The Azure Security Podcast

A twice-monthly podcast dedicated to Security, Privacy, Compliance, Governance and Reliability on the Microsoft Cloud Platform. Hosted by Microsoft security experts Michael Howard, Sarah Young, Gladys Rodriguez and Mark Simos. Meet the hosts.

Episode 110 - Apr 1st, 2025 - [Securing Gen AI Apps with Entra 3/4]

In this episode Michael and Gladys talk with guest Sharon Chahal ( ) about monitoring and auditing when building GenAI applications. We also cover other related topics.
We also discuss Azure Security news about API Security Posture Management, Azure Key Vault in China, Azure Data Studio retirement, new least privilege permissions in Graph and more.

Episode 109 - February 17th, 2025 - [Securing Gen AI Apps with Entra 2/4]

In this episode Michael, Gladys and Mark talk with guest Bailey Bercik ( ) about how to use Microsoft Entra Permissions Management to identify and manage over-permissioned identities in multi-cloud environments to reduce security risks.
We also discuss Azure Security news about Lessons from AI red-teaming, Azure Confidential Ledger, Star Blizzard treat actor, and the CISA Zero Trust Maturity Model.

Episode 108 - January 20th, 2025 - [Securing Gen AI Apps with Entra 1/4]

In this episode Michael, Gladys, Mark and Sarah talk to guest Diana Vicezar ( ) from the Microsoft Entra team about security Generative AI applications.
Note, this is a short, simple intro episode to introduce three follow-on episodes.
We also cover security news about TLS 1.3 and Azure Event Grid, big updates to Microsoft Defender for Cloud, Azure Database for MySQL, SQL Managed Instance and Confidential Ledger. about
We also cover security news about TLS 1.3 and Azure Event Grid, big updates to Microsoft Defender for Cloud, Azure Database for MySQL, SQL Managed Instance and Confidential Ledger.

Episode 107 - January 7th, 2025 - [Secure by default and Copilot Overshare Blueprints]

Happy New Year! In this episode Michael, Sarah, and Mark talk with guests Maxime Bombardier ( ) and Emily Blundo ( ) about the Secure by default and Copilot overshare blueprints
We also cover news about Always Encrypted Assessment in SQL Server Management Studio, MVP Summit, mapping Entra to the Open Group standard for Adaptive Access, and various CISO Workshop topics!

Episode 106 - December 10th, 2024 - [Microsoft Ignite Wrapup (Security)]

In this episode Michael, Sarah, and Mark talk about the latest security news from Microsoft Ignite. We each go through items that we found of interest in the Book of News. about
We also discuss Azure Security news about:

Episode 105 - November 15th, 2024 - [Entra ID Tools]

In this episode Michael, Sarah, and Mark talk with guest Merill Fernando ( ) who is a Principal Product Manager at Microsoft about Entra ID and some of the tools he has worked on over the years.
We also discuss Azure Security news about:

Episode 104 - November 11th, 2024 - [Post Bluehat Wrap-up]

In this special episode Michael talks with guest Nic Filinghamm () about what went down at the recent Microsoft Bluehat conference in Redmond, WA.
We also discuss how to tell the NZ and Australian accents apart. This alone is worth listening to :)
This is a follow-on from episode 103 when we talked about what was coming up for Bluehat.
No news, as this is a special, smaller episode. It's also the least edited; other than some ums and ers getting removed and a small retake, the result is as was recorded. Let us know what you think, this feels a little more 'chatty' and personable.

Episode 103 - October 17th, 2024 - [Microsoft Bluehat]

In this episode Michael and Sarah talk with guest Nic Filinghamm () about some of the most important security conferences around the globe with a special focus on Microsoft's annual Bluehat conference.
We also discuss Azure Security news about Azure PostgreSQL, Cosmos DB, IP address management, containers and AI Studio.

Episode 102 - October 7th, 2024 - [Entra ID Purple-teaming with Dr Azure AD]

In this episode Michael and Sarah talk with guest Dr. Nestori Syynimaa [Dr Azure AD] ( ) about Entra ID security and his purple-team tool, AADInternals.
We also discuss Azure Security news about Secure Future Initiative (SFI), MFA for Azure Portal, Playright, WordPress, NSG, Bastion, Azure Functions, MS Ignite, App Service, Defender for Cloud, Containers, Azure Monitor, AKS, Trustworthy AI and Azure AI Content Safety.

Episode 101 - September 20th, 2024 - [GHOST Threat Hunting]

In this episode Michael, Sarah, Gladys and Mark talk with guests Waymon Ho ( ) and Matt Zorich ( ) about the GHOST team at Microsoft and how they help protect Microsoft and Microsoft customers from attacks.
We also discuss Azure Security news about Azure Event Grid, AKS, Azure NetApps, and Chaos Studio. Mark mentions more about Zero Trust.

Episode 100 - August 29th, 2024 - [Our Stories!]

In this episode Michael, Sarah, Gladys and Mark talk about our careers so far, explain some funny stories and our wishes for a more secure future.

Our Stories

Mark at the start

Sarah 4m 5s

Gladys 6m 50s

Michael 12m 22s

Funny Stories

Mark 19m 31s

Sarah 20m 33s

Gladys 22m 46s

Michael 24m 39s

Career Advice

Mark 26m 58s

Sarah 29m 18s

Gladys 31m 48s

Michael 34m 40s

Future

Mark 36m 27s

Sarah 38m 33s

Gladys 40m 34s

Michael 42m 24s

Behind the Scenes

43m 36s

BLOOPER: Not Michael's proudest moment!

Episode 99 - August 16th, 2024 - [Securing Copilot Data and Purview]

In this (late) episode Michael, Sarah, Gladys and Mark talk with guest Andrew McMurray ( ) a Principal Product Manager at Microsoft about securing Copilot AI data and the role Purview can play for end-to-end protection.
We also cover news about MFA access to the Azure Portal (Important), PostgreSQL, Entra ID and Windows authn metadata, Backup Vaults, Conditional Access Policy, ADFS, and Azure Container Apps.

Episode 98 - June 20th, 2024 - [Secure Future Initiative and Rust at Microsoft]

In this episode Michael and Gladys talk with guest Dave Weston ( ) about Secure Future Initiative and the growing use of the Rust programming language at Microsoft. On the topic of Rust, Michael and Dave nerd out, and we make no apologies! Rust conversation starts at 13m:30s.

We also discuss Azure Security news about Defender for Cloud, Azure Bastion and Log Search.

Episode 97 - June 6th, 2024 - [Securing AI]

In this episode Michael and Sarah talk with guest Richard Diver ( ) about securing solutions that use AI and LLMs. Richard also talks about his new book on AI Security, and Michael and Richard talk about what it takes to write a book.
We also discuss Azure Security news about Chaos Studio, API Management, Azure Bastion, Front Door, AKS and Copilot for Security and lots more!

Episode 96 - May 3rd, 2024 - [CNAPP - Cloud Native Applications Protection Platform]

In this episode Michael, Sarah, and Mark talk with guest (and good friend of the podcast) Yuri Diogenes ( ) about CNAPP - Cloud Native Applications Protection Platform and announce the release of a CNAPP e-book.
We also discuss Azure Security news about Azure SQL DB, Defender for Cloud, Data Box and Trusted Signing.

Episode 95 - April 25th, 2024 - [Threat Intelligence]

In this episode Michael, Sarah and Mark talk with guest Sherrod DeGrippo ( ) Director of Threat Intelligence Strategy at Microsoft about the current state of Threat Intelligence.
We also discuss Azure Security news about Tampa BSides, Virtual Networks, Azure Database for MySQL and PostgreSQL, and SQL Server on Linux.

Episode 94 - April 1st, 2024 - [Copilot for Security]

In this episode Michael, Sarah and Mark talk with guest Ryan Munsch ( ) about the newly released Copilot for Security.
We also discuss Azure Security news about Azure SQL DB, SSMS 20, Change Actor, Copilot for Azure SQL DB, Azure Container Apps, AI Prompt Shields, AI Groundedness Detection and BlueHat India and Israel.

Episode 93 - March 25th, 2024 - [Continuous SDL]

In this episode Michael, Sarah and Mark talk with guests Tony Rice ( ) and David Ornstein about advances in Continuous SDL (Security Development Lifecycle).
We also discuss Azure Security news about Azure Key Vault, Cloud PKI, OAuth2, updated SQL Server password verifiers, Memory Safety and Azure SQL DB.

Episode 92 - March 15th, 2024 - [Global Azure (Security)]

In this episode Michael and Sarah talk with guest Martin Abbott ( ) about the Global Azure event that starts soon, https://globalazure.net/. We talk about how to successfully fill out a Call for Papers (CFP) so YOU can present to a global audience about security topics that interest you.
We also cover security news AI security, SQL Always Encrypted, SymCrypt and Rust, SQL Security Fundamentals, and free Security 101 material.

Episode 91 - February 13th, 2024 - [Chaos Studio]

In this episode Michael talks with guest Rigel Carlson ( ) about Azure Chaos Studio.
We also discuss Azure Security news about Midnight Blizzard and Michael has some advice about using Azure's DefaultAzureCredential()

Episode 90 - January 24th, 2024 - [AI red teaming]

In this episode Michael, Sarah and Mark talk with guests Dr. Amanda Minnich ( ) and Pete Bryan ( ) about AI Red Teaming.
We also discuss Azure Security news about Azure SQL DB, Trusted VMs, NetApp Files, Azure Load Testing and Front Door. Mark covers further details about Zero Trust and the CISO Workshop.

Links

Older episodes