Let's Talk Azure!

In this episode, we dive deep into ScubaGear, an open-source tool developed by the Cybersecurity and Infrastructure Security Agency (CISA) as part of the Secure Cloud Business Applications (SCuBA) project. Designed to assess Microsoft 365 (M365) tenant configurations, ScubaGear helps organizations align with CISA’s Secure Configuration Baselines (SCBs) to prevent costly misconfigurations. From set...

Alan and Sam discuss the benefits and use cases of Security Copilot. Alan Dives into how Security Pilot works and what some of the capabilities are. Here are a few things we covered: What is Generative AI What is Security Copilot What are Agents How much does it cost? What did you think of this episode? Give us some feedback via our contact form , Or leave us a voice message in the bottom right co...

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest. Some of the Microsoft product features and update we covered: Key Microsoft Entra, Intune and Defender features and updates Lots of Azure changes and new features What did you think of this ep...

This week, Alan and Sam talk about new features and services that have been announced at Microsoft Secure 2025 Some of the Microsoft product features and update we covered: Security Copilot Agents Data Security Investigations Innovations in Microsoft Entra Detection and protection for emerging AI threats What did you think of this episode? Give us some feedback via our contact form , Or leave us a...

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest. Some of the Microsoft product features and update we covered: Key Microsoft Entra, Intune and Defender features and updates Lots of Azure changes and new features What did you think of this ep...

This episode Alan and Sam dive into the issues around OAuth apps and understanding how they are being used. Alan discusses the issues organisations are facing when any user could consent to application and the cleansing process that needs to take place. He also goes into how App Governance in Defender for Cloud Apps can help. Here are the areas they covered: What are OAuth Apps? What is Defender f...

In this episode, we dive into two great features of Microsoft Defender for Cloud: Security Explorer and Attack Paths. Join us as we unpack how these tools leverage the Cloud Security Graph to help you hunt down risks, map potential attack routes, and prioritize your cloud security efforts like never before. Whether you’re managing Azure, AWS, or a hybrid setup, this episode is packed with insights...

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest. Some of the Microsoft product features and update we covered: Key Microsoft Entra, Intune and Defender features and updates Lots of Azure changes and new features What did you think of this ep...

Alan and Sam dive into Defender for Cloud's Protective workload for server. Alan goes through the different plans available and the features that are available. Here are a few things we covered: What is the Defender for Server Protective workload What features does it provide How easy is it to enable How much does it cost What did you think of this episode? Give us some feedback via our contact fo...

In this episode, we dive into the world of database security with Microsoft's Defender for Databases. Join us as we explore how this tool within Microsoft Defender for Cloud can transform your approach to safeguarding your data against cyber threats. Topics Covered: Introduction to Defender for Databases Features and Capabilities Enabling and Configuring Defender for Databases Responding to Alerts...

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest. Some of the Microsoft product features and update we covered: Key Microsoft Entra, Intune and Defender features and updates Lots of Azure changes and new features What did you think of this ep...

Alan and Sam discuss why it is important to have Cloud Security Posture Management (CSPM) solutions in place. Alan goes through the general benefits of CSPM, enhancements since its release and dives into Microsoft Defender for Cloud. Topics that are covered are: What is Cloud Security Posture Management and why it is important What is Microsoft Defender for Cloud’s approach to CSPM What is Microso...

In this episode, we explore the critical world of API security through the lens of Microsoft Defender for APIs. Join us as we discuss how this tool can safeguard your APIs in increasingly cloud-centric environments. Topics Covered: Introduction to Defender for APIs What it is and why it matters in today's cloud landscape. Who should care about API security? Key Features of Defender for APIs Invent...

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest. Some of the Microsoft product features and update we covered: Key Microsoft Entra, Intune and Defender features and updates Lots of Azure changes and new features What did you think of this ep...

In this episode, we wrap up the season, where we explore our favourite episode of the season. We also talk about the what happened in 2024, and how the podcast has grown in terms of listenership and engagement. As we bid farewell to the season, we also reveal our future plans for the next season, which will start on January 2025. This episode is a great way to end the season and to look forward to...

Alan and Sam discuss the process organisations go through to manage patches. Alan dives into some of the tooling and covers: Why is patch management important and what are some of the issues you can run into what tooling can help with patch management for servers What is Azure update manager What is hotpatch for Windows servers What did you think of this episode? Give us some feedback via our cont...

This week, Alan and Sam talk about the Microsoft Ignite event and the announcements that came out of it. Alan dives into the in-person experience in Chicago. They dive into a couple of the announcements that peaked their interest. Some of the Microsoft product features and updates we covered: M365 Copilot Purview Defender XDR Azure What did you think of this episode? Give us some feedback via our...

In this episode, we tackle the critical challenges of securing DevOps environments in today’s fast-paced, cloud-centric landscape. With cyber threats evolving at an unprecedented rate, safeguarding your DevOps pipelines is more essential than ever. Join us as we explore Microsoft Defender for Cloud, a comprehensive solution designed to address security gaps across the entire DevOps lifecycle. We'l...

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest. Some of the Microsoft product features and updates we covered: Key Microsoft Entra, Intune and Defender features and updates Lots of Azure changes and new features What did you think of this e...

This week Alan and Sam discuss OAuth applications and their potential risks. Alan goes into how App Governance can give you the visibility of OAuth app and their usage. Here are a few things we covered: What are OAuth Apps? What are they typically used for? why is it important to monitor them How can App Governance help monitor and protect from OAuth App attacks? What did you think of this episode...

This week Alan and Sam discuss Azure Web Jobs which is a feature of Azure App Service that allows developers to run background tasks, scripts, and long-running processes alongside their web applications, enabling automated workflows and task scheduling in the cloud. Here are a few things we covered: An overview of Azure web jobs and use cases Types of Web Jobs Deployment and Integration Monitoring...

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest. Some of the Microsoft product features and update we covered: Key Microsoft Entra, Intune and Defender features and updates Lots of Azure changes and new features What did you think of this ep...

In this episode, Sam and Alan dive deep into the world of token theft and token replay attacks. They explore what these threats are and discuss effective countermeasures to reduce the risk of token theft and prevent replay attacks. Here’s a breakdown of what they covered: Understanding Authentication Tokens: What are they and why are they crucial for secure authentication? Token Theft and Replay A...

This week Alan and Sam discuss Azure VM Image Builder which is a service that simplifies the creation, customisation, and management of virtual machine images in Azure, automating tasks like software installation, configuration, and patching for consistent deployments. Here is what we covered: What are Virtual Machine images? And how they are used in Azure. What are the challenges with image creat...

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest. Some of the Microsoft product features and update we covered: Key Microsoft Entra, Intune and Defender features and updates Lots of Azure changes and new features What did you think of this ep...