A twice-monthly podcast dedicated to all things relating to Security, Privacy, Compliance and Reliability on the Microsoft Cloud Platform. Hosted by Microsoft security experts, Michael Howard, Sarah Young, Gladys Rodriguez and Mark Simos. https://azsecuritypodcast.net/ ©2020-2023 Michael Howard, Sarah Young, Gladys Rodriquez, and Mark Simos.
…
continue reading
1
Episode 96: Cloud Native Applications Protection Platform (CNAPP)
21:23
21:23
Play later
Play later
Lists
Like
Liked
21:23
In this episode Michael, Sarah, and Mark talk with guest (and good friend of the podcast) Yuri Diogenes about CNAPP - Cloud Native Application Protection Platform and announce the release of a CNAPP e-book.
…
continue reading
In this episode Michael, Sarah and Mark talk with guest Sherrod DeGrippo, Director of Threat Intelligence Strategy at Microsoft about the current state of Threat Intelligence. We also discuss Azure Security news about Tampa BSides, Virtual Networks, Azure Database for MySQL and PostgreSQL, and SQL Server on Linux. The Microsoft Azure Security Podca…
…
continue reading
In this episode Michael, Sarah and Mark talk with guest Ryan Munsch about the newly released Copilot for Security. We also discuss Azure Security news about Azure SQL DB, SSMS 20, Change Actor, Copilot for Azure SQL DB, Azure Container Apps, AI Prompt Shields, AI Groundedness Detection and BlueHat India and Israel. New tab (azsecuritypodcast.net)…
…
continue reading
1
Episode 93: Continuous Security Development Lifecycle
39:12
39:12
Play later
Play later
Lists
Like
Liked
39:12
In this episode Michael, Sarah, and Mark talk with guests Tony Rice and David Ornstein about insights into the Continuous SDL (Security Development Lifecycle). We also discussed Azure Security news about Azure Key Vault, Cloud PKI, OAuth2, updated SQL Server password verifiers, Memory Safety and Azure SQL DB. The Microsoft Azure Security Podcast (a…
…
continue reading
1
Episode 92: Global Azure is soon, sign up and give a security presentation!
42:07
42:07
Play later
Play later
Lists
Like
Liked
42:07
In this episode Michael and Sarah talk to Martin Abbott about the Global Azure event that starts soon, https://globalazure.net/. We talk about how to successfully fill out a Call for Papers (CFP) so YOU can present to a global audience about security topics that interest you. We also cover security news SQL Always Encrypted, SymCrypt and Rust, SQL …
…
continue reading
In this episode, Michael talks with Rigel Carlson from the Chaos Studio development team about Chaos Studio through a security lens. Michael also discusses news about Midnight Blizzard and \has some advice about using Azure's DefaultAzureCredential() The Microsoft Azure Security Podcast (azsecuritypodcast.net)…
…
continue reading
This is a MUST LISTEN episode for anyone involved in products using AI, or for people who want to learn some of the latest attacks against large language models. Make sure you peruse the exhaustive list of AI security links at The Microsoft Azure Security Podcast (azsecuritypodcast.net), We cover news about Azure SQL DB, Trusted VMs, NetApp Files, …
…
continue reading
In this episode we look back at what stood out for each of us and what we go up to. We also cover something not security-related, but of interest to all your geeks out there - EQ vs IQ. So make sure you stay until the end!
…
continue reading
1
Episode 88: Securing SQL Databases though the eyes of an attacker
45:53
45:53
Play later
Play later
Lists
Like
Liked
45:53
In this episode Michael talks with colleagues in the Azure Data Platform Security Team, Sharath Unni and Raul Garcia about securing Azure SQL DB, SQL MI and SQL Server through the eyes of an attacker.
…
continue reading
1
Episode 87: Advances in Always Encrypted and Transparent Data Encryption
21:07
21:07
Play later
Play later
Lists
Like
Liked
21:07
In this episode, Michael talks with his colleagues Pieter Vanhove and Mirek Sztajno about updates to Always Encrypted and Transparent Data Encryption in SQL Server and Azure SQL DB.
…
continue reading
1
Episode 86: Zero Trust Playbook Series Zero Trust Overview and Playbook Introduction
34:20
34:20
Play later
Play later
Lists
Like
Liked
34:20
In this episode Michael talks with guest Nikhil Kumar and our own Mark Simos about a new book they have co-authored named "Zero Trust Playbook Series Zero Trust Overview and Playbook Introduction: Actionable Guidance for Business, Security, and Technology Leaders and Practitioners."
…
continue reading
In this episode Michael and Sarah talk with guest Madeline Eckert about Security Bug Bounties.We also discuss Azure Security news about SQL Server 2022, Azure certificate changes, TLS 1.0 and 1.1 deprecation, GitHub security scanning, Ransomeware defenses, Zero Trust and more.; and by 'more' we mean lock-picking!…
…
continue reading
In this episode Michael, Sarah, Gladys, and Mark talk with guest Roberto Rodriguez about attack simulation, Cloud Katana, and AI.We also discuss Azure Security news about Azure SQL DB, Azure Key Vault, Cosmos DB, Trusted Launch VMs, Azure Artifacts, Zero Trust, Windows and TLS and Entra ID.
…
continue reading
1
Episode 83: PowerShell Automation and Scripting for Cybersecurity
36:48
36:48
Play later
Play later
Lists
Like
Liked
36:48
In this episode Michael and Sarah with guest Miriam Wiesner about her new book, "PowerShell Automation and Scripting for Cybersecurity" which comes out soon. We also discussed Azure Security news about: Azure SQL DB Always Encrypted improvements, Azure SQL Managed Instance, App Gateway for Containers and Bring your own Key for AKS Ephemeral Disks.…
…
continue reading
This week Michael and Mark talk to Microsoft Security MVP Truls Dahlsveen about his thoughts on Modern Security Strategy. It's a fascinating and practical discussion! We also cover security news about Application Gateway TLS policy, Defender for IoT and some new documentation from the OpenGroup about Zero Trust Commandments.…
…
continue reading
1
Episode 81: Audit logging in Azure SQL Database
26:33
26:33
Play later
Play later
Lists
Like
Liked
26:33
In this special episode Michael talks to his colleague Sravani Saluru about how to configure, monitor and manage audit logging in Azure SQL Database. She also shares some inside hints and tips!
…
continue reading
In this episode Michael and Sarah talk with guest Matt Zorich from the Microsoft Incident Response team. We also cover the latest Azure security news about Azure's Web Application Firewall and Azure Monitor RBAC.
…
continue reading
1
Episode 79: Threat Intelligence with MSTICPy
28:10
28:10
Play later
Play later
Lists
Like
Liked
28:10
In this episode, Michael and Sarah talk to Thomas Roccia about Threat Intelligence with MSTICPy. We also cover security news about Azure Files SMB, App Gateway, Event Hubs and Linux Containers.
…
continue reading
1
Episode 78: Entra Permissions Management updates
32:13
32:13
Play later
Play later
Lists
Like
Liked
32:13
In this episode Michael and Gladys talk with guests Marcelo di lorio and Neil Walker about all the latest news in Entra Permissions Management.We also cover the latest Azure security news about Microsoft Build, Confidential Computing, Key Vault, SQL MI, and Azure Content Safety and more.
…
continue reading
1
Episode 77: Securing Infrastructure as Code (IaC)
40:57
40:57
Play later
Play later
Lists
Like
Liked
40:57
This week, Michael, Mark and Gladys talk to Anthony Shaw about some of the best practices and tooling for securing Infrastructure as Code (IaC) solutions. Sarah is away in Singapore, presenting at BlackHat.We also cover security news about DDoS, Cosmos DB, Microsoft Defender for APIs, Load Balancer, Zero Trust and discovering Internet-facing device…
…
continue reading
1
Episode 76: Microsoft Security Research Insights
26:42
26:42
Play later
Play later
Lists
Like
Liked
26:42
In this episode Michael, Sarah, and Mark talk with guest Negar Shabab. We also discuss Azure Security news about new Confidential Computing VMs, SQL Server, T-SQL Parsing, Auditing in Azure SQL DB, Sentinel and more. Make sure you go to The Microsoft Azure Security Podcast (azsecuritypodcast.net), because Mark ordered pizza during the recording.…
…
continue reading
1
Episode 75: What's new in Microsoft Defender for Cloud
36:02
36:02
Play later
Play later
Lists
Like
Liked
36:02
In this episode Michael, Sarah, Gladys, and Mark talk with a good friend of the Podcast, Yuri Diogenes, about the latest Microsoft Defender for Cloud news.We also discuss Azure Security news about Trusted VM Launch, Chaos Studio, Azure SQL DB, DDoS protection, Confidential Containers, Firewall and more.…
…
continue reading
Michael and Mark talk to Kemley Nieva from the Azure Governance team about some of the recent updates and improvements to Azure Policy. We also cover the latest Azure security news covering Microsoft Security Copilot, Azure Functions, SQL Managed Instance, Azure Backup, Ephemeral OS disks, Azure Cache for Redis, Azure SQL Database, Azure Monitor, A…
…
continue reading
1
Episode 73: Microsoft Defender for Cloud as Code
27:42
27:42
Play later
Play later
Lists
Like
Liked
27:42
In this episode Michael and Gladys talk with guests Sean Wesonga and Bojan Magusic about using Infrastructure as Code (IaC) with Microsoft Defender for Cloud. We also discuss Azure Security news about new Azure SQL Database migration abilities for authentication and Transparent Data Encryption (TDE).…
…
continue reading
1
Episode 72: What's top of mind for the hosts and career advice!
1:01:25
1:01:25
Play later
Play later
Lists
Like
Liked
1:01:25
In this episode Michael, Sarah, Gladys and Mark interview each other! The Podcast is almost three years old, and things have changed for each of us, so we thought we'd re-introduce ourselves, reflect, give career advice, and talk about what's top of mind for each of us! We also discuss Azure Security news about SQL Server and Azure SQL DB, MFA and …
…
continue reading
1
Episode 71: Azure SQL Database and Always Encrypted using Virtualization-Based Security Enclaves
28:13
28:13
Play later
Play later
Lists
Like
Liked
28:13
In this special episode, Michael sits down with Pieter Vanhove about a new addition to the SQL Server 'Always Encrypted' family. The new addition, Virtualization-Based Security Enclaves (VBS), is now in Preview and allows for more scalability and lower cost when using secure enclaves compared to the current SGX-based enclaves.…
…
continue reading
In this episode Michael and Sarah talk with guests Beau Faull and Lou Mercuri about some new features and updated naming in Microsoft Purview. Beau and Lou are also co-hosts of the Coast2Coast Podcast on YouTube. We also discuss Azure Security news about Trusted Boot VMs, Sentinel and Defender for Cloud.…
…
continue reading
1
Episode 69: Secured Supply Chain and Software Bill of Materials (SBOM)
27:20
27:20
Play later
Play later
Lists
Like
Liked
27:20
In this episode, Michael and Mark talk to Adrian Diglio about Software Bill of Materials and its role in helping secure the software supply chain. We also have news items about SQL Server, Azure SQL DB, Azure Database for PostgreSQL, Azure Database for MySQL and Application Secure Groups and Private Endpoints. Mark goes over MCRA, Immutable Laws of…
…
continue reading
Michael sits down with Ajay Jagannathan who is the Principal Group PM Manager for SQL Server. Michael also covers a couple of SQL Server related news items.
…
continue reading
Michael and Sarah talk to Bronwyn Mercer from Microsoft Australia about Privileged Access as well as some ideas and processes to help you succeed. Also, the latest security news about Managed HSM, Defender for DevOps, TLS and ARM, SQL Server 2022, Application Gateway. Finally, 'Designing and Developing Secure Azure Solutions' is now available. http…
…
continue reading
In this episode Michael, Sarah and Mark talk with guest Joey Snow about Workload Identities in Azure. We also chat about least privilege and privileged accounts in general. Finally, the latest Azure Security news about: Azure Front Door, Log Analytics, Web Application Firewall and AKS SSH keys.
…
continue reading
1
Microsoft Defender for Threat Intelligence
38:14
38:14
Play later
Play later
Lists
Like
Liked
38:14
EDIT: Nov 11th, there was an error at around 27m; Gladys and Rijuta were talking over each other. In this episode Michael, Sarah, Gladys and Mark talk with guests Rijuta Kapoor and Brandon about Microsoft Defender for Threat Intelligence. We also discuss Azure Security news about Azure Service Bus and TLS, PostgreSQL, VMs, SQL Server and Confidenti…
…
continue reading
1
The SQL Server Permission Model Explained
46:15
46:15
Play later
Play later
Lists
Like
Liked
46:15
In this special, out of band episode, Michael talks to Andreas Wolter about the SQL Server and Azure SQL Database permission model. To many, the model is a mystery, but Andreas explains how it works as Michael poses security challenges.
…
continue reading
In this episode we talk to Nick Wryter about Microsoft Entra Permissions Management. We also cover the latest security news about Azure Firewall, Azure Database for MySQL, NetApp files, ADLS Gen2, AKS, Conditional Access and Identity Federation.
…
continue reading
1
Microsoft Defender for Endpoint Tamper Protection
29:15
29:15
Play later
Play later
Lists
Like
Liked
29:15
In this episode, Josh Bregman discusses a critically important feature in MDE - Tamper Protection which helps prevent unwanted changes to your security and essential functions. We also cover the latest security news about Synapse SQL, Service Bus, Storage, Redis, Azure SQL, MySQL, AKS, Managed Disks and Microsoft Defender.…
…
continue reading
In this episode we speak to Elizabeth Stephens about practices and philosophies for protecting OT. We also cover news about SQL MI, Private Endpoints, Load Testing, TLS 1.3, AKS and Confidential VMs and Azur Firewall. Also, this is the first episode to use the phrase "things that are not supposed to blow up!"…
…
continue reading
1
Microsoft Defender for Cloud - AWS and GCP
45:02
45:02
Play later
Play later
Lists
Like
Liked
45:02
In this episode, we talk to Safeena about Begun about Microsoft Defender for Cloud to monitor multi-cloud environments including Azure, on-prem, AWS and GCP. We also talk about changes coming to Azure's root CA certificates, Microsoft Entra and more.
…
continue reading
1
Chief Information Security Officer (CISO) Workshop
37:03
37:03
Play later
Play later
Lists
Like
Liked
37:03
In this episode Michael and Sarah talk to Mark about the newly version of the CISO Workshop. We also have news about Confidential Ledger, Gateway Load Balancer (new!), Azure Database for MySQL and Trust Launch.
…
continue reading
1
Innovations in Azure Confidential Computing
29:28
29:28
Play later
Play later
Lists
Like
Liked
29:28
In this episode, Michael talks to Run Cai and Vikas Bhatia about some of the latest Confidential Computing services available on Azure including new Confidential VMs from AMD.
…
continue reading
In this episode, Michael, Sarah and Mark talk to Roey Ben Chaim about Microsoft Sentinel Content Hub. We also cover the latest security news about Exchange Online, Microsoft Entra Permissions Manager, MSTICPy, Purview DLP, Azure Monitor, Backup and App Insights.
…
continue reading
1
Advanced Threat Hunting with Microsoft 365 Defender
21:17
21:17
Play later
Play later
Lists
Like
Liked
21:17
Michael sits down with Michael Melone to discuss hunting for adversaries using Microsoft 365 Defender's Advanced hunting capabilities. Azure security news this week includes Azure Advisor for MySQL, using custom CAs with AKS, App Gateway Private Link, continuous backup in Cosmos DB, and API Management CSP and CORS support.…
…
continue reading
Michael and Sara talk to Matt Soseman about his take on practical Zero Trust and Michael goes on a rant about Zero Trust's Assume Breach pillar. We also cover Azure news about Azure SQL DB, Container Apps, Bastion, Sentinel and Microsoft Entra.
…
continue reading
1
Azure SQL Managed Instance Windows Authentication
27:48
27:48
Play later
Play later
Lists
Like
Liked
27:48
In this episode Michael talks to Sravani Saluru who is a Senior Program Manager in the Azure Data Platform, about Azure SQL Managed Instance and Windows authentication support which is in preview. We talk about where SQL MI fits in the SQL family, as well as how to configure SQL MI so your one-prem client can access SQL MI in Azure seamlessly.…
…
continue reading
In this special episode Sarah and Michael talk to Pieter Vanhove about Azure SQL Database Ledger. Ledger is a new feature built into Azure SQL DB and SQL Server 2022. that helps protect data from tampering from attackers or high-privileged users, including database administrators (DBAs), system administrators, and cloud administrators.…
…
continue reading
In this episode we talk to Shay Amar about Microsoft Defender for Containers, we go into the weeds in places! Also, Azure security news about Confidential Compute VMs, Azure Arc, Sentinel and Ransomware. Michael and Sarah also discuss their experiences with the AZ-500 exam refresh.
…
continue reading
In this episode we speak to Thomas Weiss from the Azure Data team about new security capabilities in CosmosDB, specifically Always Encrypted and data-plane RBAC. We also have security news about Confidential Compute, Azure Data Explorer, Load Balancer, DNS Reservations, ZLoader malware, Azure Monitor, MSTICPy and NIST SP 800-40.…
…
continue reading
1
Microsoft Cybersecurity Reference Architectures
47:03
47:03
Play later
Play later
Lists
Like
Liked
47:03
In this special episode, Mark chats about the MCRA as well as the Cloud Adoption Framework (CAF), and various related topics. We shied away from the news this week to focus on Mark's topic, but Michael couldn't resist talking about the fact that CosmosDB now supports Always Encrypted.
…
continue reading
Gladys and Michael talk to Jason Zann, VP, Head of Platform about RiskIQ, a recent Microsoft acquisition. We also cover the latest security news about API Management, Azure Monitor, Defender for Cloud, Identity Protection and Sensitivity labels.
…
continue reading
We chat with Al Eardley about Compliance, Security and Microsoft Compliance Manager, as well as news about CosmosDB, Azure Load Testing, CodeQL, Azure Active Directory, Zero Trust, Sentinel and new cyber blog from Microsoft.
…
continue reading
We talk to Chris Hallum about all things Microsoft Defender for IoT. He also discusses IoT security in detail, as well as some new features on the horizon. Also, we cover the news for Microsoft Sentinel, Azure Active Directory, Azure SQL DB, new Azure Learning resources, Azure Monitor and Payment HSM.…
…
continue reading