Ouça este podcast gratuitamente no aplicativo:
Baixe gratuitamente na App Store
radio.net
Sleeptimer
Guardar rádio
338 episódios
Binance’s $6.3 Billion Breach, Fake Job Interviews, and Entra’s Passkey Deadline
03/11/2026 | 47minSummary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the recent Binance hack, which resulted in the largest cryptocurrency theft on record, amounting to $6.3 billion. They delve into the details of the attack, including how it was executed, the response from Binance, and the attribution of the attack to North Korea. The conversation also explores the cybersecurity implications of such attacks, particularly focusing on social engineering tactics like fake job interviews that can lead to compromises. The hosts emphasize the importance of robust cybersecurity measures and the need for organizations to adapt to the evolving threat landscape. In this conversation, Andy Jaw and the Blue Security Podcast team discuss various strategies for enhancing cybersecurity, focusing on the importance of EDR detections, domain management, and the separation of workstations to mitigate risks. They delve into the significance of a healthy workplace culture in reducing employee turnover and the risks associated with business email compromise. The discussion also highlights the transition to passkeys in identity management and the need for organizations to adopt stronger security practices, including phish-resistant MFA and proper device management.
----------------------------------------------------
YouTube Video Link:
----------------------------------------------------
Documentation:
https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack
https://www.helpnetsecurity.com/2026/09/21/north-korean-hackers-contagious-interview-defenses/
https://www.bleepingcomputer.com/news/security/north-korean-hackers-adopt-clickfix-attacks-to-target-crypto-firms/
https://learn.microsoft.com/entra/identity/authentication/concept-sms-voice-retirement
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.comAwareness Month Became Patch Month: PHP2Shell, Stolen AI Keys, and a Broken CA
27/10/2026 | 44minSummary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss the critical cybersecurity incidents that emerged during Cybersecurity Awareness Month. They delve into the PHP vulnerabilities that were leaked, the Railway incident involving AI API keys, the Light LLM attack with poisoned releases, and the breach of the E Mudara certificate authority. The conversation emphasizes the importance of responsible vulnerability disclosure, the challenges faced by cybersecurity teams, and the need for continuous improvement in security practices.
----------------------------------------------------
YouTube Video Link: https://youtu.be/M_5pnEqUC14
----------------------------------------------------
Documentation:
https://www.php.net/archive/2026.php#2026-10-23-1
https://www.wiz.io/blog/litellm-compromised-steals-credentials
https://blog.railway.com/p/preliminary-report-october-security-incident
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.comAI Readiness for Defenders - What the Data Actually Shows
20/10/2026 | 48minSummary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss the concept of AI readiness for defenders in cybersecurity. They explore the findings from Zscaler's Threat Labs, focusing on the vulnerabilities that organizations face and the importance of having the right controls in place. The conversation delves into the Frontier AI Readiness Report, highlighting the speed at which AI can exploit vulnerabilities and the need for companies to enhance their security architecture. The hosts emphasize the significance of understanding the five pillars of AI security, managing blast radius, and improving identity security to protect against evolving threats. In this episode, the hosts discuss critical themes in cybersecurity, focusing on phishing resistance, AI governance, real-world attack case studies, data protection strategies, and the role of deception techniques in enhancing security. They emphasize the importance of user awareness in security controls, the need for effective governance of AI systems, and the necessity of implementing robust data protection measures. The conversation also highlights the significance of deception techniques in detecting and responding to AI-driven attacks, advocating for proactive measures to safeguard sensitive information.----------------------------------------------------
YouTube Video Link: https://youtu.be/uVPVNzerp4M
----------------------------------------------------
Documentation:
https://www.zscaler.com/resources/industry-reports/zscaler-threatlabz-frontier-ai-readiness-report.pdf
https://www.zscaler.com/resources/industry-reports/threatlabz-2026-phishing-initial-access-report.pdf
https://www.zscaler.com/press/new-zscaler-report-reveals-ai-assisted-attackers-move-massive-data-theft-executive-targeting
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.comMicrosoft Digital Defense Report 2026
13/10/2026 | 57minSummary
In this episode, Andy and Adam discuss the 2026 Microsoft Digital Defense Report, focusing on the evolving threat landscape shaped by AI. They explore how AI is changing the speed of attacks, the challenges of vulnerability management, and the risks associated with AI workloads. The conversation also highlights the importance of governance and best practices for managing AI agents in cybersecurity. In this episode, the hosts discuss the critical aspects of cybersecurity, focusing on foundational concepts of agent governance, the importance of identity management, and the evolving tactics of phishing attacks. They emphasize the need for fish resistant MFA, the rise of voice phishing, and the significance of patch velocity in maintaining security. The conversation also covers emerging threats like device code phishing and the vulnerabilities in supply chains and container security. The hosts provide actionable takeaways for security leaders to enhance their cybersecurity posture.
----------------------------------------------------
YouTube Video Link: https://youtu.be/NOogOoP8TRs
----------------------------------------------------
Documentation:
https://www.microsoft.com/en-us/security/security-insider/threat-landscape/2026-digital-defense-report
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.comStop phishing tests, Microsoft's Humanist AI Code of Conduct
06/10/2026 | 38minSummary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into two significant topics in cybersecurity: the effectiveness of phishing tests and Microsoft's new Humanist AI Code of Conduct. They critically analyze the traditional approach to phishing tests, likening them to outdated fire drills that do not enhance security. The discussion emphasizes the need for a shift in focus from punitive measures to fostering a culture of reporting and collaboration. The second part of the conversation introduces Microsoft's draft code of conduct for AI, which aims to ensure that AI systems remain under human control and adhere to ethical guidelines. The hosts express optimism about these developments while acknowledging the challenges that lie ahead in both cybersecurity practices and AI governance.
----------------------------------------------------
YouTube Video Link: https://youtu.be/4B4EHq5peFI
----------------------------------------------------
Documentation:
https://security.googleblog.com/2024/05/on-fire-drills-and-phishing-tests.html
https://microsoft.ai/code-of-conduct/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Mais podcasts de Tecnologia
Sobre Blue Security
A podcast for information security defenders (blue team) on best practices, tools, and implementation for enterprise security.
Site de podcastOuça Blue Security, Acquired e muitos outros podcasts de todo o mundo com o aplicativo o radio.net
Obtenha o aplicativo gratuito radio.net
- Guardar rádios e podcasts favoritos
- Transmissão via Wi-Fi ou Bluetooth
- Carplay & Android Audo compatìvel
- E ainda mais funções
Obtenha o aplicativo gratuito radio.net
- Guardar rádios e podcasts favoritos
- Transmissão via Wi-Fi ou Bluetooth
- Carplay & Android Audo compatìvel
- E ainda mais funções
Blue Security
Leia o código,
baixe o aplicativo,
ouça.
baixe o aplicativo,
ouça.
Brasil
