Sign up to save your podcasts
Or
Share Blue Security
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Blue Security
By Andy Jaw & Adam BrewerTechnology
Blue Security episodes
- A Personal AI Agent on a Pentagon Network - Securing AI on the Endpoint
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the recent Binance hack, which resulted in the largest cryptocurrency theft on record, amounting to $6.3 billion. They delve into the details of the attack, including how it was executed, the response from Binance, and the attribution of the attack to North Korea. The conversation also explores the cybersecurity implications of such attacks, particularly focusing on social engineering tactics like fake job interviews that can lead to compromises. The hosts emphasize the importance of robust cybersecurity measures and the need for organizations to adapt to the evolving threat landscape. In this conversation, Andy Jaw and the Blue Security Podcast team discuss various strategies for enhancing cybersecurity, focusing on the importance of EDR detections, domain management, and the separation of workstations to mitigate risks. They delve into the significance of a healthy workplace culture in reducing employee turnover and the risks associated with business email compromise. The discussion also highlights the transition to passkeys in identity management and the need for organizations to adopt stronger security practices, including phish-resistant MFA and proper device management.
----------------------------------------------------
YouTube Video Link: https://youtu.be/7mNjkJVHVYk
----------------------------------------------------
Documentation:
https://fortune.com/2026/11/03/binance-hack-details-linkedin/
https://www.wired.com/story/a-defense-contractor-gave-their-personal-ai-agent-access-to-a-secure-pentagon-system/
https://learn.microsoft.com/defender-endpoint/whats-new-in-microsoft-defender-endpoint#october-2026
https://www.zscaler.com/blogs/product-insights/ai-endpoint-security-closes-zero-trust-gap
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
49 min - Binance’s $6.3 Billion Breach, Fake Job Interviews, and Entra’s Passkey Deadline
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the recent Binance hack, which resulted in the largest cryptocurrency theft on record, amounting to $6.3 billion. They delve into the details of the attack, including how it was executed, the response from Binance, and the attribution of the attack to North Korea. The conversation also explores the cybersecurity implications of such attacks, particularly focusing on social engineering tactics like fake job interviews that can lead to compromises. The hosts emphasize the importance of robust cybersecurity measures and the need for organizations to adapt to the evolving threat landscape. In this conversation, Andy Jaw and the Blue Security Podcast team discuss various strategies for enhancing cybersecurity, focusing on the importance of EDR detections, domain management, and the separation of workstations to mitigate risks. They delve into the significance of a healthy workplace culture in reducing employee turnover and the risks associated with business email compromise. The discussion also highlights the transition to passkeys in identity management and the need for organizations to adopt stronger security practices, including phish-resistant MFA and proper device management.
----------------------------------------------------
YouTube Video Link:
----------------------------------------------------
Documentation:
https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack
https://www.helpnetsecurity.com/2026/09/21/north-korean-hackers-contagious-interview-defenses/
https://www.bleepingcomputer.com/news/security/north-korean-hackers-adopt-clickfix-attacks-to-target-crypto-firms/
https://learn.microsoft.com/entra/identity/authentication/concept-sms-voice-retirement
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
48 min - Awareness Month Became Patch Month: PHP2Shell, Stolen AI Keys, and a Broken CA
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss the critical cybersecurity incidents that emerged during Cybersecurity Awareness Month. They delve into the PHP vulnerabilities that were leaked, the Railway incident involving AI API keys, the Light LLM attack with poisoned releases, and the breach of the E Mudara certificate authority. The conversation emphasizes the importance of responsible vulnerability disclosure, the challenges faced by cybersecurity teams, and the need for continuous improvement in security practices.
----------------------------------------------------
YouTube Video Link: https://youtu.be/M_5pnEqUC14
----------------------------------------------------
Documentation:
https://www.php.net/archive/2026.php#2026-10-23-1
https://www.wiz.io/blog/litellm-compromised-steals-credentials
https://blog.railway.com/p/preliminary-report-october-security-incident
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
45 min - AI Readiness for Defenders - What the Data Actually Shows
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss the concept of AI readiness for defenders in cybersecurity. They explore the findings from Zscaler's Threat Labs, focusing on the vulnerabilities that organizations face and the importance of having the right controls in place. The conversation delves into the Frontier AI Readiness Report, highlighting the speed at which AI can exploit vulnerabilities and the need for companies to enhance their security architecture. The hosts emphasize the significance of understanding the five pillars of AI security, managing blast radius, and improving identity security to protect against evolving threats. In this episode, the hosts discuss critical themes in cybersecurity, focusing on phishing resistance, AI governance, real-world attack case studies, data protection strategies, and the role of deception techniques in enhancing security. They emphasize the importance of user awareness in security controls, the need for effective governance of AI systems, and the necessity of implementing robust data protection measures. The conversation also highlights the significance of deception techniques in detecting and responding to AI-driven attacks, advocating for proactive measures to safeguard sensitive information.----------------------------------------------------
YouTube Video Link: https://youtu.be/uVPVNzerp4M
----------------------------------------------------
Documentation:
https://www.zscaler.com/resources/industry-reports/zscaler-threatlabz-frontier-ai-readiness-report.pdf
https://www.zscaler.com/resources/industry-reports/threatlabz-2026-phishing-initial-access-report.pdf
https://www.zscaler.com/press/new-zscaler-report-reveals-ai-assisted-attackers-move-massive-data-theft-executive-targeting
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
49 min - Microsoft Digital Defense Report 2026
Summary
In this episode, Andy and Adam discuss the 2026 Microsoft Digital Defense Report, focusing on the evolving threat landscape shaped by AI. They explore how AI is changing the speed of attacks, the challenges of vulnerability management, and the risks associated with AI workloads. The conversation also highlights the importance of governance and best practices for managing AI agents in cybersecurity. In this episode, the hosts discuss the critical aspects of cybersecurity, focusing on foundational concepts of agent governance, the importance of identity management, and the evolving tactics of phishing attacks. They emphasize the need for fish resistant MFA, the rise of voice phishing, and the significance of patch velocity in maintaining security. The conversation also covers emerging threats like device code phishing and the vulnerabilities in supply chains and container security. The hosts provide actionable takeaways for security leaders to enhance their cybersecurity posture.
----------------------------------------------------
YouTube Video Link: https://youtu.be/NOogOoP8TRs
----------------------------------------------------
Documentation:
https://www.microsoft.com/en-us/security/security-insider/threat-landscape/2026-digital-defense-report
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
58 min - Stop phishing tests, Microsoft's Humanist AI Code of Conduct
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into two significant topics in cybersecurity: the effectiveness of phishing tests and Microsoft's new Humanist AI Code of Conduct. They critically analyze the traditional approach to phishing tests, likening them to outdated fire drills that do not enhance security. The discussion emphasizes the need for a shift in focus from punitive measures to fostering a culture of reporting and collaboration. The second part of the conversation introduces Microsoft's draft code of conduct for AI, which aims to ensure that AI systems remain under human control and adhere to ethical guidelines. The hosts express optimism about these developments while acknowledging the challenges that lie ahead in both cybersecurity practices and AI governance.
----------------------------------------------------
YouTube Video Link: https://youtu.be/4B4EHq5peFI
----------------------------------------------------
Documentation:
https://security.googleblog.com/2024/05/on-fire-drills-and-phishing-tests.html
https://microsoft.ai/code-of-conduct/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
39 min - Why Your Cloud Region Is Now a Physical Attack Surface
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss two significant cybersecurity incidents: the emergence of AI API drain attacks and the implications of military strikes on AWS data centers. They explore how attackers can exploit API keys to run up costs without directly breaching networks and the lessons learned from AWS's experience with data loss due to drone strikes. The conversation emphasizes the evolving landscape of cybersecurity threats and the importance of robust threat modeling and data management practices.
----------------------------------------------------
YouTube Video Link: https://youtu.be/JWzG46q898c
----------------------------------------------------
Documentation:
https://cybernews.com/security/hackers-advertise-ai-token-draining-service/
https://arstechnica.com/gadgets/2026/09/iran-strikes-on-amazon-data-centers-caused-permanent-loss-of-customer-data/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
30 min - Anthropic Threat Intelligence Report
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Anthropic's latest threat intelligence report, highlighting the evolving landscape of cyber threats facilitated by AI technologies. They explore various harm areas, including cyber operations, influence operations, surveillance, and conventional weapons development, emphasizing how AI is democratizing sophisticated attack methods and enabling new forms of manipulation and surveillance. In this episode, the hosts delve into the complexities of AI governance, the importance of creativity in utilizing AI, and the necessity for diversity in cybersecurity. They discuss the dual-use dilemmas of biological research, the exploitation of AI for scams, and the illicit distillation of AI models. The conversation emphasizes the evolving landscape of AI threats and the need for pragmatic approaches to security in a rapidly changing technological environment.
----------------------------------------------------
YouTube Video Link: https://youtu.be/pB3KxTkNDWU
----------------------------------------------------
Documentation:
https://www.anthropic.com/threat-intelligence-report-september-2026
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
54 min - LG TV's data collection and Crowdstrike Zero Day
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam celebrate six years of consistent podcasting, reflecting on their journey and the evolution of their roles in the tech industry. They delve into a significant controversy surrounding LG TVs, discussing privacy concerns related to data collection and microphone usage. The conversation transitions into smart home and IoT security, where they provide practical strategies for securing connected devices and protecting personal data. In this episode, the hosts discuss the importance of securing IoT devices through VLANs, the ongoing threat posed by the hacker known as Nightmare Eclipse, and the implications of a new vulnerability discovered in CrowdStrike's Falcon product. They also delve into the ethical considerations surrounding vulnerability disclosure, emphasizing the need for coordinated responses to prevent collateral damage in the cybersecurity landscape.
----------------------------------------------------
YouTube Video Link: https://youtu.be/hxPShoN-Rb8
----------------------------------------------------
Documentation:
https://www.techradar.com/televisions/lg-tvs-collect-far-more-data-on-you-than-youd-expect-says-new-report-including-logging-microphone-audio-while-on-standby
https://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
45 min - LiteLLM Breach, an Entra Connect Deadline, and 153 Million Leaked IDs
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into significant cybersecurity topics, including the Light LLM breach, a supply chain attack that affected thousands of organizations, and an urgent reminder for Microsoft Entra Connect users to upgrade their systems. The discussion emphasizes the importance of understanding the origins of security breaches, the need for ongoing credential management, and the critical nature of timely software updates to maintain security integrity. In this conversation, Adam and Andy discuss the implications of Microsoft's Secure Future Initiative, emphasizing the need for organizations to prepare for breaking changes in software and services. They also delve into the ID Scan.net leak, highlighting the risks associated with compromised driver's licenses and the potential for identity theft. The discussion concludes with a focus on data retention practices and the importance of vendor risk management in safeguarding sensitive information.
----------------------------------------------------
YouTube Video Link: https://youtu.be/fHGJBUazeOI
----------------------------------------------------
Documentation:
https://docs.litellm.ai/blog/security-update-march-2026
https://thehackernews.com/2026/08/malicious-litellm-releases-tied-to.html
https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/reference-connect-version-history
https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
46 min
About Blue Security
From the publisher's feed
A podcast for information security defenders (blue team) on best practices, tools, and implementation for enterprise security.
More shows like Blue Security
Acquired
4,898 Listeners
Pivot
9,736 Listeners
Security Now (Audio)
2,009 Listeners
WSJ Tech News Briefing
1,637 Listeners
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
372 Listeners
Risky Business
373 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
649 Listeners
CyberWire Daily
1,023 Listeners
Smashing Security
318 Listeners
Microsoft Cloud IT Pro Podcast
66 Listeners
Cybersecurity Today
178 Listeners
Defense in Depth
73 Listeners
The Azure Security Podcast
25 Listeners
Cybersecurity Headlines
137 Listeners
Entra.Chat
5 Listeners