Microsoft's Digital Defense Report for 2025. The conversation delves into the critical issues surrounding identity attacks, particularly focusing on the vulnerabilities associated with weak passwords. Andy highlights the prevalence of password spraying in identity attacks and discusses the ClickFix soci
F5 Breached, Windows 10 EOL, AWS Outage
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant recent cybersecurity events, including the F5 breach attributed to state-backed actors, the implications of Windows 10 reaching end of life, and the risks associated with outdated mobile operating systems. They also explore the geopolitical context of cybersecurity threats from China and the les
What's new in Microsoft Sentinel
SummaryIn this episode, Andy Jaw and Adam Brewer discuss the latest updates in Microsoft Sentinel, focusing on the new features such as the Sentinel Data Lake, Sentinel Graph, and the MCP server. They explore how these innovations enhance security operations, improve data management, and leverage AI for better threat detection and response. The conversation emphasizes the importance of cost-effect
WhatsApp banned; Discord, TransUnion, Jaguar-Land Rover hacked
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss various topics related to cybersecurity, including the security implications of WhatsApp, the challenges of age verification laws, the recent TransUnion data breach, and the significant cyber attack on Jaguar Land Rover. They emphasize the importance of strong cybersecurity measures, the risks associated wi
iPhone MIE, Microsoft - Israel MOD, npm supply chain attacks
SummaryIn this episode, hosts Andy Jaw and Adam Brewer discuss the newly announced iPhone 17 and its enhanced security features, particularly the memory integrity enforcement that aims to protect user data from spyware. They also delve into Microsoft's response to allegations regarding the use of Azure by the Israeli Defense Force for surveillance purposes, emphasizing the company's commit
Kerberoasting in 2025
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into the topic of Kerberosting, a known attack method that exploits weaknesses in the Kerberos authentication protocol, particularly focusing on the vulnerabilities associated with RC4 encryption. They discuss a recent letter from Senator Ron Wyden addressing the implications of these vulnerabilities in the c
Advanced Data Protection with Special Guest Amren Gill
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam celebrate their five-year anniversary with guest Amren Gill, a data security solutions engineer at Microsoft. They delve into the complexities of data protection, focusing on Microsoft Purview's capabilities, including data classification, data loss prevention (DLP), and advanced data protection features. The conversation
Entra News
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the latest developments in Microsoft security technologies, particularly focusing on Entra and its features like Continuous Access Evaluation (CAE) and the integration of threat intelligence into the Global Secure Access (GSA) platform. They reflect on their journey over the past five years of podcasting, e
FUD and Passkeys
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into the concept of FUD (Fear, Uncertainty, and Doubt) prevalent in the cybersecurity industry. They discuss the implications of sensationalized reporting, particularly around Windows Hello for Business vulnerabilities and the importance of adopting fish resistant multi-factor authentication (MFA). The conversation also
Microsoft Licensing Overview - Part 3 - Niche Situations and Azure
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into the complexities of Microsoft licensing, focusing on device-based versus user-based licensing, the nuances of shared mailboxes, and the implications of mixing E3 and E5 licenses. They also explore Azure billing models and the costs associated with Security Copilot, providing insights into how organizatio
Microsoft Licensing Overview - Part 2
SummaryThe hosts, Andy and Adam, delve into the nuances of licensing models, particularly focusing on the differences between frontline and information worker licenses. They explore the F1, F3, and F5 licensing models, highlighting key differences such as access to desktop applications and mailbox sizes. The episode also covers the integration of AI tools like M365 Copilot and Security Copilot, an
Microsoft Security Licensing Part 1
SummaryHosts Andy and Adam discuss the structure of enterprise agreements, the differences between Office 365 and Microsoft 365, and the transition from consumer-focused to enterprise-focused offerings. They explain the historical context of Microsoft's licensing evolution, the role of enterprise agreements, and the introduction of the Microsoft Customer Agreement for Enterprise (MCAE). The ep
Shadow AI is already happening -- now what?
SummaryIn this episode, Adam and Andy discuss various topics including Instagram's location sharing capabilities and the implications of AI in the workplace. They explore the challenges organizations face with AI adoption, the need for clear policies, and the importance of data security in protecting sensitive information. The conversation emphasizes the necessity for leadership to adapt to te
Palo Alto acquires Cyberark, Sentinel News, MDTI is going to be FREE!
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant developments in the cybersecurity landscape, including Palo Alto's acquisition of CyberArk, the introduction of Microsoft Sentinel's Data Lake feature, and the integration of Defender Threat Intelligence into existing Microsoft security solutions. They emphasize the importance of a platform approac
Recommended
The Church of What's Happening Now: The New Testament
Busted Open
Deadline: White House
Crickets Corner
History of the Earthquake and Fire in San Francisco
Fox news
K-Drama Obsessed Mamas | Beyond “Just One More Episode!”
True Crime Classics
The Healer Revolution
Becoming: HER with Nikki Spoelstra
Booked, Blonde & Busy w/ Olivia Ponton
McKinsey on Consumer and Retail
