The Azure Security Podcast

In this episode, Michael, Sarah and Mark talk with Sherrod DeGrippo about some of the latest tactics and strategies used by modern threat actors, we also wander into the AI security weeds!We only have one news item related to Azure SQL databases.https://aka.ms/azsecpod

In this episode we talk to Michael Makhlevich about Azure Defender for SQL - Threat Protection. Michael Howard and our guest geek out about common SQL security issues and MichaelM gives some interesting philosophical insights into securing SQL databases - it's not just the data! We also cover security news from Managed Hardware Security Module (MSH), App Config, Sentinel, Machine Learning, Azure Security Center and much more.

This episode is a little different; no news! Michael talks with Yuri Diogenes and Sarah about the various Azure Security certifications, and Sarah and Yuri talk about their upcoming study guide for SC-200: Microsoft Security Operations Analyst.

In this episode Michael, Sarah, Gladys and Mark talk with guest Carmichael Patton, a Senior Security Architect in the Digital Security and Resiliency group at Microsoft about Microsoft's journey to Zero Trust and some of the lessons learned along the way.We also discuss Azure Security news about: Azure Sentinel, Azure Automation, Azure SQL DB and Always Encrypted withe Secure Enclaves, App Insights, App Service and Functions, Azure Active Directory, Azure Firewall, Azure Kubernetes Service, Azure Security Center, Azure Bastion. Mark also talks about some Open Group actitivites and recent Microsoft security acquisitions.

In this episode Michael, Sarah, Gladys and Mark talk with guest Rin Ure about the Azure Sentinel SOC Process Framework Workbook. We also discuss Azure Security news about Azure Web Application Firewall, Azure Front Door, Azure SQL DB, Azure Sphere, Confidential Compute VMs and episode 2 of the Spanish Azure Security Podcast is now out.

In this episode we talk to Nicholas DiCola about automating security tasks in Azure. We also cover security news about Azure Monitor, Confidential Computing, Azure Key Vault, Visual Studio Code, Azure Sentinel, Azure Defender for MySQL, MariaDB, PostgreSQL and IoT, and more. Make a point of listening to Mark's comments about the state of Human-operated Ransomware.

In this episode we interview Pete Bryan from the Microsoft Threat Intelligence Center - MSTIC - about lessons learned from the recent highly-public nation-state attacks on US infrastructure. We also cover news about GitHub, CosmosDB, Storage account key rotation, Azure Functions, SimuLand, Gladys also announces that there is now a Spanish edition of the Azure Security Podcast.

In this episode Michael, Gladys and Mark talk with guests Gopal Shankar and Arvind Chandaka discuss a new data governance product Azure Purview. We also discuss Azure Security news for the following: Azure Monitor, Storage, cryptography, Zero Trust, Incident Response, Azure Information Protection, Ransomware and more.

In this episode Michael, Sarah, Gladys and Mark talk with guest Sharon Xia about applied Artificial intelligence and Machine Learning in Cybersecurity. This is one of those episodes where many of us learned a great deal about something we know little about! We also discuss Azure Security news for: Azure VMs, Azure Charts, Zero Trust and the Open Group, Sentinel, App Gatewat, Security Technical Content Library and a new Azure Networking Security book.

We speak to Tanu Balla from the Azure Hybrid Networking team about Azure Bastion. We also cover security news about Azure Sentinel, DataBricks, PowerBI, App Service, Power Fx, TypeScript, Azure Active Directory, a new Azure Security Technical Implementation Guide (STIG) and Azure App Proxy.

In this episode we talk to Chuck Enstall about what he's hearing from customers about Azure security, including segregation of subscriptions, RBAC policies and more. We also cover security news about GitHub's CodeQL, SecDevOps, storage accounts, Azure SQL and Synapse, Event Grid, Media Services, Azure Communications Services, IoT Hub, ExpressRoute, Key Vault, Azure Cache for Redis, Azure Active Directory, PCI DSS, Exchange, a beta of the SC-200 exam, "Microsoft Security Operations Analyst (beta)" and more!

Michael Howard, Sarah Young and Mark Simos with guest Nick Fadziewicz who is a Principal Consultant at Microsoft working in the Azure and AI team.In this episode we cover security news about Azure Datalake Storage Gen 2 ACLs, HDInsight and Azure Batch now support Private Link in preview. TLS protocol version support on Storage accounts, Azure Security Center vulnerability assessments and improved Kubernetes support, Azure Firewall DNS updates and more. Of note is a free e-book "Azure for Architects 3rd Ed" is now available.

This week we cover security news about Log Analytics, Azure Key Vault, IoT, Zero Trust and more. Mark talks about VPN tech, and we then speak to Tom Quinn about the Top 10 Azure Security Practices.

In this episode we discuss Azure security news, including a new member to the Azure Key Vault family, immutable storage, PowerBI and private endpoints, Azure Security Center updates and Azure Top 10 Security practices. Finally, the team chats with Amrita about the Azure Security Benchmark project.

In this special episode Michael Howard and Mark Simos sit down with guest Cyril Voisin to cover the Azure security, compliance and governance news that came out of Microsoft Ignite 2020.The topics covered include updated news on the Microsoft Defender suite, Key Vault, SQL Server, Kubernetes, Data Loss Prevention, Azure Security Center, Zero Trust, Microsoft Information Governance and much more.

In this episode we discuss current Azure security news for VMs, IoT, Azure Arc, Sentinel and more. Mark gives his analysis of the latest Microsoft Digital Defense Report and then Sarah and Michael talk to Aeva about the technology, benefits and future of Confidential Computing on Azure at various levels of the hardware and software stack.

In this episode we discuss recent Azure security news including TLS in IoT (again!), Log Analytics REST APIs, Azure Information Protection, Azure Monitor and Confidential Computing. We then talk to Yina Arenas about the vision behind Microsoft Graph and how it can be used to help build security and IT management solutions.

After covering the new we interview Tali Ash from Microsoft Israel to discuss the tools available in Microsoft Threat Protection to secure Azure and on-prem networks

In this episode we cover the latest Azure security news and Mark chats about the role of threat models and shared responsibility in Azure. Guest, Maryam Rahmani then discusses the Cybersecurity Maturity Model Certification (CMMC) and the role it plays in protecting Dept. of Defense (DoD) contractors from cyber attacks.

In this episode we cover the latest Azure security news. Gladys discusses some IT training available from Microsoft to help people looking for IT positions in the wake of COVID-19 job-related issues.Michael then talks to Randy about the history of network isolation in Azure, as well as some DNS gotchas when using private endpoints.

In this episode we cover recent Azure security news, Gladys discusses some security research findings about weak security caused by companies rushing to deploy remte solutions for their workers and finally, Sarah chats to Ryen Macababbad about Azure identity, MFA and why having numerous security agents running on a box is bad.

In this episode we speak to Jay Yuzwenko about Incident Response and Compromise Recovery, especially as it relates to admins accessing Azure from compromised systems.

In this episode we interview David Sanchez, a Microsoft Azure Security specialist, and cover topics like bots, crypto miners, private link, DDoS and much more.

In this episode we speak to Thomas Weiss and Tony Voellm about CosmosDB security; we cover the basics of CosmosDB, encryption of data at rest, authentication, authorization, network isolation and monitoring. We also cover some near-term updates for client-side encryption and data-plane RBAC.

In this episode Michael and Sarah go over their experiences clearing the AZ-500 Azure Security Exam. Gladys talks more about Zero Trust, Mark Cloud Adoption Framework and finally, we interview Yuri Diogenes about some new Azure Security Center features announced at Microsoft Build.

In this episode Sarah chats to Michael Withrow about some of the finer details regarding container security on Azure.

Recorded 30th April, 2020. Michael Howard, Sarah Young, Gladys Rodriquez and Mark Simos. In this episode, we introduce the hosts and discuss Azure Security Center's ability to scan containers for malware as well as new Confidential Computing VMs that support Intel's SGX enclave technology.