The Azure Security Podcast  

In this episode Michael, Sarah and Mark talk with guest Ryan Munsch  ( ) about the newly released Copilot for Security.
We also discuss Azure Security news about Azure SQL DB, SSMS 20, Change Actor, Copilot for Azure SQL DB, Azure Container Apps, AI Prompt Shields, AI Groundedness Detection and BlueHat India and Israel.

Links

• BlueHat Israel
• Application to Attend BlueHat India, May 16-17, 2024
• Intro to Microsoft Copilot for Security webinar series
• The Shift from Models to Compound AI Systems

In this episode Michael, Sarah and Mark talk with guests Tony Rice  ( ) and David Ornstein about advances in Continuous SDL (Security Development Lifecycle).
We also discuss Azure Security news about Azure Key Vault, Cloud PKI, OAuth2, updated SQL Server password verifiers, Memory Safety and Azure SQL DB.

Links

• RSA Conference: You're Doing It Wrong! Common Security Anti Patterns
• BSides Tampa Agenda
• BSides Tampa Training & Workshops (Friday April 5th)
• C++ creator rebuts White House warning

In this episode Michael and Sarah talk with guest Martin Abbott  ( ) about the Global Azure event that starts soon, https://globalazure.net/. We talk about how to successfully fill out a Call for Papers (CFP) so YOU can present to a global audience about security topics that interest you.
We also cover security news AI security, SQL Always Encrypted, SymCrypt and Rust, SQL Security Fundamentals, and free Security 101 material.

Links

• Global Azure 2024
• Global Azure Blog
• Global Azure Communities
• Copilot L33t Sp34k

In this episode Michael talks with guest Rigel Carlson   ( ) about Azure Chaos Studio.
We also discuss Azure Security news about Midnight Blizzard and Michael has some advice about using Azure's DefaultAzureCredential()

Links

• Conf42 Chaos Engineering 2023 - Online
• PRINCIPLES OF CHAOS ENGINEERING
• Security Chaos Engineering

In this episode Michael, Sarah and Mark talk with guests Dr. Amanda Minnich ( ) and Pete Bryan ( ) about AI Red Teaming.
We also discuss Azure Security news about Azure SQL DB, Trusted VMs, NetApp Files, Azure Load Testing and Front Door. Mark covers further details about Zero Trust and the CISO Workshop.

Links

• MITRE ATLAS™ (Adversarial Threat Landscape for Artificial-Intelligence Systems)
• Microsoft’s AI Red Team Has Already Made the Case for Itself
• Researchers Discover New Vulnerability in Large Language Models
• Embrace The Red
• Prompt Engineering Guide
• NIST Identifies Types of Cyberattacks That Manipulate Behavior of AI Systems
• Tree of Attacks: Jailbreaking Black-Box LLMs Automatically
• LLM Data Security Best Practices
• Comprehensive Guide to Large Language Model (LLM) Security
• Make Gandalf reveal the secret password
• Jailbreak Chat

In this episode Michael, Sarah, Gladys and Mark discuss what is top of mind as we draw to the end of 2023. Topics include what work we've done over the year, as well as items from Ignite. There's also a discsussion of EQ and IQ and a different sign-off! See you all in 2024!

Links

• Exam Ref SC-100 Microsoft Cybersecurity Architect
• 'In the Long Run, EQ Trumps IQ': Microsoft CEO Satya Nadella Tells Students
• Dogs Make Fine Companions for Cheetahs at San Diego Zoo

In this episode Michael talks with guests Sharath Unni  ( ) and Raul Garcia  ( ) about securing Azure SQL DB, SQL MI and SQL Server through the eyes of an attacker.

Links

• The Protection of Information in Computer Systems

In this episode Michael talk with colleagues Pieter Vanhove  ( ) and Mirek Sztajno about recent updates to Always Encrypted and Transparent Data Encryption (TDE) in SQL Server 2022 and Azure SQL DB.

Links

• SGX Enclaves
• VBS Enclaves

In this episode Michael talks with guest Nikhil Kumar  ( ) and our own Mark Simos about a new book they have co-authored named "Zero Trust Playbook Series Zero Trust Overview and Playbook Introduction: Actionable Guidance for Business, Security, and Technology Leaders and Practitioners."

Links

• Zero Trust Reference Model
• Zero Trust Commandments

In this episode Michael and Sarah talk with guest Madeline Eckert  ( ) about Security Bug Bounties.
We also discuss Azure Security news about SQL Server 2022, Azure certificate changes, TLS 1.0 and 1.1 deprecation, GitHub security scanning, Ransomeware defenses, Zero Trust and more; and by 'more' we mean lock-picking!

Links

• Hack The Box
• NahamSec

In this episode Michael, Sarah, Gladys and Mark talk with guest Roberto Rodriguez  ( ) about attack simulation, Cloud Katana and AI.
We also discuss Azure Security news about Azure SQL DB, Azure Key Vault, Cosmos DB, Trusted Launch VMs, Azure Artifacts, Zero Trust, Windows and TLS and Entra ID.

Links

• The Open Group Summit
• Zero Trust Commandments
• Cloud Katana (Jupyter Notebook and other Docs)
• Some abbreviations used: TI == Threat Intel, C2 == Command and Control

In this episode Michael and Sarah with guest Miriam Wiesner  ( ) about her new book, "PowerShell Automation and Scripting for Cybersecurity" which comes out soon.

We also discuss Azure Security news about: Azure SQL DB Always Encrypted improvements, Azure SQL Managed Instance, App Gateway for Containers and Bring your own Key for AKS Ephemeral Disks.

Links

• (Use 20MIRIAM at checkout)

In this episode Michael and Mark talk with Microsoft Security MVP Truls Dahlsveen  ( ) about modern security strategy. Actually, Mark and Truls mainly do the talking :)
We also discuss Azure Security news about Application Gateway TLS policy, Defender for IoT and the Zero Trust Commandments.

Links

• Zero Trust Commandments
• Truls' Security Automation Blog
• Field notes on security strategy

In this special episode Michael talks to prior podcast guest and Azure SQL DB colleague Sravani Saluru  ( ) about how to configure, monitor and manage audit logging in Azure SQL Database. She also shares some inside hints and tips!

Links

In this episode Michael and Sarah talk with guest Matt Zorich  ( ) about Microsoft's Incident Reponse process and services.
We also discuss Azure Security news about Azure Monitor RBAC and some Web Application Firewall (WAF) updates.

Links

In this episode Michael and Sarah talk with guest Thomas Roccia  ( ) about threat intelligence and MSTICPy and more.
We also discuss Azure Security news about Azure Files SMB shares, Private Link support for Application Gateway, Managed Identities support for Capture in Event Hubs and more.

Links

• NDC Conferences
• The Unprotect Project: Search Evasion Techniques
• Visual Threat Intelligence

In this episode Michael and Gladys talk with guests Marcelo di lorio  ( ) and Neil Walker  ( ) about all the latest news in Microsoft Entra Permissions Management.
We also discuss Azure Security news about Microsoft Build, Confidential Computing, Key Vault, SQL MI, and Azure Content Safety.

Links

• Looking at Entra Permissions Management to Manage Permissions Across AWS, GCP and Azure

In this episode Michael, Gladys and Mark talk with guest Anthony Shaw  ( ) about what he looks for when reviewing Infrastructure as Code files, and some of the best practices he has learned over the years. He also made a fantastic comment:
    "Security pops up a lot when you stick things on the Internet"
Sarah is away in Singapore, presenting at Blackhat Asia 2023!
We also discuss Azure Security news about DDoS, Cosmos DB, Microsoft Defender for APIs, Load Balancer, Zero Trust and discovering Internet-facing devices.

Links

• CPython Internals

In this episode Michael, Sarah, and Mark talk with guest Negar Shabab  ( ) about her work in Microsoft's Security Research group.
We also discuss Azure Security news about new Confidential Computing VMs, SQL Server, T-SQL Parsing, Auditing in Azure SQL DB, Sentinel and more.

Links

• Mark ordered pizza during the podcast!
• Meet Twins Noushin And Negar Shabab Who Are Making Their Mark In Cybersecurity

In this episode Michael, Sarah, Gladys and Mark talk with a good friend of the Podcast, Yuri Diogenes  ( ) about the latest Microsoft Defender for Cloud news.
We also discuss Azure Security news about Trusted VM Launch, Chaos Studio, Azure SQL DB, DDoS protection, Confidential Containers, Firewall and more.

Links

• Exam Ref SC-100 Microsoft Cybersecurity Architect (Microsoft Press Store)
• MDC monthly newsletter

In this episode Michael and Mark talk with guest Kemley Nieva  ( ) about the latest news in Azure Policy.
We also discuss Azure Security news about Microsoft Security Copilot, Azure Cache for Redis, Azure SQL Database, Azure SQL Managed Instance, Azure Monitor, API Management, Azure Maps, Azure Functions, Azure Backup and VMs.

Links