PODCAST · technology
Blue Security
by Andy Jaw & Adam Brewer
A podcast for information security defenders (blue team) on best practices, tools, and implementation for enterprise security.
Episodes
-
AI Readiness for Defenders - What the Data Actually Shows
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss the concept of AI readiness for defenders in cybersecurity. They explore the findings from Zscaler's Threat Labs, focusing on the vulnerabilities that organizations face and the importance of having the right...
-
Microsoft Digital Defense Report 2026
Summary In this episode, Andy and Adam discuss the 2026 Microsoft Digital Defense Report, focusing on the evolving threat landscape shaped by AI. They explore how AI is changing the speed of attacks, the challenges of vulnerability management, and the risks associated with AI workloads. The...
-
Stop phishing tests, Microsoft's Humanist AI Code of Conduct
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into two significant topics in cybersecurity: the effectiveness of phishing tests and Microsoft's new Humanist AI Code of Conduct. They critically analyze the traditional approach to phishing tests…
more -
Why Your Cloud Region Is Now a Physical Attack Surface
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss two significant cybersecurity incidents: the emergence of AI API drain attacks and the implications of military strikes on AWS data centers. They explore how attackers can exploit API keys to run up costs…
more -
Anthropic Threat Intelligence Report
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Anthropic's latest threat intelligence report, highlighting the evolving landscape of cyber threats facilitated by AI technologies. They explore various harm areas, including cyber operations, influence...
-
LG TV's data collection and Crowdstrike Zero Day
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam celebrate six years of consistent podcasting, reflecting on their journey and the evolution of their roles in the tech industry. They delve into a significant controversy surrounding LG TVs, discussing privacy concerns...
-
LiteLLM Breach, an Entra Connect Deadline, and 153 Million Leaked IDs
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into significant cybersecurity topics, including the Light LLM breach, a supply chain attack that affected thousands of organizations, and an urgent reminder for Microsoft Entra Connect users to upgrade…
more -
AI 101 - Understanding core AI terminology
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam delve into the complexities of AI in cybersecurity, focusing on the adoption rates and understanding of various AI technologies. They discuss the differences between large language models (LLMs) and small language models...
-
DEF CON Is Not Cooked; Why AI Won't Replace Cybersecurity
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the implications of AI on cybersecurity, particularly in light of recent comments from Jason Haddock regarding the future of the industry. They explore the notion that AI will not replace cybersecurity…
more -
Evil Twins, AI Agents, and Cyber Privateers
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant cybersecurity topics, including an evil twin attack on a Delta flight, the emergence of fully autonomous cyber attacks, and a new policy allowing private companies to conduct offensive cyber...
-
Critical infrastructure hacks and rogue AI agents
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the recent cyberattacks on water systems in Minnesota, attributed to Iran-linked hackers. They explore the vulnerabilities of programmable logic controllers (PLCs) and the broader implications for...
-
Hotel Wi-Fi Hijacks and Border Phone Searches
Summary In this episode of the Blue Security Podcast, host Andy Jaw and guest Carly Salmon discuss critical issues in data security, focusing on a recent hotel Wi-Fi hack that exploits DNS settings to capture sensitive information and the legal ramifications of digital privacy through the case of...
-
MDASH in Prod, Intune Sync, OpenAI-Hugging Face Incident
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant developments in cybersecurity, including Microsoft's new AI vulnerability scanner, the long-awaited fix for Intune's sync button, and the implications of the Hugging Face and OpenAI incident....
-
Identity Update: Passkeys by Default, Phone Transfers, Physical Key Security
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the upcoming transition to passkeys as the default method for multi-factor authentication (MFA) in Microsoft Entra ID. They explore the implications of this change, the importance of moving away from SMS...
-
North Korean IT Worker Scam
Summary In this episode of the Blue Security Podcast, host Andy Jaw delves into the alarming rise of North Korean IT worker scams, exploring their historical context, operational tactics, and the financial implications for both the regime and unsuspecting American companies. The discussion...
-
Claude Fable, SharePoint RCE, and CISA's KEV list
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Andy's career transition from Microsoft to Zscaler, the return of the AI model Fable and its user experience, and a critical SharePoint vulnerability that has caught CISA's attention. They delve into the...
-
Helping or Hurting? - An Honest Conversation About AI
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer engage in a deep discussion about the implications of AI on society and the security industry. They explore whether AI is ultimately helping or hurting us, particularly in the context of job displacement and...
-
Your MDM Admin Can Wipe Everything. Are You Protecting Them Like It?
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into the critical topic of Mobile Device Management (MDM) and the associated administrative rights. They discuss the risks posed by MDM admins, who often have significant control over organizational…
more -
History Repeating - AI Export Controls and the Lessons We Never Learned
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer celebrate their 300th episode by discussing the recent developments surrounding Anthropic and its AI model, Fable Five. They delve into the historical context of export controls, the implications of government...
-
What's new in Entra, Facebook privacy settings
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant updates in Microsoft's security landscape, including the shift to passwordless authentication, cross-tenant synchronization, and the convergence of sensitivity labels with security groups.…
more -
BitLocker bypass, Verizon DBIR report, & CISA key leak
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss critical cybersecurity topics, including newly discovered Windows Zero Days, insights from Verizon's latest Data Breach Investigations Report, and a significant credential leak at CISA. They emphasize the...
-
Control the Agents, Find the Bugs - Microsoft's AI Security Double Play
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss two significant topics: Agent 365, a new dashboard for monitoring AI agents in the Microsoft ecosystem, and MDash, a multi-model vulnerability scanner. They explore the importance of visibility and…
more -
You Can't Patch Fast Enough: Exchange Zero-Day and Tycoon2FA Strike
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss two significant topics: Agent 365, a new dashboard for monitoring AI agents in the Microsoft ecosystem, and MDash, a multi-model vulnerability scanner. They explore the importance of visibility and…
more -
You Can't Patch Fast Enough: Exchange Zero-Day and Tycoon2FA Strike
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss two significant topics: Agent 365, a new dashboard for monitoring AI agents in the Microsoft ecosystem, and MDash, a multi-model vulnerability scanner. They explore the importance of visibility and…
more -
Lockdown Mode Success, Howler Cell, and Entra Conditional Access
Summary This episode covers Apple Lockdown Mode's effectiveness against spyware, the Phantom Device attack exploiting Azure AD, and best practices for securing device registration and conditional access policies. ---------------------------------------------------- YouTube Video Link:...
-
Lockdown Mode Success, Howler Cell, and Entra Conditional Access
Summary This episode covers Apple Lockdown Mode's effectiveness against spyware, the Phantom Device attack exploiting Azure AD, and best practices for securing device registration and conditional access policies. ---------------------------------------------------- YouTube Video Link:...
-
Copy Fail, Claude Security, and Microsoft's AI Defense Playboo
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant topics in cybersecurity, including the discovery of a critical Linux vulnerability known as Copy Fail, the introduction of Cloud Security in public beta, and Microsoft's comprehensive AI...
-
Copy Fail, Claude Security, and Microsoft's AI Defense Playbook
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant topics in cybersecurity, including the discovery of a critical Linux vulnerability known as Copy Fail, the introduction of Cloud Security in public beta, and Microsoft's comprehensive AI...
-
Apple-Signal Bug, NCSC recommends passkeys, Open Source debate
Summary In this episode, Andy and Adam discuss a recent vulnerability in the Signal messaging app that allowed the FBI to recover deleted messages from an iPhone due to a flaw in Apple's notification system. They emphasize the importance of user settings and the need for regular updates. The...
-
Apple-Signal Bug, NCSC recommends passkeys, Open Source debate
Summary In this episode, Andy and Adam discuss a recent vulnerability in the Signal messaging app that allowed the FBI to recover deleted messages from an iPhone due to a flaw in Apple's notification system. They emphasize the importance of user settings and the need for regular updates. The...
-
Ep 292 - NIST Taps Out, $21B Lost in cybercrime, and MDI Password Protection
Summary In this episode, Andy and Adam discuss significant changes in cybersecurity, focusing on NIST's new policy for handling CVEs, the alarming statistics from the FBI's 2025 Cybercrime Report, and the introduction of a new password protection feature in Defender for Identity. They explore the...
-
NIST Taps Out, $21B Lost in cybercrime, and MDI Password Protection
Summary In this episode, Andy and Adam discuss significant changes in cybersecurity, focusing on NIST's new policy for handling CVEs, the alarming statistics from the FBI's 2025 Cybercrime Report, and the introduction of a new password protection feature in Defender for Identity. They explore the...
-
Hack the Planet, Ban the Router: Your Weekly Dose of Cyber Chaos
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the recent FCC ban on foreign-made routers, citing national security concerns and the implications for consumer cybersecurity. They explore the potential negative effects of the ban, including the risk of forcing...
-
Hack the Planet, Ban the Router: Your Weekly Dose of Cyber Chaos
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the recent FCC ban on foreign-made routers, citing national security concerns and the implications for consumer cybersecurity. They explore the potential negative effects of the ban, including the risk of forcing...
-
Claude code leak and Axios NPM Supply Chain attack
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents, including a cloud code leak from Anthropic and a supply chain attack on the Axios NPM package. They explore the implications of these events for developers and organizations,...
-
Claude code leak and Axios NPM Supply Chain attack
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents, including a cloud code leak from Anthropic and a supply chain attack on the Axios NPM package. They explore the implications of these events for developers and organizations,...
-
Small Business Security from a MSP Perspective
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss various aspects of cybersecurity, particularly focusing on small business security challenges and the features available in Microsoft 365. They address a listener's email regarding the limitations of basic licensing...
-
Small Business Security from a MSP Perspective
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss various aspects of cybersecurity, particularly focusing on small business security challenges and the features available in Microsoft 365. They address a listener's email regarding the limitations of basic licensing...
-
Microsoft Frontier Suite (E7)
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the newly announced E7 Frontier Suite from Microsoft, which consolidates various licensing options into a comprehensive package. They explore the features of Microsoft 365 Copilot, the importance of AI agents, and…
more -
Microsoft Frontier Suite (E7)
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the newly announced E7 Frontier Suite from Microsoft, which consolidates various licensing options into a comprehensive package. They explore the features of Microsoft 365 Copilot, the importance of AI agents, and…
more -
Spies, Wipes, and AI Gripes
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant developments in AI ethics and cybersecurity. They delve into the legal battles between Anthropic and the US government, Microsoft's support for Anthropic, and the backlash against OpenAI's military...
-
Spies, Wipes, and AI Gripes
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant developments in AI ethics and cybersecurity. They delve into the legal battles between Anthropic and the US government, Microsoft's support for Anthropic, and the backlash against OpenAI's military...
-
Dial 'F' for Fraud: Uncovering IRSF
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam delve into a significant surge in external ID charges experienced by a customer, leading to the discovery of an international revenue share fraud attack. They discuss the mechanics of this fraud, how it exploits...
-
Dial 'F' for Fraud: Uncovering IRSF
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam delve into a significant surge in external ID charges experienced by a customer, leading to the discovery of an international revenue share fraud attack. They discuss the mechanics of this fraud, how it exploits...
-
Guardrails or Going Off the Rails: Anthropic vs US Government
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam delve into the recent tensions between the U.S. government and the private tech sector regarding artificial intelligence. They discuss the clash between Anthropic and the Department of Defense over AI safety guardrails, the...
-
Guardrails or Going Off the Rails: Anthropic vs US Government
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam delve into the recent tensions between the U.S. government and the private tech sector regarding artificial intelligence. They discuss the clash between Anthropic and the Department of Defense over AI safety guardrails, the...
-
ClawdBot, MoltBot, and OpenClaw
Summary In this episode, Adam and Andy explore the security challenges and risks associated with OpenClaw, an AI assistant with extensive system access, highlighting recent incidents, vulnerabilities, and best practices for security in AI development....
-
ClawdBot, MoltBot, and OpenClaw
Summary In this episode, Adam and Andy explore the security challenges and risks associated with OpenClaw, an AI assistant with extensive system access, highlighting recent incidents, vulnerabilities, and best practices for security in AI development....
-
Notepad++ supply chain compromise and 7-Zip malware
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents involving Notepad++ and 7-Zip, highlighting the vulnerabilities in open-source software and the importance of enterprise software management. They emphasize the need for ad...
-
Notepad++ supply chain compromise and 7-Zip malware
Summary In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents involving Notepad++ and 7-Zip, highlighting the vulnerabilities in open-source software and the importance of enterprise software management. They emphasize the need for ad...
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
A podcast for information security defenders (blue team) on best practices, tools, and implementation for enterprise security.
HOSTED BY
Andy Jaw & Adam Brewer
CATEGORIES
Loading similar podcasts...
Frequently Asked Questions
How many episodes does Blue Security have?
Blue Security currently has 335 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.
What is Blue Security about?
A podcast for information security defenders (blue team) on best practices, tools, and implementation for enterprise security.
How often does Blue Security release new episodes?
Blue Security publishes regularly with 335 episodes available. Check the episode list for the typical release schedule.
Where can I listen to Blue Security?
You can listen to Blue Security on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.
Who hosts Blue Security?
Blue Security is created and hosted by Andy Jaw & Adam Brewer.
URL copied to clipboard!