Blue Security

on this week's episode, Adam and Andy talk about the OWASP Top 10 and the Top 10 for Large Language models. It is good for defenders to understand these vulnerabilities even if you are not in application security. Listen in to learn more about the current Top 10 and OWASP's draft for LLM's. ------------------------------------------- Youtube Video Link: ⁠ https://youtu.be/DXnI7nl6gLg -...

On this week's episode, Adam and Andy talk about the basics of network security. They go over asset management, firewalls, IDS/IPS, NDR's, and administrative access. If you're new to security enterprise networks, listen in! ------------------------------------------- Youtube Video Link:  https://youtu.be/ewwhQeyIRWs⁠⁠ ------------------------------------------- Contact Us: Website: ⁠⁠⁠...

On this week's episode, Adam and Andy talk about Managed Security Service Providers (MSSP's). They talk about the different levels and services you can get from providers and introduce some of the new offerings from Microsoft in this space like Defenders for Experts for Hunting and XDR. ------------------------------------------- Youtube Video Link:  ⁠https://youtu.be/26jUP__JDtc ---------...

On this week's episode, Adam and Andy talk about Microsoft's guidance on how to protect your M365 environment from on-premises attacks. ------------------------------------------- Youtube Video Link:  https://youtu.be/JhSva-NVdLI⁠ ------------------------------------------- Documentation: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/protect-m365-from-on-premises-at...

On this week's episode, Adam and Andy give their perspective on some of the interesting security topics from Microsoft Build 2023. ------------------------------------------- Youtube Video Link:  https://youtu.be/3JOJLpWG-qg ------------------------------------------- Documentation: ⁠⁠⁠⁠⁠ ⁠https://news.microsoft.com/build-2023-book-of-news/ https://build.microsoft.com/en-US/sessions/d2ad7043-2...

On this week's episode, Adam and Andy talk about how many companies are limiting access to ChatGPT in their corporate assets. They discuss why this is happening and recommendations on how to protect your data from getting leaked. ------------------------------------------- Youtube Video Link:  https://youtu.be/S8EXEPPmido ------------------------------------------- Documentation: ⁠⁠⁠ https://w...

On this week's episode, Adam and Andy talk about Apple's new Rapid Security update for iOS and Android. They also talk about different ways to encrypt data for protection. Finally, with layoffs still happening, they talk about how workforce reductions can have an impact on your security posture and how to be prepared for this. ------------------------------------------- Youtube Video Link:...

On this week's episode, Adam and Andy talk about one of the most underutilized features of M365: Secure Score. They talk about what it is and go through some of the reasons why organizations might not use it. Learn how to operationalize this important feature to improve the security posture at your organization. ------------------------------------------- Youtube Video Link:  ⁠ https://youtu.b...

On this week's episode, Adam and Andy talk about how Microsoft FTE's are going from Workplace Join to only Azure AD Join devices and their thoughts on it. They also talk about the much anticipated Windows (Cloud) LAPS, how it works, and how to get started. ------------------------------------------- Youtube Video Link:  https://youtu.be/m-v6k5ZfS3c -----------------------------------------...

On this week's episode, Adam and Andy talk about Meta's plans on end to end encryption for Facebook and Instagram messages. They also talk about Proton's new password vault that just launched in beta and Linkedin's new FREE verification, how to activate it, and why it's important. Finally, they talk about iPhone security with a simple setting that will harden your iPhone. -----...

On this week's episode, Adam and Andy talk about some Microsoft news including the newly unveiled Security Co-Pilot. They also talk about Microsoft's Incident Response Retainer and their takes on the new that the Exchange team is throttling and blocking emails from on-premises Exchange servers. ------------------------------------------- Youtube Video Link:  https://youtu.be/hl6YddFqxpo --...

On this week's episode, Adam and Andy talk about Oort's report on the state of identity in 2023. They talk about the takeaways from the report and provide some action items on how to shore up your identity security. ------------------------------------------- Youtube Video Link:  https://youtu.be/bv26BBe5Oi0 ------------------------------------------- Documentation: https://oort.io/blog/in...

On this week's episode, Adam and Andy talk about some recent news including Microsoft Defender Vulnerability Management going generally available, some SEC guidance that will be going live in the next couple of months, and a new capability for M365 called Copilot. ------------------------------------------- Youtube Video Link:  ⁠https://youtu.be/YnE_QBbu-_Q ------------------------------------...

On this week's episode, Adam and Andy talk about the NSA's guidance on how to secure your home network. This may be basic for most cybersecurity pros but there's a lot of great information here that maybe even the most seasoned veterans of cybersecurity can still pick up a couple pointers. ------------------------------------------- Youtube Video Link:  https://youtu.be/dsY3pmyXzVM ---...

On this week's episode, Adam and Andy talk about the new White House National Cybersecurity Strategy from the Biden-Harris administration. ------------------------------------------- Youtube Video Link:  ⁠ https://youtu.be/BxG155ryP5I ------------------------------------------- Documentation: https://www.whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-admini...

On this week's episode, Adam and Andy talk about the new Intune Suite. This is a new offering from Microsoft that will help bolster the security and streamline device management. Listen in to hear about the different components like Remote Help, Endpoint Privilege Management, Advanced Endpoint Analytics, and more! ------------------------------------------- Youtube Video Link:  https://youtu....

On this week's episode, Adam and Andy talk about the update to the Lastpass security incident. There are a lot of lessons to learn from the mistakes of Lastpass. Props to Lastpass on the disclosure of how the incidents unfolded. The hope is we can use this information to secure our own organizations. ------------------------------------------- Youtube Video Link:  https://youtu.be/FHjDvLoZXno...

On this week's episode, Adam and Andy talk about the different states of transformation when going through your journey to reduce dependency on on-premise infrastructure and Active Directory by shifting to the cloud. ------------------------------------------- Youtube Video Link:  https://youtu.be/44xEZCedbkI ------------------------------------------- Documentation: https://learn.microsoft.c...

On this week's episode, Adam and Andy talk through Alex Weinert's post about Identity Trends. Stay through the end to get your identity to-do list for this year! ------------------------------------------- Youtube Video Link:  https://youtu.be/RkxqTcXhz1A ------------------------------------------- Documentation: http://www.microsoft.com/en-us/security/blog/2023/01/26/2023-identity-security-t...

On this week's episode, Adam and Andy talk about Identity Governance and Administration (IGA). They talk about what makes up a good IGA program and advice on some policies and procedures. They also talk about Azure AD Governance and Entra Permissions Management which are some great solutions for an IGA program.  ------------------------------------------- Youtube Video Link:  https://you...

On this week's episode, Adam and Andy talk about ChatGPT. This innovative AI based chatbot is stirring up a storm of news. They'll talk about what it is and some great use cases for infosec professionals. ------------------------------------------- Youtube Video Link:  https://youtu.be/6Z7hkTkaTbc ------------------------------------------- Documentation: https://blogs.microsoft.com/blog/2023...

On this week's episode, Adam and Andy talk about the tech layoffs. Andy talks about his career and how he's dealt with being laid off multiple times. Listen in if you're interested in how to mentally deal with a layoff and how to prepare yourself to be ready for the worst. ------------------------------------------- Youtube Video Link:  https://youtu.be/mSfzd6KQ3qQ ---------------------------...

On this week's episode, Adam and Andy talk about what operational excellence means and how it can help bolster your cybersecurity at your organization. ------------------------------------------- Youtube Video Link:  https://youtu.be/1xhWJ5H0llI ------------------------------------------- Documentation: https://twitter.com/swiftonsecurity/status/1614055657728274433?s=46&t=yypBUE-BpQ3gfvl0...

On this week's episode, Adam and Andy do a catch up on news from December and talk about the retirement of Windows 7 ESU and 8.1. They also talk about Apple's Advanced Data Protection and the Lastpass breach. ------------------------------------------- Youtube Video Link:  https://youtu.be/ibnjen4KxTk ------------------------------------------- Documentation: https://petri.com/microsoft-ends-...

On this week's episode, Adam and Andy talk about Windows Defender Firewall. This often is overlooked, misconfigured, or part of legacy policies. With the start of a brand new year, it is a good time to take a look at your current firewall configurations and perhaps move them over to Intune as part of modern management. ------------------------------------------- Youtube Video Link:  https://y...