The Azure Security Podcast

50 episodes listed below

Listen to the show on

Microsoft cloud security, translated into practice.

The gist

The Azure Security Podcast tracks security, privacy, reliability, and compliance across Microsoft cloud services. Recent episodes move from compact news updates into focused conversations on baseline security, identity, AI safety, MITRE ATT&CK, and quantum cryptography.

PRESS PLAY

Find your next episode

All episodes

About The Azure Security Podcast

The Azure Security Podcast is a technical briefing for people working around Microsoft cloud security. It keeps a narrow lane and uses that narrowness well. Recent episodes return again and again to security, privacy, compliance, reliability, identity, governance, and the operational details behind Microsoft platform changes. A typical episode starts with a compact news round. That news may include Agent 365, Microsoft licensing changes, AKS pod security safeguards, Zero Trust guidance, Azure Government monitoring, Microsoft Ignite, or threat activity such as spear phishing tied to New Star Blizzard. Then the show settles into a longer interview. The tone is practical rather than performative. Guests are asked to define terms, explain product surfaces, and connect a security concept to the work a defender or cloud team might do tomorrow. Microsoft Baseline Security Mode, for example, is framed through supported products, settings, roadmap areas, and the goal of reducing known security gaps. MITRE ATT&CK is treated as a shared language between attacker behavior and defender planning. Quantum cryptography becomes a discussion of crypto agility and the risk of hard-coding algorithms. Entra episodes focus on overpermissioning, least privilege, monitoring, audit logs, and GenAI application security. AI also appears through MSRC safety and security work, agentic identity, and security sessions around the AI Tour. The show assumes listeners can handle product names and acronyms. It also knows when to reset the baseline. That combination makes it useful for practitioners who want more than launch notes but less than a purely academic security seminar. The editorial center is clear: Microsoft cloud security is a moving system, and every announcement needs to be translated into risk, control, and implementation choices.

Made for: Built for security practitioners, cloud architects, identity teams, compliance-minded technologists, and Microsoft platform operators who need current Azure and Microsoft security context.

What sets it apart: It combines a recurring Microsoft cloud security news brief with interviews that turn product changes, frameworks, and threat models into practical implementation concerns.

In their own words

A twice-monthly podcast dedicated to all things relating to Security, Privacy, Compliance and Reliability on the Microsoft Cloud Platform. Hosted by Microsoft security experts, Michael Howard, Sarah Young, Gladys Rodriguez and Mark Simos. https://aka.ms/azsecpod ©2020-2025 Michael Howard, Sarah Young, Gladys Rodriquez, and Mark Simos.

As heard by us

Based on 5 episodes we listened to · September 2026

Security principles become concrete here through informed questions about Microsoft cloud controls, identity, monitoring, cryptography, and defensive frameworks.

The Azure Security Podcast turns Microsoft cloud security into working conversations about the decisions beneath controls, identities, and threat models.

Read our full review in PlayNext →

Why you'd press play

A 60-minute access lease sounds boring until Michael shows what excess privilege could cost your app.

Press play if you want

  • a reason to check what an AI app can access before you grant it more
  • a practical case for keeping encryption algorithms replaceable, with an old DES mistake to make it stick
Read the full recommendation in PlayNext →
Azure security newsMicrosoft Entra identityBaseline security settingsMITRE ATT&CKAI safety and securityZero Trust guidanceLeast privilege and permissionsQuantum cryptography

Talks about

Best episodes of The Azure Security Podcast

Short reviews from the PlayNext desk, based on the episodes we processed.

Episode 126: Microsoft Baseline Security ModeMar 21, 2026

A concrete tour of Microsoft's baseline hardening plans for Microsoft 365 and Entra.

Episode 126 offers a practical look at Microsoft Baseline Security Mode, with Sophie Kerr and Dave Manassian showing how Microsoft is folding its own security lessons into guidance for Microsoft 365 and Microsoft Entra.

Episode 125: Origins of MITRE ATT&CKFeb 27, 2026

A practical move from Azure security news into the ATT&CK matrix and why it matters.

Episode 125 starts with a short news lap before turning to MITRE ATT&CK. Mark's notes on the Microsoft Cybersecurity Reference Architecture and the Zero Trust video on Microsoft Mechanics give the first half a practical Azure security frame, and Blake Strom then lays out how…

Episode 118 - Quantum Cryptography and Quantum Computing with Mark RussinovichSep 19, 2025

Crypto agility gets the clearest treatment here, with hard-coded encryption choices framed as an operational problem.

Episode 118 makes a clear case for post-quantum crypto agility, with Mark Russinovich treating it as a security task teams need to prepare for now, not a concept to admire from a distance.

Episode 110: Securing GenAI Applications with Entra (3 of 4): Monitoring and MoreApr 1, 2025

Entra ID logging and least privilege anchor a practical GenAI security discussion.

Episode 110 keeps GenAI app security focused on identity, logging, and least privilege. Gladys opens on Azure Government file integrity monitoring and the deprecation of the Log Analytics agent, while Sharon traces Entra ID sign-in logs, audit logs, and the added risk that comes…

Episode 108: Securing GenAI Applications with EntraJan 20, 2025

Azure security news and GenAI risk are framed clearly, with a practical introduction to the series ahead.

Episode 108 begins with a tight Azure security news roundup before moving into Diana's look at how GenAI applications are secured. Gladys opens with the March 1, 2025 TLS 1.2 requirement for Azure services and the December Microsoft Defender for Cloud updates, including the…

Podcasts like The Azure Security Podcast

Episodes

  1. 1

    Episode 126: Microsoft Baseline Security Mode

    Hidden gem

    Episode 126 opens with Sarah and Michael, then moves into Microsoft Baseline Security Mode with Sophie Kerr and Dave Manassian.

    Mar 21, 2026·36m·2 clips
  2. 2

    Episode 125: Origins of MITRE ATT&CK

    Hidden gem

    The episode opens with a news roundtable, then shifts into MITRE ATT&CK.

    Feb 27, 2026·35m·2 clips
  3. 3

    Episode 124: Microsoft Security Response Center for AI

    Michael interviews Raji about the Microsoft Security Response Center for AI safety and security, with a brief news segment on AKS pod security safeguards.

    Jan 30, 2026·29m
  4. 4

    Episode 123: Agentic Identity

    The hosts discuss news about the AI Tour and a new Security Roles and Glossary Standard before introducing a guest segment on agentic identity.

    Jan 21, 2026·36m
  5. 5

    Episode 122: Microsoft Ignite 2025 Wrap-up

    The hosts discuss their experiences and key announcements from the Microsoft Ignite 2025 conference, focusing on security news.

    Dec 15, 2025·33m
  6. 6

    Episode 121: New Open Group Security Standards Documentation

    Nov 21, 2025·48m
  7. 7

    Episode 120: The Zero Trust Workshop (and so much more!)

    Oct 29, 2025·59m
  8. 8

    Episode 119: Pedantic Security Wording and Taxonomies

    Oct 9, 2025·40m
  9. 9

    Episode 118 - Quantum Cryptography and Quantum Computing with Mark Russinovich

    Hidden gem

    Michael hosts episode 118 with Mark Simos and Mark Rusinovich, who says he is the Chief Technology Officer of Azure, a Technical Fellow at Microsoft, and Deputy CISO for Azure, Engineering Systems, and the core operating systems, Linux and Windows.

    Sep 19, 2025·34m·2 clips
  10. 10

    Episode 117: Cloud Gaming Security

    Aug 29, 2025·43m
  11. 11

    Episode 116: Microsoft Sentinel Data Lake

    Jul 31, 2025·40m
  12. 12

    Episode 115: Security in Model Context Protocol (MCP)

    Jul 10, 2025·52m
  13. 13

    Episode 114: SQL Server 2025 Security Improvements

    Jun 9, 2025·25m
  14. 14

    Episode 113: Microsoft Red Team

    May 16, 2025·36m
  15. 15

    Episode 112: Security Copilot Agents

    May 13, 2025·30m
  16. 16

    Episode 111: Securing Agentic AI

    Apr 17, 2025·23m
  17. 17

    Episode 110: Securing GenAI Applications with Entra (3 of 4): Monitoring and More

    Hidden gem

    The show opens with a news roundup.

    Apr 1, 2025·40m·2 clips
  18. 18

    Episode 109: Securing GenAI Applications with Entra (2 of 4) - Overpermissioning

    This episode discusses over-permissioning in GenAI applications and how to detect and remediate it using Microsoft Entra Permission Manager, along with news about a Russian threat actor and zero trust guidance.

    Feb 19, 2025·38m
  19. 19

    Episode 108: Securing GenAI Applications with Entra

    Hidden gem

    Episode 108 opens with the full panel and a quick news lap before Diana joins the conversation.

    Jan 20, 2025·22m·1 clip
  20. 20

    Episode 107: Secure by default and Copilot Overshare Blueprints

    Jan 6, 2025·37m
  21. 21

    Episode 106: Microsoft Ignite Security Wrap-up

    Dec 10, 2024·44m
  22. 22

    Episode 105: Azure and Entra ID Security Tools

    Nov 22, 2024·37m
  23. 23

    Episode 104: The Post Bluehat Wrap-up

    Nov 8, 2024·37m
  24. 24

    Episode 103: Security Conferences and Bluehat

    Oct 17, 2024·48m
  25. 25

    Episode 102: Entra ID Purple-teaming with Dr Azure AD

    This episode covers news about Microsoft Ignite registration and security pre-days, then interviews Nestori Sinema on purple teaming Entra ID.

    Oct 7, 2024·37m
  26. 26

    Episode 101: The GHOST Threat Hunting Team

    Sep 20, 2024·23m
  27. 27

    Episode 100: Our stories so far

    Aug 29, 2024·49m
  28. 28

    Episode 99: Securing Copilot AI Data and Purview

    Aug 16, 2024·37m
  29. 29

    Episode 98: Secure Future Initiative and Rust at Microsoft

    Jun 21, 2024·37m
  30. 30

    Episode 97: Securing AI

    Jun 6, 2024·40m
  31. 31

    Episode 96: Cloud Native Applications Protection Platform (CNAPP)

    May 3, 2024·21m
  32. 32

    Episode 95: Threat Intelligence

    Apr 25, 2024·31m
  33. 33

    Episode 94: Copilot for Security

    Apr 1, 2024·36m
  34. 34

    Episode 93: Continuous Security Development Lifecycle

    Mar 25, 2024·39m
  35. 35

    Episode 92: Global Azure is soon, sign up and give a security presentation!

    Mar 15, 2024·42m
  36. 36

    Episode 91: Azure Chaos Studio

    Feb 13, 2024·33m
  37. 37

    Episode 90: AI Red Teaming

    Jan 29, 2024·39m
  38. 38

    Episode 89: We Look Back on 2023

    Dec 18, 2023·41m
  39. 39

    Episode 88: Securing SQL Databases though the eyes of an attacker

    Dec 1, 2023·46m
  40. 40

    Episode 87: Advances in Always Encrypted and Transparent Data Encryption

    Nov 15, 2023·21m
  41. 41

    Episode 86: Zero Trust Playbook Series Zero Trust Overview and Playbook Introduction

    Oct 31, 2023·34m
  42. 42

    Episode 85: Security Bug Bounties

    Oct 11, 2023·25m
  43. 43

    Episode 84: Attack Simulation

    Sep 22, 2023·44m
  44. 44

    Episode 83: PowerShell Automation and Scripting for Cybersecurity

    Aug 14, 2023·37m
  45. 45

    Episode 82: Modern Security Strategy

    Aug 8, 2023·36m
  46. 46

    Episode 81: Audit logging in Azure SQL Database

    Jul 28, 2023·27m
  47. 47

    Episode 80: Microsoft Incident Response

    Jul 14, 2023·34m
  48. 48

    Episode 79: Threat Intelligence with MSTICPy

    Jun 13, 2023·28m
  49. 49

    Episode 78: Entra Permissions Management updates

    Jun 2, 2023·32m
  50. 50

    Episode 77: Securing Infrastructure as Code (IaC)

    May 19, 2023·41m