EducationHow ToTechnology

The Azure Security Podcast

Michael Howard, Sarah Young, Gladys Rodriguez and Mark Simos

A twice-monthly podcast dedicated to all things relating to Security, Privacy, Compliance and Reliability on the Microsoft Cloud Platform. Hosted by Microsoft security experts, Michael Howard, Sarah Young, Gladys Rodriguez and Mark Simos. https://aka.ms/azsecpod ©2020-2025 Michael Howard, Sarah Young, Gladys Rodriquez, and Mark Simos.

Play

Open in

22 episodes
monthly
Avg 38 min
English

Episodes 22

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.

S1 · E133
Yesterday · 33 min
Episode 133: News about the Azure Key Vault Family
In this episode, Michael and Mark talk to Keith Prunella about the latest news out of the Azure Key Vault family of services. We also cover news about Microsoft Defender for Cloud support for Azure Container Apps, Confidential VMs for Azure Linux, a post from Michael about Threat Modeling and Post Quantum Cryptography, Project Perception and some Microsoft Security Adoption Framework (SAF) updates. https://aka.ms/azsecpod
- Transcript
S1 · E132
August 26 · 40 min
Episode 132 - Windows Server 2025 Security
In this episode, Michael and Sarah talk to Orin Thomas about security improvements in Windows Server 2025. We realize this is an Azure podcast, but many people deploy Windows VMs! We also security news about CosmosDB, GitHub Copilot and Quantum development, ASP.NET and PQ hybrid TLS 1.3 and more! https://aka.ms/azsecpod
- Transcript
S1 · E131
July 27 · 34 min
Episode 131: What is MDASH?
In this packed episode, Michael, Sarah and Mark talk to Taesoo Kim about the new MDASH. We have lots of news this week, too, including Certificate Services in Window now support Post-Quantum ML-DSA certificates, Microsoft moving its Q-Day up to 2029, and lot more PQ news, Mark has a YouTube channel, securing AI agents, and a lot more! https:/aka.ms/azsecpod
- Transcript
S1 · E130
July 10 · 36 min
Episode 130: The Security Adoption Framework (SAF)
In this episode, Michael talks with podcast cohost Mark Simos about big updates to the Security Adoption Frame (SAF). We also cover news about Secure Boot for Trusted Launch VMs, and the Microsoft HSM Toolkit. https://aka.ms/azsecpod
- Transcript
S1 · E129
June 12 · 42 min
Episode 129: John Savill's Top of Mind
In this episode, Michael and Sarah interview a man who needs no introduction, John Savill, the CTO of America's Markets and Industries at Microsoft. In this episode, John talks about a few security items that are top of mind for him, and what he is hearing from customers. We also covered news from Microsoft Build, Michael's new book, as well as the latest post-quantum crypto news. https://aka.ms/azsecpod
- Transcript
S1 · E128
June 2 · 55 min
Episode 128: Post Quantum Cryptography
In this episode Mark talks with guest Jack Richins and co-host Michael Howard about post-quantum cryptography and the upcoming 'Q-Day'. Jack and Michael explain what steps Microsoft is taking and what steps customers can take to reduce exposure to this looming threat. This episode was prompted because Michael has moved from the Microsoft Red Team to the Post Quantum team in Azure Security. There is no security news in this episode. It's also the longest episode to date! https://aka.ms/azsecpod
- Transcript
April 30 · 35 min
Episode 127: Threat intel update and AI
In this episode, Michael, Sarah and Mark talk with Sherrod DeGrippo about some of the latest tactics and strategies used by modern threat actors, we also wander into the AI security weeds! We only have one news item related to Azure SQL databases. https://aka.ms/azsecpod
- Transcript
S1 · E126
March 21 · 36 min
Episode 126: Microsoft Baseline Security Mode
In this episode, Michael and Sarah talk to Sophie Ke and Dave Minasyan about Microsoft Baseline Security Mode, a new feature to help ease security settings. We also cover the latest Azure security news including Microsoft 365 E7, Microsoft 365 Copilot, Azure Blob Storage SFTP, Azure Database for PostgreSQL, and new Confidential VM types. https://aka.ms/azsecpod
- Transcript
S1 · E125
February 27 · 34 min
Episode 125: Origins of MITRE ATT&CK
In this episode Michael and Mark talk with guest Blake Strom about the origins of the MITRE ATT&CK framework, how it was developed, and how it has evolved over time. We also discuss how the framework is used in the industry and its impact on cybersecurity. We also discuss Azure Security news about Azure Monitor, Azure Application Gateway, AKS, Azure Front Door, AMD v6 Confidential VMs, and xxx https://aka.ms/azsecpod
- Transcript
S1 · E124
January 30 · 29 min
Episode 124: Microsoft Security Response Center for AI
In this episode Michael talks to Raji Vanninathan about the Microsoft Security Response Center for AI. We also cover security news about AKS Deployment Safeguards policies. https://aka.ms/azsecpod
- Transcript
S1 · E123
January 21 · 36 min
Episode 123: Agentic Identity
In this episode, Michael, Sarah and Mark talk to Nick Wryter about agentic AI identity, with a big focus on least privilege issues. We also cover news about: Microsoft AI Tour Azure Database for PostgresSQL Azure MCP Server for Azure Confidential Ledger Application Gateway, FIPS 140-2 and TLS Outbound internet access from VMs Azure NetApp Files and Ransomware protection Azure Cosmos DB Mirroring https://aka.ms/azsecpod
- Transcript
Dec 15, 2025 · 32 min
Episode 122: Microsoft Ignite 2025 Wrap-up
In this episode Michael, Sarah and Mark discuss security-related topics from the recent Microsoft Ignite 2025 event. Lots of AI-related security topics, including using AI for security and defending AI systems. Bitlocker, Windows and so much more! This is the last episode of 2025! It was a blast, and thanks for listening! We hope you find this material useful! https://aka.ms/azsecpod @AzureSecPod See you in 2026!
- Transcript
S1 · E121
Nov 21, 2025 · 47 min
Episode 121: New Open Group Security Standards Documentation
In this episode Michael and Sarah talk with co-host Mark Simos about new security standards documentation from the Open Group. It's a long episode but worth it! We also discuss Azure Security news about Private Endpoints, Azure Front Door, Azure WAF CAPTCHA, Azure Sphere, Private Link Service Direct Connect, Azure Integrated HSM, Azure Firewall pre-scaling and observed capacity metric, and Microsoft Ignite. https://aka.ms/azsecpod
- Transcript
S1 · E120
Oct 29, 2025 · 58 min
Episode 120: The Zero Trust Workshop (and so much more!)
In this episode Michael talks with guest Merill Fernando about the Zero Trust Workshop, but we also spend time talking about all things identity! Merill's final thought is pure gold, too! The only bit of news is about Azure SQL DB and how TDE key management during restore,
- Transcript
S1 · E119
Oct 9, 2025 · 39 min
Episode 119: Pedantic Security Wording and Taxonomies
In this episode Michael, Sarah and Mark talk with guest Ryen Macababbad, Principal Security Program Manager at Microsoft about her current work on standardizing security terminology and taxonomy across Microsoft. Also, how getting terminology right is important to security, especially for those with neurodiverse conditions, such as autism. We also discuss Azure Security news about the Microsoft AI tour Sarah is doing, Cosmos DB, and Michael goes on a rant about TLS certificate checking. https://aka.ms/azsecpod
- Transcript
S1 · E118
Sep 19, 2025 · 33 min
Episode 118 - Quantum Cryptography and Quantum Computing with Mark Russinovich
In this episode Michael and Mark talk with guest Mark Russinovich, Technical Fellow, Deputy CISO and Chief Technology Officer of Microsoft Azure about quantum cryptography and quantum computing and its implications for security and the future. NOTE: There's a portion where Mark and Michael talk about a quote made by Richard Feynman about understanding technical topics, but this is actually attributed to Albert Einstein. However, there is no definitive record of Einstein writing or saying this exact phrase in his published works or speeches. We decided to not cover any Azure Security news in this episode.
- Transcript
S1 · E117
Aug 29, 2025 · 43 min
Episode 117: Cloud Gaming Security
In this episode Michael and Sarah talk to Russ Rogers from the Xbox team about gaming security in general and Xbox specifically. This is the first time we have covered the topic! There is also so much news, we really list all the announcements here! It's about 9 mins of security news! https://aka.ms/azsecpod
- Transcript
S1 · E116
Jul 31, 2025 · 40 min
Episode 116: Microsoft Sentinel Data Lake
In this episode Michael, Sarah and Mark talk to Mark Kendrick about Microsoft Sentinel Data Lake. We also cover news about The Open Group - Roles and Glossary standards, Security Adoption Module 5 - Data Security, Microsoft Azure Cloud HSM, WAF and Containers, PostgreSQL and PowerBI, Azure Managed Lustre, and more. Also, Sarah mentions some Developer Security YouTube videos coming out from MS Build! https://aka.ms/azsecpod
- Transcript
S1 · E115
Jul 10, 2025 · 51 min
Episode 115: Security in Model Context Protocol (MCP)
In this episode, Michael, Sarah and Mark talk to Den Delimarksy about the current posture of Model Context Protocol. Den serves on the committee that oversees MCP. We also cover the latest security news about Azure Firewall, OpenTelemetry, Azure Front Door, Azure Database for PostgreSQL and Azure Kubernetes Service. https://aka.ms/azsecpod
- Transcript
S1 · E114
Jun 9, 2025 · 25 min
Episode 114: SQL Server 2025 Security Improvements
In this episode, Michael talks to Pieter Vanhove and Pratim Dasgupta about the new security changes in SQL Server 2025. The news includes updates on MCP, Private Link and Microsoft Build 2025 security sessions presented by Michael and Sarah. https://aka.ms/azsecpod
- Transcript

Showing 1–20 of 22 episodes