Sign up to save your podcasts
Or
Share Blue Security
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Blue Security
By Andy Jaw & Adam BrewerTechnology
Blue Security episodes
- Stop phishing tests, Microsoft's Humanist AI Code of Conduct
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into two significant topics in cybersecurity: the effectiveness of phishing tests and Microsoft's new Humanist AI Code of Conduct. They critically analyze the traditional approach to phishing tests, likening them to outdated fire drills that do not enhance security. The discussion emphasizes the need for a shift in focus from punitive measures to fostering a culture of reporting and collaboration. The second part of the conversation introduces Microsoft's draft code of conduct for AI, which aims to ensure that AI systems remain under human control and adhere to ethical guidelines. The hosts express optimism about these developments while acknowledging the challenges that lie ahead in both cybersecurity practices and AI governance.
----------------------------------------------------
YouTube Video Link: https://youtu.be/4B4EHq5peFI
----------------------------------------------------
Documentation:
https://security.googleblog.com/2024/05/on-fire-drills-and-phishing-tests.html
https://microsoft.ai/code-of-conduct/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
39 min - Why Your Cloud Region Is Now a Physical Attack Surface
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss two significant cybersecurity incidents: the emergence of AI API drain attacks and the implications of military strikes on AWS data centers. They explore how attackers can exploit API keys to run up costs without directly breaching networks and the lessons learned from AWS's experience with data loss due to drone strikes. The conversation emphasizes the evolving landscape of cybersecurity threats and the importance of robust threat modeling and data management practices.
----------------------------------------------------
YouTube Video Link: https://youtu.be/JWzG46q898c
----------------------------------------------------
Documentation:
https://cybernews.com/security/hackers-advertise-ai-token-draining-service/
https://arstechnica.com/gadgets/2026/09/iran-strikes-on-amazon-data-centers-caused-permanent-loss-of-customer-data/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
30 min - Anthropic Threat Intelligence Report
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Anthropic's latest threat intelligence report, highlighting the evolving landscape of cyber threats facilitated by AI technologies. They explore various harm areas, including cyber operations, influence operations, surveillance, and conventional weapons development, emphasizing how AI is democratizing sophisticated attack methods and enabling new forms of manipulation and surveillance. In this episode, the hosts delve into the complexities of AI governance, the importance of creativity in utilizing AI, and the necessity for diversity in cybersecurity. They discuss the dual-use dilemmas of biological research, the exploitation of AI for scams, and the illicit distillation of AI models. The conversation emphasizes the evolving landscape of AI threats and the need for pragmatic approaches to security in a rapidly changing technological environment.
----------------------------------------------------
YouTube Video Link: https://youtu.be/pB3KxTkNDWU
----------------------------------------------------
Documentation:
https://www.anthropic.com/threat-intelligence-report-september-2026
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
54 min - LG TV's data collection and Crowdstrike Zero Day
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam celebrate six years of consistent podcasting, reflecting on their journey and the evolution of their roles in the tech industry. They delve into a significant controversy surrounding LG TVs, discussing privacy concerns related to data collection and microphone usage. The conversation transitions into smart home and IoT security, where they provide practical strategies for securing connected devices and protecting personal data. In this episode, the hosts discuss the importance of securing IoT devices through VLANs, the ongoing threat posed by the hacker known as Nightmare Eclipse, and the implications of a new vulnerability discovered in CrowdStrike's Falcon product. They also delve into the ethical considerations surrounding vulnerability disclosure, emphasizing the need for coordinated responses to prevent collateral damage in the cybersecurity landscape.
----------------------------------------------------
YouTube Video Link: https://youtu.be/hxPShoN-Rb8
----------------------------------------------------
Documentation:
https://www.techradar.com/televisions/lg-tvs-collect-far-more-data-on-you-than-youd-expect-says-new-report-including-logging-microphone-audio-while-on-standby
https://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
45 min - LiteLLM Breach, an Entra Connect Deadline, and 153 Million Leaked IDs
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into significant cybersecurity topics, including the Light LLM breach, a supply chain attack that affected thousands of organizations, and an urgent reminder for Microsoft Entra Connect users to upgrade their systems. The discussion emphasizes the importance of understanding the origins of security breaches, the need for ongoing credential management, and the critical nature of timely software updates to maintain security integrity. In this conversation, Adam and Andy discuss the implications of Microsoft's Secure Future Initiative, emphasizing the need for organizations to prepare for breaking changes in software and services. They also delve into the ID Scan.net leak, highlighting the risks associated with compromised driver's licenses and the potential for identity theft. The discussion concludes with a focus on data retention practices and the importance of vendor risk management in safeguarding sensitive information.
----------------------------------------------------
YouTube Video Link: https://youtu.be/fHGJBUazeOI
----------------------------------------------------
Documentation:
https://docs.litellm.ai/blog/security-update-march-2026
https://thehackernews.com/2026/08/malicious-litellm-releases-tied-to.html
https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/reference-connect-version-history
https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
46 min - AI 101 - Understanding core AI terminology
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam delve into the complexities of AI in cybersecurity, focusing on the adoption rates and understanding of various AI technologies. They discuss the differences between large language models (LLMs) and small language models (SLMs), the importance of APIs, and the role of harnesses and agents in executing AI tasks. The conversation highlights the need for clarity in terminology and the varying levels of AI adoption across different regions and industries. In this episode, the hosts delve into the intricacies of AI agents, skills, and the MCP (Model-Connect-Protocol) as a universal connector for AI tools. They discuss the importance of understanding the attack surface created by these integrations and the role of Retrieval Augmented Generation (RAG) in enhancing AI accuracy. The conversation emphasizes the need for governance and best practices in deploying AI solutions responsibly while recognizing the significant productivity gains they can offer.
----------------------------------------------------
YouTube Video Link: https://youtu.be/31WI5iFFLog
----------------------------------------------------
Documentation:
https://www.sans.org/press/announcements/ai-use-cybersecurity-jumped-from-50-to-78-year-ai-related-failures-rose-sharply-too-new-sans-institute-survey-reveals-governance-gap
https://www.digitalapplied.com/blog/mcp-adoption-statistics-2026-model-context-protocol
https://learn.microsoft.com/en-us/copilot/security/plugin-mcp
https://www.zscaler.com/es/resources/white-papers/zscaler-ai-guard-detectors-inline-protection-for-ai.pdf
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
55 min - DEF CON Is Not Cooked; Why AI Won't Replace Cybersecurity
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the implications of AI on cybersecurity, particularly in light of recent comments from Jason Haddock regarding the future of the industry. They explore the notion that AI will not replace cybersecurity but rather enhance it by reducing the time needed to identify vulnerabilities. The conversation also delves into the evolving nature of entry-level roles in cybersecurity, emphasizing the need for new training methods and the importance of human ingenuity in a rapidly changing landscape. Finally, they address the misconceptions surrounding AI's capabilities and the complexities of implementing it in enterprise environments. In this conversation, Adam Brewer and Andy Jaw explore the complexities of AI adoption in enterprise environments, the challenges faced by cybersecurity professionals, and the evolving landscape of technology. They discuss the disparity between the capabilities of early adopters and the average enterprise, the importance of human expertise in leveraging AI, and the asymmetrical advantages that attackers may gain from AI advancements. The conversation emphasizes the need for a balanced perspective on AI's role in cybersecurity, advocating for a realistic understanding of its capabilities and limitations.
----------------------------------------------------
YouTube Video Link: https://youtu.be/SsLKJABOeGc
----------------------------------------------------
Documentation:
https://x.com/Jhaddix/status/2088299917370601734
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
47 min - Evil Twins, AI Agents, and Cyber Privateers
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant cybersecurity topics, including an evil twin attack on a Delta flight, the emergence of fully autonomous cyber attacks, and a new policy allowing private companies to conduct offensive cyber operations against transnational criminal organizations. They explore the implications of these events on the cybersecurity landscape and the responsibilities of professionals in the field.
----------------------------------------------------
YouTube Video Link: https://youtu.be/fPGObiqf0SI
----------------------------------------------------
Documentation:
https://arstechnica.com/information-technology/2026/08/def-con-crowd-suspected-in-fake-hotspot-attack-on-delta-flight/
https://www.cnn.com/2026/08/13/tech/china-taiwan-ai-agent-cyberattack-intl-hnk
https://www.whitehouse.gov/presidential-actions/2026/08/expanding-capabilities-to-combat-transnational-cyber-enabled-crime/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
41 min - Critical infrastructure hacks and rogue AI agents
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the recent cyberattacks on water systems in Minnesota, attributed to Iran-linked hackers. They explore the vulnerabilities of programmable logic controllers (PLCs) and the broader implications for operational technology (OT) security. The conversation delves into the differences between Iranian and Chinese cyber threats, the limitations of traditional security measures, and the cultural challenges faced by cybersecurity professionals in securing OT environments. The episode concludes with key takeaways and recommendations for improving security in municipal utilities. The conversation delves into recent AI security incidents involving OpenAI and Anthropic, highlighting the implications of these breaches and the need for better operational discipline and regulatory frameworks. The speakers discuss the maturity of AI companies, the human errors leading to security lapses, and the potential risks associated with AI models. They emphasize the importance of treating AI testing environments with the same seriousness as production environments and call for standardized incident reporting in the AI sector.
----------------------------------------------------
YouTube Video Link: https://youtu.be/6svC857Z_Wg
----------------------------------------------------
Documentation:
https://cybernews.com/security/minnesota-water-systems-cyberattack-iranian-hackers/
https://thehackernews.com/2026/08/over-4400-rockwell-plcs-exposed-online.html
https://www.techspot.com/news/113281-openai-rogue-ai-agent-did-more-than-hack.html
https://thehackernews.com/2026/08/claude-mythos-5-tried-to-backdoor-real.html
https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals
https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
55 min - Hotel Wi-Fi Hijacks and Border Phone Searches
Summary
In this episode of the Blue Security Podcast, host Andy Jaw and guest Carly Salmon discuss critical issues in data security, focusing on a recent hotel Wi-Fi hack that exploits DNS settings to capture sensitive information and the legal ramifications of digital privacy through the case of Sam Tulnik, who faces charges for allegedly destroying evidence on his phone during a border search. The conversation emphasizes the importance of vigilance in cybersecurity and the complexities of legal protections for digital privacy. In this conversation, Carley and Andy delve into the legalities surrounding phone searches at borders, the implications of consent, and the nuances of privacy in the digital age. They discuss the recent case involving a phone being wiped before a search, the use of Graphene OS for enhanced security, and practical tips for travelers to protect their data. The conversation highlights the balance between security and usability in technology, emphasizing the importance of being vigilant and informed about personal safety measures.
----------------------------------------------------
YouTube Video Link: https://youtu.be/pHZiQDWXxVs
----------------------------------------------------
Documentation:
https://reliaquest.com/blog/threat-spotlight-dns-poisoning-tactics-expand-to-hospitality/
https://www.bleepingcomputer.com/news/security/hackers-hijack-hotel-wi-fi-dns-to-steal-microsoft-365-accounts/
https://cybernews.com/privacy/grapheneos-duress-password-border-case-legality/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: [email protected]
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: [email protected]
48 min
About Blue Security
From the publisher's feed
A podcast for information security defenders (blue team) on best practices, tools, and implementation for enterprise security.
More shows like Blue Security
Acquired
4,837 Listeners
Pivot
9,616 Listeners
Security Now (Audio)
2,010 Listeners
WSJ Tech News Briefing
1,645 Listeners
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
373 Listeners
Risky Business
374 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
651 Listeners
CyberWire Daily
1,028 Listeners
Smashing Security
317 Listeners
Microsoft Cloud IT Pro Podcast
65 Listeners
Cybersecurity Today
179 Listeners
Defense in Depth
73 Listeners
The Azure Security Podcast
25 Listeners
Cybersecurity Headlines
138 Listeners
Entra.Chat
5 Listeners