Explore every episode of the podcast The Azure Security Podcast

In this episode, Michael and Sarah talk to Orin Thomas about security improvements in Windows Server 2025. We realize this is an Azure podcast, but many people deploy Windows VMs!

We also security news about CosmosDB, GitHub Copilot and Quantum development, ASP.NET and PQ hybrid TLS 1.3 and more!

https://aka.ms/azsecpod

In this packed episode, Michael, Sarah and Mark talk to Taesoo Kim about the new MDASH. We have lots of news this week, too, including Certificate Services in Window now support Post-Quantum ML-DSA certificates, Microsoft moving its Q-Day up to 2029, and lot more PQ news, Mark has a YouTube channel, securing AI agents, and a lot more!

https:/aka.ms/azsecpod

In this episode, Michael talks with podcast cohost Mark Simos about big updates to the Security Adoption Frame (SAF).

We also cover news about Secure Boot for Trusted Launch VMs, and the Microsoft HSM Toolkit.

https://aka.ms/azsecpod

In this episode, Michael and Sarah interview a man who needs no introduction, John Savill, the CTO of America's Markets and Industries at Microsoft. In this episode, John talks about a few security items that are top of mind for him, and what he is hearing from customers.

We also covered news from Microsoft Build, Michael's new book, as well as the latest post-quantum crypto news.

https://aka.ms/azsecpod

In this episode Mark talks with guest Jack Richins and co-host Michael Howard about post-quantum cryptography and the upcoming 'Q-Day'.

Jack and Michael explain what steps Microsoft is taking and what steps customers can take to reduce exposure to this looming threat.

This episode was prompted because Michael has moved from the Microsoft Red Team to the Post Quantum team in Azure Security.

There is no security news in this episode. It's also the longest episode to date!

https://aka.ms/azsecpod

In this episode, Michael, Sarah and Mark talk with Sherrod DeGrippo about some of the latest tactics and strategies used by modern threat actors, we also wander into the AI security weeds!

We only have one news item related to Azure SQL databases.

https://aka.ms/azsecpod

In this episode, Michael and Sarah talk to Sophie Ke and Dave Minasyan about Microsoft Baseline Security Mode, a new feature to help ease security settings. We also cover the latest Azure security news including Microsoft 365 E7, Microsoft 365 Copilot, Azure Blob Storage SFTP, Azure Database for PostgreSQL, and new Confidential VM types.

https://aka.ms/azsecpod

In this episode Michael and Mark talk with guest Blake Strom about the origins of the MITRE ATT&CK framework, how it was developed, and how it has evolved over time. We also discuss how the framework is used in the industry and its impact on cybersecurity.

We also discuss Azure Security news about Azure Monitor, Azure Application Gateway, AKS, Azure Front Door, AMD v6 Confidential VMs, and xxx

https://aka.ms/azsecpod

In this episode Michael talks to Raji Vanninathan about the Microsoft Security Response Center for AI.

We also cover security news about AKS Deployment Safeguards policies.

https://aka.ms/azsecpod

In this episode, Michael, Sarah and Mark talk to Nick Wryter about agentic AI identity, with a big focus on least privilege issues. We also cover news about:

• Microsoft AI Tour
• Azure Database for PostgresSQL
• Azure MCP Server for Azure Confidential Ledger
• Application Gateway, FIPS 140-2 and TLS
• Outbound internet access from VMs
• Azure NetApp Files and Ransomware protection
• Azure Cosmos DB Mirroring

https://aka.ms/azsecpod

In this episode Michael, Sarah and Mark discuss security-related topics from the recent Microsoft Ignite 2025 event. Lots of AI-related security topics, including using AI for security and defending AI systems. Bitlocker, Windows and so much more!

This is the last episode of 2025! It was a blast, and thanks for listening! We hope you find this material useful!

https://aka.ms/azsecpod

@AzureSecPod

See you in 2026!

In this episode Michael and Sarah talk with co-host Mark Simos about new security standards documentation from the Open Group. It's a long episode but worth it!

We also discuss Azure Security news about Private Endpoints, Azure Front Door, Azure WAF CAPTCHA, Azure Sphere, Private Link Service Direct Connect, Azure Integrated HSM, Azure Firewall pre-scaling and observed capacity metric, and Microsoft Ignite.

https://aka.ms/azsecpod

In this episode Michael talks with guest Merill Fernando about the Zero Trust Workshop, but we also spend time talking about all things identity! Merill's final thought is pure gold, too!

The only bit of news is about Azure SQL DB and how TDE key management during restore,

In this episode Michael, Sarah and Mark talk with guest Ryen Macababbad, Principal Security Program Manager at Microsoft about her current work on standardizing security terminology and taxonomy across Microsoft.

Also, how getting terminology right is important to security, especially for those with neurodiverse conditions, such as autism.

We also discuss Azure Security news about the Microsoft AI tour Sarah is doing, Cosmos DB, and Michael goes on a rant about TLS certificate checking.

https://aka.ms/azsecpod

In this episode Michael and Mark talk with guest Mark Russinovich, Technical Fellow, Deputy CISO and Chief Technology Officer of Microsoft Azure about quantum cryptography and quantum computing and its implications for security and the future.

NOTE: There's a portion where Mark and Michael talk about a quote made by Richard Feynman about understanding technical topics, but this is actually attributed to Albert Einstein. However, there is no definitive record of Einstein writing or saying this exact phrase in his published works or speeches.

We decided to not cover any Azure Security news in this episode.

In this episode Michael and Sarah talk to Russ Rogers from the Xbox team about gaming security in general and Xbox specifically. This is the first time we have covered the topic! There is also so much news, we really list all the announcements here! It's about 9 mins of security news!

https://aka.ms/azsecpod

In this episode Michael, Sarah and Mark talk to Mark Kendrick about Microsoft Sentinel Data Lake. We also cover news about The Open Group - Roles and Glossary standards, Security Adoption Module 5 - Data Security, Microsoft Azure Cloud HSM, WAF and Containers, PostgreSQL and PowerBI, Azure Managed Lustre, and more. Also, Sarah mentions some Developer Security YouTube videos coming out from MS Build!

https://aka.ms/azsecpod

In this episode, Michael, Sarah and Mark talk to Den Delimarksy about the current posture of Model Context Protocol. Den serves on the committee that oversees MCP.

We also cover the latest security news about Azure Firewall, OpenTelemetry, Azure Front Door, Azure Database for PostgreSQL and Azure Kubernetes Service.

https://aka.ms/azsecpod

In this episode, Michael talks to Pieter Vanhove and Pratim Dasgupta about the new security changes in SQL Server 2025.

The news includes updates on MCP, Private Link and Microsoft Build 2025 security sessions presented by Michael and Sarah.

https://aka.ms/azsecpod

In this episode, Michael, Sarah, and Mark talk to Craig Nelson, VP of the Microsoft Red Team about how the Red Team works to help secure Microsoft and its customers.

In life, there are things you know you know, things you know you don't know, and finally, things you don't know you don't know. This episode is full of the latter.

We also cover security news about LLMs and MCP, TLS 1.1 and 1.0 deprecation, Private End Point Improvements, Containers and more.

https://aka.ms/azsecpod

In this episode Michael talks with guest Ran Munsch, Principal Product Manager at Microsoft about Security Copilot and Security Copilot Agents.

We also discuss Azure Security news about System.Data.SqlClient, April 2025 Secue Future Initiative progress report, Azure Database for PosrgreSQL, Azure DevTest Labs, VNets, Front Door WAF CAPTCHA, API management and more.

https://aka.ms/azsecpod

In this episode Michael and Sarah talk with guest Amanda Minnich about securing agentic AI systems, the security challenges they face, and how to secure them.

We also discuss Azure Security news about Azure File Sync, Docker support in Azure and a new series of Secure Future Initiative videos with appearances from Michael, Sarah, and various guests.

In this episode Michael and Gladys talk to Sharon Chahal who is a Principal Program Manager in the Identity team at Microsoft about monitoring and auditing when building GenAI applications. We also cover other related topics.

Michael and Gladys cover the latest security news about API Security Posture Management, Azure Key Vault in China, Azure Data Studio retirement, new least privilege permissions in Graph and more.

https://aka.ms/azsecpod

In this episode, Michael, Gladys and Mark talk to guest Bailey Bercik about the problem of overpermissioning and how to use Microsoft Entra Permissions Management to identify and manage over-permissioned identities in multi-cloud environments to reduce security risks, especially for AI apps.

We also cover the latest security news about AI red teaming, Azure SQL DB logging, Azure Confidential Ledger, Star Blizzard spear-phishing campaign and CISA Zero Trust Maturity Model.

https://aka.ms/azsecpod

In this episode Michael, Gladys, Mark and Sarah talk to guest Diana Vicezar from the Microsoft Entra team about security Generative AI applications. Note, this is a short, simple intro episode to introduce three follow-on episodes.

We also cover security news about TLS 1.3 and Azure Event Grid, big updates to Microsoft Defender for Cloud, Azure Database for MySQL, SQL Managed Instance and Confidential Ledger.

Happy New Year!

In this episode Michael, Sarah and Mark talk to Maxime Bombardier and Emily Blundo about the Secure by default and Copilot overshare blueprints.

We also cover news about Always Encrypted Assessment in SQL Server Management Studio, MVP Summit, mapping Entra to the Open Group standard for Adaptive Access, and various CISO Workshop topics!

https://aka.ms/azsecpod

In this episode, Michael, Mark, and Sarah go over what they found interesting from Microsoft Ignite. Mark has a discount code for his Zero Trust Book, too.

https://aka.ms/aszecpod

In this episode, Michael, Sarah, and Mark talk to Merill Fernando about a set of open source tools he and his team have developed to help people understand their Azure and Entra ID security postures.

We also cover news about Fabric, TLS 1.o and 1,1 retirement, Microsoft Ignite, FIDO2, Confidential Containers and Red Hat OpenShift and various Zero Trust news.

https://aka.ms/azsecpod

In this episode, Michael talks to Nic Fillingham about the recent Microsoft Bluehat Security conference held at the Microsoft HQ in Redmond, WA. We also discuss how to tell the NZ and Australian accents apart. This alone is worth listening to :)

This is a follow-on from episode 103 when we talked about what was coming up for Bluehat.

No news, as this is a special, smaller episode. It's also the least edited; other than some ums and ers getting removed and a small retake, the result is as was recorded. Let us know what you think, this feels a little more 'chatty' and personable.

https://aka.ms/azsecpod

In this episode we speak to Nic Fillingham who is a Senior Program Manager at Microsoft about security conferences and mainly about the Microsoft Bluehat conference he runs.

We also discuss security about PostgreSQL, Cosmos DB, IP address management, containers and AI Studio.

https://aka.ms/azsecpod

In this episode Michael and Sarah talk to Nestori Syynimaa about Entra ID security and his purple-team tool, AADInternals.

We also cover the latest security news about Secure Future Initiative (SFI), MFA for Azure Portal, Playright, WordPress, NSG, Bastion, Azure Functions, MS Ignite, App Service, Defender for Cloud, Containers, Azure Monitor, AKS, Trustworthy AI and Azure AI Content Safety.

https://aka.ms/azsecpod

In this episode Michael, Mark and Sarah talk to Matt Zorich and Waymon Ho of the Microsoft GHOST team. We discuss the role GHOST plays in protecting both Microsoft and our customers from nation-state threat actors.

We also cover the latest security news about Event Grid, NetApp Files, Chaos Studio and AKS.

https://aka.ms/azsecpod

In this episode Michael, Sarah, Gladys and Mark talk about our careers so far, explain some funny stories and our wishes for a more secure future.

Our stories

• Mark at the start
• Sarah 4m 5s
• Gladys 6m 50s
• Michael 12m 22s

Funny Stories

• Mark 19m 31s
• Sarah 20m 33s
• Gladys 22m 46s
• Michael 24m 39s

Career Advice

• Mark 26m 58s
• Sarah 29m 18s
• Gladys 31m 48s
• Michael 34m 40s

Future

• Mark 36m 27s
• Sarah 38m 33s
• Gladys 40m 34s
• Michael 42m 24s

Behind the Scenes

• Mark 43m 36s

In this (late) episode, we chat to Andrew McMurray, a Principal Product Manager at Microsoft about securing Copilot data as well as how Purview can play a role in doing so. We also cover news about MFA access to the Azure Portal (Important), PostgreSQL, Entra ID and Windows authn metadata, Backup Vaults, Conditional Access Policy, ADFS, and Azure Container Apps.

In this episode Michael and Gladys talk with guest Dave Weston about Secure Future Initiative and the growing use of the Rust programming language at Microsoft.

On the topic of Rust, Michael and Dave nerd out, and we make no apologies!

https://aka.ms/azsecpod

In this episode Michael and Sarah talk with guest Richard Diver about securing solutions that use AI and LLMs. Richard also talks about his new book on AI Security, and Michael and Richard talk about what it takes to write a book.

We also discuss Azure Security news about Chaos Studio, API Management, Azure Bastion, Front Door, AKS and Copilot for Security and lots more!

Also note, we have changed the URL for the show notes web site, so please use this from now on: https://aka.ms/azsecpod.

In this episode Michael, Sarah, and Mark talk with guest (and good friend of the podcast) Yuri Diogenes about CNAPP - Cloud Native Application Protection Platform and announce the release of a CNAPP e-book.

In this episode Michael, Sarah and Mark talk with guest Sherrod DeGrippo, Director of Threat Intelligence Strategy at Microsoft about the current state of Threat Intelligence.

We also discuss Azure Security news about Tampa BSides, Virtual Networks, Azure Database for MySQL and PostgreSQL, and SQL Server on Linux.

The Microsoft Azure Security Podcast (azsecuritypodcast.net)

In this episode Michael, Sarah and Mark talk with guest Ryan Munsch about the newly released Copilot for Security. We also discuss Azure Security news about Azure SQL DB, SSMS 20, Change Actor, Copilot for Azure SQL DB, Azure Container Apps, AI Prompt Shields, AI Groundedness Detection and BlueHat India and Israel.

New tab (azsecuritypodcast.net)

In this episode Michael, Sarah, and Mark talk with guests Tony Rice and David Ornstein about insights into the Continuous SDL (Security Development Lifecycle).

We also discussed Azure Security news about Azure Key Vault, Cloud PKI, OAuth2, updated SQL Server password verifiers, Memory Safety and Azure SQL DB.

The Microsoft Azure Security Podcast (azsecuritypodcast.net)

In this episode Michael and Sarah talk to Martin Abbott about the Global Azure event that starts soon, https://globalazure.net/. We talk about how to successfully fill out a Call for Papers (CFP) so YOU can present to a global audience about security topics that interest you. We also cover security news SQL Always Encrypted, SymCrypt and Rust, SQL Security Fundamentals, and free Security 101 material.

In this episode, Michael talks with Rigel Carlson from the Chaos Studio development team about Chaos Studio through a security lens. Michael also discusses news about Midnight Blizzard and \has some advice about using Azure's DefaultAzureCredential()

The Microsoft Azure Security Podcast (azsecuritypodcast.net)

This is a MUST LISTEN episode for anyone involved in products using AI, or for people who want to learn some of the latest attacks against large language models. Make sure you peruse the exhaustive list of AI security links at The Microsoft Azure Security Podcast (azsecuritypodcast.net),

We cover news about Azure SQL DB, Trusted VMs, NetApp Files, Azure Load Testing and Front Door. Mark covers further details about Zero Trust and the CISO Workshop.

In this episode we look back at what stood out for each of us and what we go up to. We also cover something not security-related, but of interest to all your geeks out there - EQ vs IQ. So make sure you stay until the end!

In this episode Michael talks with colleagues in the Azure Data Platform Security Team, Sharath Unni and Raul Garcia about securing Azure SQL DB, SQL MI and SQL Server through the eyes of an attacker.

In this episode, Michael talks with his colleagues Pieter Vanhove and Mirek Sztajno about updates to Always Encrypted and Transparent Data Encryption in SQL Server and Azure SQL DB.