Talking Security: Insights from Microsoft Security Experts

Welcome to another episode of "Talking Security - Let's Talk!" 🚀 This month, we bring you the latest cybersecurity updates, breaking news, and expert insights to keep you informed and ahead of threats.

🔹 Topics in this episode:

✅ Safer Internet Day 2025 – Promoting a safer online world for everyone

✅ DeepSeek Database Leak – Exposing sensitive chat history & backend data

✅ Defender for Endpoint & Office – New reporting and security enhancements

✅ Defender for Identity – Improved attack path visibility & security updates

✅ Microsoft Sentinel Updates – New features & integrations for threat intelligence

✅ Community Spotlight – A new detection engine to protect the Netherlands - https://Threathunters.nl

✅ Event Roundup – The must-attend cybersecurity events of 2025 - https://www.microsoft.com/en-us/security/blog/2025/02/03/hear-from-microsoft-security-experts-at-these-top-cybersecurity-events-in-2025/

✅ Geeky Fun Fact – The first computer virus & its creators

📢 Join the discussion! Want to be part of our monthly recordings? Fill out the form on - https://forms.office.com/e/DhYZzQ8t6z

👍 Like, share, and subscribe for more cybersecurity insights!

🔔 Turn on notifications so you never miss an update!

💬 What are your thoughts on this month's cybersecurity updates? Drop a comment below! ⬇️

#CyberSecurity #MicrosoftDefender #LetsTalkSecurity #ThreatHunting #MicrosoftSentinel #DataLeak #SIEM #SecurityUpdates

🎧 Welcome to the latest episode of "Talking Security" - Let's Talk series! Join your host, Frans Oudendorp, and co-host Pouyan Khabazi, as they dive into the crucial advancements and developments in cybersecurity over the past two months. 🕵️‍♂️

In this episode, we cover:

- DORA Giveaway: All about the Digital Operational Resilience Act (DORA), now enforced.

- Defender for Office 365 LLM: Breaking down new threat classification details - https://www.linkedin.com/posts/markolauren_defenderforoffice-xdr-mdo-activity-7283818118110470145-6_pp

- LDAPNightMare: What has happened in LDAP.

- Microsoft Sentinel Updates: From Bicep templates to SOC optimizations and more.

- Community Spotlight - https://rogierdijkman.medium.com/detecting-fasthttp-bruteforce-attacks-on-entra-users-42ceb13bf856

- Event Roundup -

38C3 - From phishing to Tenant takeover - https://www.youtube.com/watch?v=uowTmPomYcg

YellowHat - https://yellowhat.live/

WPNinjaNL Connect / MC2MC Connect - https://wpninjas.nl/connect/

- Fun Geeky Element: Trivia challenge - reach out on our LinkedIn page - https://www.linkedin.com/company/talkingsecurity

🚀 Don't miss out on these essential updates and expert insights that can help fortify your organization’s defenses. Tune in now, stay informed, and remember - stay safe, stay secure, and let’s keep the conversation going!

Thank you for your continued support. Don't forget to like, share, and subscribe for more insights from the world of cybersecurity!

Join us for the inaugural episode of "Let's Talk," a new series within the Talking Security podcast, where hosts Pouyan Khabazi and Frans Oudendorp delve into the latest updates from Microsoft Ignite 2024.

In this episode, we cover the groundbreaking advancements in Microsoft Security products, including updates to Defender for Cloud, the launch of Defender for APIs, and new capabilities in Microsoft Entra and Microsoft XDR.

Discover how these innovations will shape the future of cybersecurity, with discussions on AI advancements, quantum computing partnerships, and enhanced security measures.

Tune in for a comprehensive recap of Ignite 2024 and insights into staying ahead in the ever-evolving world of cybersecurity.

Don't miss out on the key highlights and expert analysis in this exciting new series!

KustoCon Playlist - https://youtube.com/playlist?list=PL9sQKc0RBCiB73e4q-847W02Rzt3qPzbR&si=f0MbGvjGml8SOTxP

Ignite 2024 Book of News - https://news.microsoft.com/ignite-2024-book-of-news/

In this engaging episode of the TalkingSecurity podcast – DevSecOps series, host Frans Oudendorp, along with co-hosts Pouyan Khabazi and Sander ten Brinke, sits down online with special guest April Yoho from GitHub. Together, they explore April's unique journey in the DevSecOps field, delve into the world of GitHub and GitHub Advanced Security, and discuss the transformative impact of Copilot. Tune in for an insightful conversation packed with practical tips and expert advice, perfect for anyone looking to enhance their knowledge in DevSecOps.

In the sixth episode of the "Security MVP Insights" series on the TalkingSecurity podcast, hosts Frans Oudendorp and Pouyan Khabazi welcome special guests Pablo Chacon and Katie Ryckman. Both esteemed professionals at Microsoft, Pablo and Katie lead the Customer Connection Program (CCP), playing a pivotal role in fostering collaboration between the community, MVPs, and Microsoft.

During this insightful episode, Pablo and Katie delve into their work with the CCP, sharing how they bridge the gap between Microsoft's internal teams and its diverse user community. They discuss the importance of community engagement, the impact of feedback from MVPs, and the initiatives they have implemented to strengthen these connections.

Episode Highlights:

0:00 Intro with music

0:28 Introduction of the Episode

1:16 3 questions in 1

1:34 Katie - Journey to the current Role

3:13 Pablo - Journey to the current Role

7:15 The beginning of Intune

8:12 What is the Microsoft Customer Connection Program (CCP)

20:22 Specific challenges or cultural differences that impact the work

28:26 What trends do we foresee in the cybersecurity community

32:47 Advice for IT and Security professionals to get more involved in the community

40:49 Personal or Professional goals

41:26 The goals from Katie

42:20 The goals from Pablo

44:00 Thanks to Katie and Pablo

45:10 Closing the episode

45:39 Outro with music

This episode is a must-listen for anyone interested in the dynamics of community building within the tech industry. Subscribe to the "Security MVP Insights" series and stay tuned for more in-depth discussions on bridging the gap between technology providers and their users.

Connect with Pablo Chacon - https://www.linkedin.com/in/pjchacon/ - and Katie Ryckman - https://www.linkedin.com/in/katieryckman/ - on LinkedIn to learn more about their work with the Customer Connection Program at Microsoft.

Join the CCP Program - https://AKA.MS/joinCCP

Stay informed and engaged with the latest trends in cybersecurity and community collaboration by tuning in now!

In this compelling follow-up episode of the Talking Security podcast, hosts Sander ten Brinke, Pouyan Khabazi, and Frans Oudendorp delve into the crucial aspects of monitoring infrastructure and identity within the DevSecOps framework. Building on our previous discussion, this episode provides a thorough exploration of best practices for securing your infrastructure and managing identities to maintain a robust security posture.

Topics covered in this episode include:

- Key components of infrastructure monitoring in a DevSecOps environment

- Strategies for effective identity management and monitoring

- Techniques for integrating infrastructure and identity monitoring tools

- Real-world examples of infrastructure and identity threats and how to mitigate them

Tune in to gain valuable insights and practical tips on fortifying your infrastructure and identity monitoring processes. Whether you're enhancing your existing systems or implementing new solutions, this episode offers indispensable guidance to ensure your operations remain secure and resilient.

Don’t miss this opportunity to expand your knowledge and expertise in infrastructure and identity monitoring within the dynamic and ever-evolving landscape of DevSecOps.

In the fifth episode of the "Security MVP Insights" series on the TalkingSecurity podcast, hosts Frans Oudendorp and Pouyan Khabazi engage in a captivating discussion with special guest Mona Ghadiri. Mona, a highly experienced cybersecurity professional, currently holds the position of Director of Product Management at BlueVoyant and is a distinguished Microsoft MVP in Security.

In this episode, Mona shares her professional journey, her pivotal role at BlueVoyant, and her significant contributions to the cybersecurity community. With a strong background in product management, Mona discusses the evolution of Managed Detection and Response (MDR) services and the innovative strategies her team employs to safeguard clients against emerging threats.

Episode Highlights:

0:00 Intro with music

0:28 Introduction of the Episode

1:51 Welcome Mona

2:03 Introduction of Mona and her background

4:30 The primary areas of expertise within the realm of Microsoft technology and cybersecurity!

5:59 Some examples of Security for Co-Pilot - promptbooks from BlueVoyant!

8:30 Examples of running projects

12:39 SOAR on top of Co-pilot

16:19 Business challenges that were addressed

19:57 Overload / complexity of the configuration of technology

22:19 The biggest cybersecurity challenges on a global scale

26:21 What about the chain of all the pieces of software that we are using

28:46 Collaboration within Security

31:38 Specific regulations that helps driving customers moving forward

37:40 AI Question

40:16 Microsoft Customer Connection Program

41:30 2nd part of the AI Question

43:25 Personal and Professional Goal of Mona

46:10 Thanks to Mona

46:43 Closing the episode

47:26 Outro with music

Don't miss this opportunity to gain valuable insights from one of the leading experts in the field. Subscribe to the "Security MVP Insights" series and stay tuned for more thought-provoking discussions on the latest in cybersecurity.

Connect with Mona Ghadiri on LinkedIn (https://www.linkedin.com/in/mona-ghadiri/) and explore her work at BlueVoyant.

This podcast series is essential listening for IT and security professionals eager to keep pace with the rapidly evolving cybersecurity landscape. Tune in now and elevate your cybersecurity expertise!

Join hosts Frans Oudendorp and Pouyan Khabazi in the fourth episode of the "Security MVP Insights" series on the TalkingSecurity podcast for a compelling and informative discussion. This episode features special guest Gianni Castaldi, a renowned cybersecurity expert and Microsoft MVP, who shares his deep insights into the intricacies of today's cybersecurity landscape.

In this engaging conversation, Gianni delves into his journey to becoming a Microsoft Security MVP, discusses his primary areas of expertise, and addresses the most pressing cybersecurity challenges on both a global and local scale. From community projects like KustoCon to navigating local regulations in the Netherlands, Gianni provides a wealth of knowledge and practical examples from his work in the field.

Episode Highlights:

0:00 Opening with the Intro

2:30 Gianni's Introduction and Background

4:43 The Road to Becoming a Microsoft Security MVP

6:22 Gianni's Primary Area of Expertise

7:36 Key Challenges in Cybersecurity

9:23 Community Projects and KustoCon

12:25 Global Cybersecurity Challenges

16:00 Local Challenges and Regulations

17:55 Specific Regulations in the Netherlands

18:48 Navigating Local Issues

21:08 Examples of Gianni's Current Projects

25:27 Balancing Automation and Rapid Response

28:02 Future Trends in Cybersecurity

32:11 Sharing Sentinel Between Teams

34:35 The Role of AI in Cybersecurity

38:13 The Importance of Community in Cybersecurity

40:34 Personal and Professional Goals

42:58 Thanks to Gianni and Closing Remarks

44:01 Closing

Don’t miss this opportunity to enhance your cybersecurity knowledge and stay ahead of the curve. Subscribe to the "Security MVP Insights" series and stay tuned for more expert discussions from the world of cybersecurity.

Connect with Gianni Castaldi on https://www.linkedin.com/in/giannicastaldi/ and explore his work at https://kustoking.com.

This podcast series is a must-listen for IT and security professionals looking to keep up with the ever-evolving cybersecurity landscape. 🙌

Tune in now and elevate your cybersecurity expertise!

Join hosts Frans Oudendorp and Pouyan Khabazi for the third episode of the "Security MVP Insights" series on the TalkingSecurity podcast. This time, they are joined by the esteemed cybersecurity expert and Microsoft MVP, Mattias Borg, for an in-depth exploration of today's cybersecurity landscape.

In this episode, Mattias shares his expertise and insights, offering listeners a deeper understanding of the complexities and challenges faced in the cybersecurity field. From his journey as a Microsoft MVP to his hands-on experiences and projects, Mattias provides valuable perspectives that will benefit IT and security professionals.

This episode contains:

0:00 Intro

0:29 Starting the episode with an awesome intro

1:58 Introduction of Mattias

3:09 Security Dojo podcast

4:08 The technical background an how to become an MVP

11:36 Primary areas of expertise in Cybersecurity

15:56 Another fun thing to show SOAR is working

19:45 It's time to investigate in the SOAR and how you advise customers on this?

26:07 What do you see as the biggest cybersecurity challenges on a global scale today?

27:03 How is AI helping the missing human part

32:22 How do you approach the balance between rapid response times and automation in cybersecurity?

35:03 What trends do you foresee in the cybersecurity landscape over the next few years?

37:38 Do you think that nation attacks will grow coming period

40:34 AI Question

43:06 How important is community collaboration in the field of cybersecurity?

46:50 What are your personal or professional goals for the coming period?

48:19 Thanks to Mattias

48:34 Closing words

49:02 Outro

You can reach out and connect with Mattias via - https://www.linkedin.com/in/matteborg82/

This series is an invaluable resource for IT and security professionals aiming to stay ahead in the ever-evolving field of cybersecurity. 🙌

Tune in now and enhance your cybersecurity knowledge!

In the second episode of the "Security MVP Insights" series on the TalkingSecurity podcast, hosts Frans Oudendorp and Pouyan Khabazi are back with another insightful discussion. This time, they are joined by Thijs Lecomte, a distinguished cybersecurity expert and Microsoft MVP, to delve into the complexities of today's cybersecurity environment.

Don’t miss this engaging and informative conversation with Thijs. Subscribe to our podcast and stay tuned for more episodes in the "Security MVP Insights" series, where we bring you the latest from the world of cybersecurity.

Tune in now to stay ahead of the curve and enhance your cybersecurity knowledge!

This episode contains:

0:00 Opening with the Intro

2:20 Introduction of Thijs

3:09 Thijs shares his background and how he became a MVP

5:00 Thijs his primary area of expertise in Microsoft Technology

7:15 The projects where Thijs is working on

9:08 Microsoft Technologies that are used

11:13 Explanation of Exposure Management

12:30 What challenges are there in Thijs his area

15:05 What are the biggest Cybersecurity challenges at global scale

16:48 Making cybersecurity accessible

18:51 Region (Belgium) challenges within Cybersecurity

20:46 Balance between rapid response times and automation

27:10 What are the trends within Cybersecurity landscape

30:40 AI Question for Thijs

34:24 Community collaboration and the importance of that

35:56 How Microsoft MVP's play a role in the community of Cybersecurity

37:38 Personal/Professional goal for Thijs

38:53 How to enroll in Cybersecurity as a professional

40:15 Closing note of the epsiode

41:07 Outro

This series promises to be an invaluable resource for IT and security professionals aiming to stay ahead in the ever-changing world of cybersecurity. 🙌

You can reach out and connect with Thijs via - https://www.linkedin.com/in/thijslecomte and his blog https://365bythijs.be/