Talking Security - for news about items related to Microsoft Security

In this engaging episode of the TalkingSecurity podcast – DevSecOps series, host Frans Oudendorp, along with co-hosts Pouyan Khabazi and Sander ten Brinke, sits down online with special guest April Yoho from GitHub. Together, they explore April's unique journey in the DevSecOps field, delve into the world of GitHub and GitHub Advanced Security, and discuss the transformative impact of Copilot. Tune in for an insightful conversation packed with practical tips and expert advice, perfect for anyone looking to enhance their knowledge in DevSecOps.

In the sixth episode of the "Security MVP Insights" series on the TalkingSecurity podcast, hosts Frans Oudendorp and Pouyan Khabazi welcome special guests Pablo Chacon and Katie Ryckman. Both esteemed professionals at Microsoft, Pablo and Katie lead the Customer Connection Program (CCP), playing a pivotal role in fostering collaboration between the community, MVPs, and Microsoft.During this insightful episode, Pablo and Katie delve into their work with the CCP, sharing how they bridge the gap between Microsoft's internal teams and its diverse user community. They discuss the importance of community engagement, the impact of feedback from MVPs, and the initiatives they have implemented to strengthen these connections.Episode Highlights:0:00 Intro with music0:28 Introduction of the Episode1:16 3 questions in 11:34 Katie - Journey to the current Role3:13 Pablo - Journey to the current Role7:15 The beginning of Intune8:12 What is the Microsoft Customer Connection Program (CCP)20:22 Specific challenges or cultural differences that impact the work28:26 What trends do we foresee in the cybersecurity community32:47 Advice for IT and Security professionals to get more involved in the community40:49 Personal or Professional goals41:26 The goals from Katie42:20 The goals from Pablo44:00 Thanks to Katie and Pablo45:10 Closing the episode45:39 Outro with musicThis episode is a must-listen for anyone interested in the dynamics of community building within the tech industry. Subscribe to the "Security MVP Insights" series and stay tuned for more in-depth discussions on bridging the gap between technology providers and their users.Connect with Pablo Chacon - https://www.linkedin.com/in/pjchacon/ - and Katie Ryckman - https://www.linkedin.com/in/katieryckman/ - on LinkedIn to learn more about their work with the Customer Connection Program at Microsoft.Join the CCP Program - https://AKA.MS/joinCCPStay informed and engaged with the latest trends in cybersecurity and community collaboration by tuning in now!

In this compelling follow-up episode of the Talking Security podcast, hosts Sander ten Brinke, Pouyan Khabazi, and Frans Oudendorp delve into the crucial aspects of monitoring infrastructure and identity within the DevSecOps framework. Building on our previous discussion, this episode provides a thorough exploration of best practices for securing your infrastructure and managing identities to maintain a robust security posture.Topics covered in this episode include:- Key components of infrastructure monitoring in a DevSecOps environment- Strategies for effective identity management and monitoring- Techniques for integrating infrastructure and identity monitoring tools- Real-world examples of infrastructure and identity threats and how to mitigate themTune in to gain valuable insights and practical tips on fortifying your infrastructure and identity monitoring processes. Whether you're enhancing your existing systems or implementing new solutions, this episode offers indispensable guidance to ensure your operations remain secure and resilient.Don’t miss this opportunity to expand your knowledge and expertise in infrastructure and identity monitoring within the dynamic and ever-evolving landscape of DevSecOps.

In the fifth episode of the "Security MVP Insights" series on the TalkingSecurity podcast, hosts Frans Oudendorp and Pouyan Khabazi engage in a captivating discussion with special guest Mona Ghadiri. Mona, a highly experienced cybersecurity professional, currently holds the position of Director of Product Management at BlueVoyant and is a distinguished Microsoft MVP in Security.In this episode, Mona shares her professional journey, her pivotal role at BlueVoyant, and her significant contributions to the cybersecurity community. With a strong background in product management, Mona discusses the evolution of Managed Detection and Response (MDR) services and the innovative strategies her team employs to safeguard clients against emerging threats.Episode Highlights:0:00 Intro with music0:28 Introduction of the Episode1:51 Welcome Mona2:03 Introduction of Mona and her background4:30 The primary areas of expertise within the realm of Microsoft technology and cybersecurity!5:59 Some examples of Security for Co-Pilot - promptbooks from BlueVoyant!8:30 Examples of running projects12:39 SOAR on top of Co-pilot16:19 Business challenges that were addressed19:57 Overload / complexity of the configuration of technology22:19 The biggest cybersecurity challenges on a global scale26:21 What about the chain of all the pieces of software that we are using28:46 Collaboration within Security31:38 Specific regulations that helps driving customers moving forward37:40 AI Question40:16 Microsoft Customer Connection Program41:30 2nd part of the AI Question43:25 Personal and Professional Goal of Mona46:10 Thanks to Mona46:43 Closing the episode47:26 Outro with musicDon't miss this opportunity to gain valuable insights from one of the leading experts in the field. Subscribe to the "Security MVP Insights" series and stay tuned for more thought-provoking discussions on the latest in cybersecurity.Connect with Mona Ghadiri on LinkedIn (https://www.linkedin.com/in/mona-ghadiri/) and explore her work at BlueVoyant.This podcast series is essential listening for IT and security professionals eager to keep pace with the rapidly evolving cybersecurity landscape. Tune in now and elevate your cybersecurity expertise!

Join hosts Frans Oudendorp and Pouyan Khabazi in the fourth episode of the "Security MVP Insights" series on the TalkingSecurity podcast for a compelling and informative discussion. This episode features special guest Gianni Castaldi, a renowned cybersecurity expert and Microsoft MVP, who shares his deep insights into the intricacies of today's cybersecurity landscape.In this engaging conversation, Gianni delves into his journey to becoming a Microsoft Security MVP, discusses his primary areas of expertise, and addresses the most pressing cybersecurity challenges on both a global and local scale. From community projects like KustoCon to navigating local regulations in the Netherlands, Gianni provides a wealth of knowledge and practical examples from his work in the field.Episode Highlights:0:00 Opening with the Intro2:30 Gianni's Introduction and Background4:43 The Road to Becoming a Microsoft Security MVP6:22 Gianni's Primary Area of Expertise7:36 Key Challenges in Cybersecurity9:23 Community Projects and KustoCon12:25 Global Cybersecurity Challenges16:00 Local Challenges and Regulations17:55 Specific Regulations in the Netherlands18:48 Navigating Local Issues21:08 Examples of Gianni's Current Projects25:27 Balancing Automation and Rapid Response28:02 Future Trends in Cybersecurity32:11 Sharing Sentinel Between Teams34:35 The Role of AI in Cybersecurity38:13 The Importance of Community in Cybersecurity40:34 Personal and Professional Goals42:58 Thanks to Gianni and Closing Remarks44:01 ClosingDon’t miss this opportunity to enhance your cybersecurity knowledge and stay ahead of the curve. Subscribe to the "Security MVP Insights" series and stay tuned for more expert discussions from the world of cybersecurity.Connect with Gianni Castaldi on https://www.linkedin.com/in/giannicastaldi/ and explore his work at https://kustoking.com.This podcast series is a must-listen for IT and security professionals looking to keep up with the ever-evolving cybersecurity landscape. 🙌Tune in now and elevate your cybersecurity expertise!

Join hosts Frans Oudendorp and Pouyan Khabazi for the third episode of the "Security MVP Insights" series on the TalkingSecurity podcast. This time, they are joined by the esteemed cybersecurity expert and Microsoft MVP, Mattias Borg, for an in-depth exploration of today's cybersecurity landscape.In this episode, Mattias shares his expertise and insights, offering listeners a deeper understanding of the complexities and challenges faced in the cybersecurity field. From his journey as a Microsoft MVP to his hands-on experiences and projects, Mattias provides valuable perspectives that will benefit IT and security professionals.This episode contains:0:00 Intro0:29 Starting the episode with an awesome intro1:58 Introduction of Mattias3:09 Security Dojo podcast4:08 The technical background an how to become an MVP11:36 Primary areas of expertise in Cybersecurity15:56 Another fun thing to show SOAR is working19:45 It's time to investigate in the SOAR and how you advise customers on this?26:07 What do you see as the biggest cybersecurity challenges on a global scale today?27:03 How is AI helping the missing human part32:22 How do you approach the balance between rapid response times and automation in cybersecurity?35:03 What trends do you foresee in the cybersecurity landscape over the next few years?37:38 Do you think that nation attacks will grow coming period40:34 AI Question43:06 How important is community collaboration in the field of cybersecurity?46:50 What are your personal or professional goals for the coming period?48:19 Thanks to Mattias48:34 Closing words49:02 OutroYou can reach out and connect with Mattias via - https://www.linkedin.com/in/matteborg82/This series is an invaluable resource for IT and security professionals aiming to stay ahead in the ever-evolving field of cybersecurity. 🙌Tune in now and enhance your cybersecurity knowledge!

In the second episode of the "Security MVP Insights" series on the TalkingSecurity podcast, hosts Frans Oudendorp and Pouyan Khabazi are back with another insightful discussion. This time, they are joined by Thijs Lecomte, a distinguished cybersecurity expert and Microsoft MVP, to delve into the complexities of today's cybersecurity environment.Don’t miss this engaging and informative conversation with Thijs. Subscribe to our podcast and stay tuned for more episodes in the "Security MVP Insights" series, where we bring you the latest from the world of cybersecurity.Tune in now to stay ahead of the curve and enhance your cybersecurity knowledge!This episode contains:0:00 Opening with the Intro2:20 Introduction of Thijs3:09 Thijs shares his background and how he became a MVP5:00 Thijs his primary area of expertise in Microsoft Technology7:15 The projects where Thijs is working on9:08 Microsoft Technologies that are used11:13 Explanation of Exposure Management12:30 What challenges are there in Thijs his area15:05 What are the biggest Cybersecurity challenges at global scale16:48 Making cybersecurity accessible18:51 Region (Belgium) challenges within Cybersecurity20:46 Balance between rapid response times and automation27:10 What are the trends within Cybersecurity landscape30:40 AI Question for Thijs34:24 Community collaboration and the importance of that35:56 How Microsoft MVP's play a role in the community of Cybersecurity37:38 Personal/Professional goal for Thijs38:53 How to enroll in Cybersecurity as a professional40:15 Closing note of the epsiode41:07 OutroThis series promises to be an invaluable resource for IT and security professionals aiming to stay ahead in the ever-changing world of cybersecurity. 🙌You can reach out and connect with Thijs via - https://www.linkedin.com/in/thijslecomte and his blog https://365bythijs.be/

Welcome to the premiere episode of "Security MVP Insights," where we sit down with leading Microsoft Security MVPs from around the world to explore the dynamic landscape of cybersecurity. In this first episode, we are thrilled to feature Sanna Diana Tomren, a distinguished Microsoft Security MVP known for her extensive expertise and innovative approach to tackling cybersecurity challenges.Join us as Sanna shares her journey in the field of cybersecurity, shedding light on the pressing global and local threats that organisations face today. We will delve into her expert perspectives on the latest trends in cybersecurity, discussing both current issues and future developments that professionals need to be aware of.This episode contains:0:00 Opening with the Intro1:58 Sanna's introduction2:44 Sanna's background and road to MVP14:18 Sanna's primary area's of expertise16:03 Current projects and challenges21:54 Regional challenges or regulations that are impacting the work25:08 Examples of security solutions and how it's impacting customers29:26 Trends in the cybersecurity landscape32:36 AI's question for Sanna37:04 The impact of community39:12 Personal/Professional goal for the coming period40:13 Closing off this episodeThis series promises to be an invaluable resource for IT and security professionals aiming to stay ahead in the ever-changing world of cybersecurity. 🙌You can reach out and connect with Sanna via - https://www.linkedin.com/in/sanna-diana-tomren/

In this insightful episode of the Talking Security podcast, we turn our focus to the Monitor phase of the DevSecOps cycle. Hosts Sander ten Brinke, Pouyan Khabazi, and Frans Oudendorp guide you through the intricacies of continuous monitoring, providing an in-depth analysis of how to effectively observe and respond to threats in real-time.This episode of our DevSecOps series will cover:An overview of the Monitor phase in DevSecOpsStrategies for setting up robust monitoring systemsTechniques for real-time threat detection and responseBalancing proactive and reactive security measuresJoin us as we dissect the tools and practices that ensure your software remains secure post-deployment. Whether you’re fine-tuning your current security protocols or building them from the ground up, this episode is packed with essential knowledge to keep your operations secure and agile.Don’t miss out on the expertise shared in this episode to elevate your security monitoring to the next level in the dynamic field of DevSecOps.Links that are mentioned in this episode: https://learn.microsoft.com/en-us/devops/devsecops/enable-devsecops-azure-github https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-devops-introduction

In this episode of the Talking Security podcast, we delve into the essentials of release code securely within a DevSecOps pipeline. Join hosts Sander ten Brinke, Pouyan Khabazi, and Frans Oudendorp as they explore key strategies and best practices for integrating security into every stage of software development and deployment.As part of our DevSecOps series, this episode covers:- The fundamentals of DevSecOps- Critical security measures for code release- Tips for maintaining security without compromising speed or efficiencyWhether you're a seasoned professional or new to the world of DevSecOps, this discussion offers valuable insights and practical advice for enhancing your software release processes.Tune in to stay informed and ahead in the ever-evolving landscape of software security!

Welcome to the latest episode of the TalkingSecurity podcast, where we delve into the world of DevSecOps. In this episode, “Demystifying the Test Process,” we unpack the essentials of testing and its significance in the DevSecOps pipeline.🔍 What’s Inside:- Automated Testing: Discover the transformative power of automation in testing.- Security Integration: Learn how to weave security seamlessly into your test processes.- Expert Advice: Hear from industry veterans about navigating the challenges of DevSecOps testing.🎧 Listen and Learn: Whether you’re a DevSecOps newbie or a seasoned practitioner, this episode is packed with actionable information to help you elevate your test processes.👉 Tune in now to enhance your understanding and skills in DevSecOps testing!#DevSecOps #Testing #CyberSecurity #PodcastIn this DevSecOps series, Sander ten Brinke, Pouyan Khabazi and Frans Oudendorp talk about various topics related to DevSecOps and things related to that.

Code Security is not only about writing secure code, but also about build it securely. In this episode, three experts from different domains and perspectives share their knowledge and experience on how to secure the Build Process and the Build Environment. hether you are a developer, a security analyst, or a DevSecOps enthusiast, you will find this episode useful and enlightening. Tune in and learn more about Code Security from Sander ten Brinke, Pouyan Khabazi, and Frans Oudendorp.In this DevSecOps series, Sander ten Brinke, Pouyan Khabazi and Frans Oudendorp talk about various topics related to DevSecOps and things related to that.

Code Security is a crucial aspect of software development, especially in the era of DevSecOps. In this episode, three experts from different backgrounds and roles share their insights and experiences on how to code securely, what are the common pitfalls and best practices, and what tools and techniques can help developers and security analysts work together more effectively. Whether you are a developer, a security analyst, or a DevSecOps enthusiast, you will find this episode informative and inspiring. Tune in and learn more about Code Security from Sander ten Brinke, Pouyan Khabazi, and Frans Oudendorp.In this DevSecOps series, Sander ten Brinke, Pouyan Khabazi and Frans Oudendorp talk about various topics related to DevSecOps and things related to that.

In this new series, Sander ten Brinke, Pouyan Khabazi and Frans Oudendorp talk about various topics related to DevSecOps and things related to that. In this recording, we kick off this series with an introduction about what's ahead in the next episodes. Then we talk about developers' workstations and how to secure them properly so that everyone is happy.

In this episode, we (Frans Oudendorp and Pouyan Khabazi) are joined by Ajinkya Gore to talk about Defender for API. Ajinkya is a Principal Product Manager at Microsoft, focused on Defender for API. In this episode, we talk, for example, about how Defender for API helps to secure API's, what the risks are and much more.

Explore the world of DevSecOps with David Trigano, Senior Product Manager at Microsoft. Learn how Microsoft Defender for Cloud transforms security by providing insights, enhancing collaboration, and preventing issues

In this episode, we (Frans Oudendorp and Pouyan Khabazi) are joined by Tom Janetscheck to talk about Defender for Servers. Tom is a Senior Program Manager at Microsoft Cloud Security, focused on Azure Security Center. Before that, he spent nearly 20 years in various internal IT and consulting roles, with a strong focus on cloud infrastructure, architecture and security. In this episode, we talk, for example, about how Defender for Servers fits into the Defender for Cloud suite, what it is and how it differs from Defender for Endpoint. We also talked about the different plans and how it can be used in other Cloud and hybrid environments. And, of course, we set up an appointment for later this year ;). Tom mentioned a blog post about REST API Call's in this recording. See below for the URL to this post: https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/defender-for-servers-plan-2-now-integrates-with-defender-for/ba-p/3527534

In this episode, we kick off a new series about Defender for Cloud, Microsoft’s comprehensive solution for protecting cloud workloads and hybrid environments.I’m joined by my new co-host Pouyan Khabazi, a cloud security expert and MVP.We chat with Rod Trent, a Cloud Security Advocate at Microsoft, about what cloud computing means for security and how Defender for Cloud can help you monitor, detect and respond to threats across your cloud resources. We also discuss how Sentinel, Microsoft’s cloud-native SIEM, can integrate with Defender for Cloud to provide a unified view of your security posture. And of course, we don’t forget to talk about Pop Tarts, Rod’s favorite snack. Tune in and learn how to defend in a modern cloud world with Defender for Cloud.

An episode of Talking Security about Microsoft 365 Security and onboarding all the pieces in a good way. In this one Dennis van Doorn, Michael Thelen and Sibren van Anrooij have joined me to talk about these specific topics.What are the most important things to keep in mind when enabling all the security products within the Microsoft 365 Security Suite? Listen and you will know this.

An episode of Talking Security about Microsoft Defender for Endpoint. This is the fourth part of the Defender for Endpoint series and specifically Evaluation Labs. What is Evaluation Labs, how can it be used and how can it be configured? This time again together with my friend Dennis van Doorn who has a lot of knowledge about this part of MDE.