Blue Security
By Andy Jaw & Adam Brewer
Stop phishing tests, Microsoft's Humanist AI Code of Conduct
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into two significant topics in cybersecurity: the effectiveness of phishing tests and Microsoft's new Humanist AI Code of Conduct. They critically analyze the traditional approach to phishing tests, likening them to outdated fire drills that do not enhance security. The discussion emphasizes the need for a shift in focus from punitive measures to fostering a culture of reporting and collaboration. The second part of the conversation introduces Microsoft's draft code of conduct for AI, which aims to ensure that AI systems remain under human control and adhere to ethical guidelines. The hosts express optimism about these developments while acknowledging the challenges that lie ahead in both cybersecurity practices and AI governance.
----------------------------------------------------
YouTube Video Link: https://youtu.be/4B4EHq5peFI
----------------------------------------------------
Documentation:
https://security.googleblog.com/2024/05/on-fire-drills-and-phishing-tests.html
https://microsoft.ai/code-of-conduct/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Why Your Cloud Region Is Now a Physical Attack Surface
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss two significant cybersecurity incidents: the emergence of AI API drain attacks and the implications of military strikes on AWS data centers. They explore how attackers can exploit API keys to run up costs without directly breaching networks and the lessons learned from AWS's experience with data loss due to drone strikes. The conversation emphasizes the evolving landscape of cybersecurity threats and the importance of robust threat modeling and data management practices.
----------------------------------------------------
YouTube Video Link: https://youtu.be/JWzG46q898c
----------------------------------------------------
Documentation:
https://cybernews.com/security/hackers-advertise-ai-token-draining-service/
https://arstechnica.com/gadgets/2026/09/iran-strikes-on-amazon-data-centers-caused-permanent-loss-of-customer-data/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Anthropic Threat Intelligence Report
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Anthropic's latest threat intelligence report, highlighting the evolving landscape of cyber threats facilitated by AI technologies. They explore various harm areas, including cyber operations, influence operations, surveillance, and conventional weapons development, emphasizing how AI is democratizing sophisticated attack methods and enabling new forms of manipulation and surveillance. In this episode, the hosts delve into the complexities of AI governance, the importance of creativity in utilizing AI, and the necessity for diversity in cybersecurity. They discuss the dual-use dilemmas of biological research, the exploitation of AI for scams, and the illicit distillation of AI models. The conversation emphasizes the evolving landscape of AI threats and the need for pragmatic approaches to security in a rapidly changing technological environment.
----------------------------------------------------
YouTube Video Link: https://youtu.be/pB3KxTkNDWU
----------------------------------------------------
Documentation:
https://www.anthropic.com/threat-intelligence-report-september-2026
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
LG TV's data collection and Crowdstrike Zero Day
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam celebrate six years of consistent podcasting, reflecting on their journey and the evolution of their roles in the tech industry. They delve into a significant controversy surrounding LG TVs, discussing privacy concerns related to data collection and microphone usage. The conversation transitions into smart home and IoT security, where they provide practical strategies for securing connected devices and protecting personal data. In this episode, the hosts discuss the importance of securing IoT devices through VLANs, the ongoing threat posed by the hacker known as Nightmare Eclipse, and the implications of a new vulnerability discovered in CrowdStrike's Falcon product. They also delve into the ethical considerations surrounding vulnerability disclosure, emphasizing the need for coordinated responses to prevent collateral damage in the cybersecurity landscape.
----------------------------------------------------
YouTube Video Link: https://youtu.be/hxPShoN-Rb8
----------------------------------------------------
Documentation:
https://www.techradar.com/televisions/lg-tvs-collect-far-more-data-on-you-than-youd-expect-says-new-report-including-logging-microphone-audio-while-on-standby
https://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
LiteLLM Breach, an Entra Connect Deadline, and 153 Million Leaked IDs
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into significant cybersecurity topics, including the Light LLM breach, a supply chain attack that affected thousands of organizations, and an urgent reminder for Microsoft Entra Connect users to upgrade their systems. The discussion emphasizes the importance of understanding the origins of security breaches, the need for ongoing credential management, and the critical nature of timely software updates to maintain security integrity. In this conversation, Adam and Andy discuss the implications of Microsoft's Secure Future Initiative, emphasizing the need for organizations to prepare for breaking changes in software and services. They also delve into the ID Scan.net leak, highlighting the risks associated with compromised driver's licenses and the potential for identity theft. The discussion concludes with a focus on data retention practices and the importance of vendor risk management in safeguarding sensitive information.
----------------------------------------------------
YouTube Video Link: https://youtu.be/fHGJBUazeOI
----------------------------------------------------
Documentation:
https://docs.litellm.ai/blog/security-update-march-2026
https://thehackernews.com/2026/08/malicious-litellm-releases-tied-to.html
https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/reference-connect-version-history
https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
AI 101 - Understanding core AI terminology
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam delve into the complexities of AI in cybersecurity, focusing on the adoption rates and understanding of various AI technologies. They discuss the differences between large language models (LLMs) and small language models (SLMs), the importance of APIs, and the role of harnesses and agents in executing AI tasks. The conversation highlights the need for clarity in terminology and the varying levels of AI adoption across different regions and industries. In this episode, the hosts delve into the intricacies of AI agents, skills, and the MCP (Model-Connect-Protocol) as a universal connector for AI tools. They discuss the importance of understanding the attack surface created by these integrations and the role of Retrieval Augmented Generation (RAG) in enhancing AI accuracy. The conversation emphasizes the need for governance and best practices in deploying AI solutions responsibly while recognizing the significant productivity gains they can offer.
----------------------------------------------------
YouTube Video Link: https://youtu.be/31WI5iFFLog
----------------------------------------------------
Documentation:
https://www.sans.org/press/announcements/ai-use-cybersecurity-jumped-from-50-to-78-year-ai-related-failures-rose-sharply-too-new-sans-institute-survey-reveals-governance-gap
https://www.digitalapplied.com/blog/mcp-adoption-statistics-2026-model-context-protocol
https://learn.microsoft.com/en-us/copilot/security/plugin-mcp
https://www.zscaler.com/es/resources/white-papers/zscaler-ai-guard-detectors-inline-protection-for-ai.pdf
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
DEF CON Is Not Cooked; Why AI Won't Replace Cybersecurity
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the implications of AI on cybersecurity, particularly in light of recent comments from Jason Haddock regarding the future of the industry. They explore the notion that AI will not replace cybersecurity but rather enhance it by reducing the time needed to identify vulnerabilities. The conversation also delves into the evolving nature of entry-level roles in cybersecurity, emphasizing the need for new training methods and the importance of human ingenuity in a rapidly changing landscape. Finally, they address the misconceptions surrounding AI's capabilities and the complexities of implementing it in enterprise environments. In this conversation, Adam Brewer and Andy Jaw explore the complexities of AI adoption in enterprise environments, the challenges faced by cybersecurity professionals, and the evolving landscape of technology. They discuss the disparity between the capabilities of early adopters and the average enterprise, the importance of human expertise in leveraging AI, and the asymmetrical advantages that attackers may gain from AI advancements. The conversation emphasizes the need for a balanced perspective on AI's role in cybersecurity, advocating for a realistic understanding of its capabilities and limitations.
----------------------------------------------------
YouTube Video Link: https://youtu.be/SsLKJABOeGc
----------------------------------------------------
Documentation:
https://x.com/Jhaddix/status/2088299917370601734
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Evil Twins, AI Agents, and Cyber Privateers
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant cybersecurity topics, including an evil twin attack on a Delta flight, the emergence of fully autonomous cyber attacks, and a new policy allowing private companies to conduct offensive cyber operations against transnational criminal organizations. They explore the implications of these events on the cybersecurity landscape and the responsibilities of professionals in the field.
----------------------------------------------------
YouTube Video Link: https://youtu.be/fPGObiqf0SI
----------------------------------------------------
Documentation:
https://arstechnica.com/information-technology/2026/08/def-con-crowd-suspected-in-fake-hotspot-attack-on-delta-flight/
https://www.cnn.com/2026/08/13/tech/china-taiwan-ai-agent-cyberattack-intl-hnk
https://www.whitehouse.gov/presidential-actions/2026/08/expanding-capabilities-to-combat-transnational-cyber-enabled-crime/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Critical infrastructure hacks and rogue AI agents
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the recent cyberattacks on water systems in Minnesota, attributed to Iran-linked hackers. They explore the vulnerabilities of programmable logic controllers (PLCs) and the broader implications for operational technology (OT) security. The conversation delves into the differences between Iranian and Chinese cyber threats, the limitations of traditional security measures, and the cultural challenges faced by cybersecurity professionals in securing OT environments. The episode concludes with key takeaways and recommendations for improving security in municipal utilities. The conversation delves into recent AI security incidents involving OpenAI and Anthropic, highlighting the implications of these breaches and the need for better operational discipline and regulatory frameworks. The speakers discuss the maturity of AI companies, the human errors leading to security lapses, and the potential risks associated with AI models. They emphasize the importance of treating AI testing environments with the same seriousness as production environments and call for standardized incident reporting in the AI sector.
----------------------------------------------------
YouTube Video Link: https://youtu.be/6svC857Z_Wg
----------------------------------------------------
Documentation:
https://cybernews.com/security/minnesota-water-systems-cyberattack-iranian-hackers/
https://thehackernews.com/2026/08/over-4400-rockwell-plcs-exposed-online.html
https://www.techspot.com/news/113281-openai-rogue-ai-agent-did-more-than-hack.html
https://thehackernews.com/2026/08/claude-mythos-5-tried-to-backdoor-real.html
https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals
https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Hotel Wi-Fi Hijacks and Border Phone Searches
Summary
In this episode of the Blue Security Podcast, host Andy Jaw and guest Carly Salmon discuss critical issues in data security, focusing on a recent hotel Wi-Fi hack that exploits DNS settings to capture sensitive information and the legal ramifications of digital privacy through the case of Sam Tulnik, who faces charges for allegedly destroying evidence on his phone during a border search. The conversation emphasizes the importance of vigilance in cybersecurity and the complexities of legal protections for digital privacy. In this conversation, Carley and Andy delve into the legalities surrounding phone searches at borders, the implications of consent, and the nuances of privacy in the digital age. They discuss the recent case involving a phone being wiped before a search, the use of Graphene OS for enhanced security, and practical tips for travelers to protect their data. The conversation highlights the balance between security and usability in technology, emphasizing the importance of being vigilant and informed about personal safety measures.
----------------------------------------------------
YouTube Video Link: https://youtu.be/pHZiQDWXxVs
----------------------------------------------------
Documentation:
https://reliaquest.com/blog/threat-spotlight-dns-poisoning-tactics-expand-to-hospitality/
https://www.bleepingcomputer.com/news/security/hackers-hijack-hotel-wi-fi-dns-to-steal-microsoft-365-accounts/
https://cybernews.com/privacy/grapheneos-duress-password-border-case-legality/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
MDASH in Prod, Intune Sync, OpenAI-Hugging Face Incident
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant developments in cybersecurity, including Microsoft's new AI vulnerability scanner, the long-awaited fix for Intune's sync button, and the implications of the Hugging Face and OpenAI incident. They explore the operationalization of AI in vulnerability discovery, the technical nuances of Intune's functionality, and the autonomy of AI agents in cyber operations, emphasizing the need for a balanced understanding of AI capabilities and limitations. In this conversation, Adam Brewer and Andy Jaw discuss the limitations of AI, the importance of cybersecurity in innovation, and the implications of recent incidents involving AI models. They emphasize the need for better security practices, the geopolitical aspects of AI development, and the future of AI models in various applications. The discussion highlights the balance between innovation and security, as well as the evolving landscape of AI technologies.
----------------------------------------------------
YouTube Video Link: https://youtu.be/FrhlHhjHtAQ
----------------------------------------------------
Documentation:
https://huggingface.co/blog/security-incident-july-2026
https://openai.com/index/hugging-face-model-evaluation-security-incident/
https://www.techrepublic.com/article/news-microsoft-july-2026-patch-tuesday/
https://patchmypc.com/blog/inside-the-improved-on-demand-sync-for-windows-devices/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Identity Update: Passkeys by Default, Phone Transfers, Physical Key Security
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the upcoming transition to passkeys as the default method for multi-factor authentication (MFA) in Microsoft Entra ID. They explore the implications of this change, the importance of moving away from SMS and voice authentication, and best practices for organizations to prepare for this shift. The conversation also covers the challenges of transferring MFA codes and passkeys when upgrading phones, and introduces the YubiKey Locker, a new tool that enhances security by automatically locking devices when the YubiKey is removed. The hosts emphasize the need for organizations to modernize their identity infrastructure and adopt more secure authentication methods.
----------------------------------------------------
YouTube Video Link: https://youtu.be/eXqW3FAY_hE
----------------------------------------------------
Documentation:
https://www.microsoft.com/en-us/security/blog/2026/07/13/microsoft-entra-id-security-updates-passkeys-are-the-default-authentication-method-in-entra-id/
https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-transfer-authenticator-new-phone
https://support.okta.com/help/s/article/migrating-all-existing-mfa-codes-to-okta-verify?language=en_US
https://www.sciber.io/sciber-blog/sciber-launches-yubikey-locker-to-defend-against-physical-attacks/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
North Korean IT Worker Scam
Summary
In this episode of the Blue Security Podcast, host Andy Jaw delves into the alarming rise of North Korean IT worker scams, exploring their historical context, operational tactics, and the financial implications for both the regime and unsuspecting American companies. The discussion highlights the vulnerabilities in the hiring process and offers practical mitigation strategies for organizations to protect themselves against these sophisticated cyber threats.
----------------------------------------------------
YouTube Video Link: https://youtu.be/wBZz3WEMG54
----------------------------------------------------
Documentation:
https://www.fbi.gov/wanted/cyber/dprk-it-fraud
https://www.csoonline.com/article/3481659/north-korean-group-infiltrated-100-plus-companies-with-imposter-it-pros.html
https://fortune.com/2025/07/24/north-korean-it-workers-chapman-nike/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Claude Fable, SharePoint RCE, and CISA's KEV list
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Andy's career transition from Microsoft to Zscaler, the return of the AI model Fable and its user experience, and a critical SharePoint vulnerability that has caught CISA's attention. They delve into the implications of these topics for security professionals and the importance of staying updated on actively exploited vulnerabilities.
----------------------------------------------------
YouTube Video Link: https://youtu.be/3VbR22krL-w
----------------------------------------------------
Documentation:
https://www.bleepingcomputer.com/news/artificial-intelligence/claude-fable-relaunch-disappoints-users-with-nerfed-performance/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Helping or Hurting? - An Honest Conversation About AI
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer engage in a deep discussion about the implications of AI on society and the security industry. They explore whether AI is ultimately helping or hurting us, particularly in the context of job displacement and creation. The conversation delves into corporate strategies regarding AI investments, the financial implications of these technologies, and the broader backlash against the tech industry. They also analyze the economic landscape surrounding AI, emphasizing the need for a nuanced understanding of its impact. In this conversation, Adam Brewer and Andy Jaw delve into the complexities of AI investment, the competitive landscape posed by Chinese AI advancements, the implications of AI sycophancy, and the rising security risks associated with AI in social engineering. They also discuss the challenges of code security in AI development, emphasizing the need for robust security measures as AI-generated code becomes more prevalent.
----------------------------------------------------
YouTube Video Link: https://youtu.be/HzoyyLLpo7Y
----------------------------------------------------
Documentation:
https://blogs.microsoft.com/on-the-issues/2026/06/10/ai-jobs-and-the-next-generation/
https://markets.financialcontent.com/stocks/article/marketminute-2026-1-26-the-fragile-fifty-percent-jp-morgan-warns-of-systemic-tipping-point-as-s-and-p-500-concentration-hits-record-highs
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Your MDM Admin Can Wipe Everything. Are You Protecting Them Like It?
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into the critical topic of Mobile Device Management (MDM) and the associated administrative rights. They discuss the risks posed by MDM admins, who often have significant control over organizational devices, and the need for robust security measures to protect against potential breaches. The conversation highlights the importance of understanding the roles within MDM, identifying risks, and implementing effective security controls to mitigate threats. The hosts provide actionable steps for organizations to enhance their security posture regarding MDM and administrative access.
----------------------------------------------------
YouTube Video Link: https://youtu.be/HzoyyLLpo7Y
----------------------------------------------------
Documentation:
https://trustedsec.com/blog/the-privileged-roles-nobody-talks-about
https://trustedsec.com/blog/hardening-intune-the-implementation-guide
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
History Repeating - AI Export Controls and the Lessons We Never Learned
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer celebrate their 300th episode by discussing the recent developments surrounding Anthropic and its AI model, Fable Five. They delve into the historical context of export controls, the implications of government regulations on technology, and the ongoing legal challenges faced by Anthropic. The conversation highlights the complexities of AI regulation, national security concerns, and the competitive landscape between the US and China in the AI sector.
----------------------------------------------------
YouTube Video Link: https://youtu.be/gsDOiDVBoIM
----------------------------------------------------
Documentation:
https://www.anthropic.com/news/fable-mythos-access
https://www.securityweek.com/anthropic-disputes-fable-5-ai-jailbreak/
https://www.csis.org/analysis/understanding-biden-administrations-updated-export-controls
https://www.cnbc.com/2025/11/20/us-approves-ai-chip-exports-to-gulf-after-saudi-crown-prince-visit.html
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
What's new in Entra, Facebook privacy settings
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant updates in Microsoft's security landscape, including the shift to passwordless authentication, cross-tenant synchronization, and the convergence of sensitivity labels with security groups. They also delve into Azure role governance and the implications of Facebook's new camera roll settings on user privacy.
----------------------------------------------------
YouTube Video Link: https://youtu.be/WFs6S42SCDs
----------------------------------------------------
Documentation:
https://www.bighatgroup.com/blog/entra-id-passwordless-default-governance-convergence-may-2026/
https://proton.me/blog/meta-ai-facebook-camera-roll
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
BitLocker bypass, Verizon DBIR report, & CISA key leak
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss critical cybersecurity topics, including newly discovered Windows Zero Days, insights from Verizon's latest Data Breach Investigations Report, and a significant credential leak at CISA. They emphasize the importance of vulnerability management, the evolving threat landscape, and best practices for securing sensitive data. The conversation highlights the need for organizations to adapt quickly to emerging threats and implement robust security measures to protect against breaches.
----------------------------------------------------
YouTube Video Link: https://youtu.be/DtPgg2jQCyM
----------------------------------------------------
Documentation:
https://thehackernews.com/2026/05/windows-zero-days-expose-bitlocker.html?m=1
https://www.verizon.com/business/resources/T158/reports/2026-dbir-data-breach-investigations-report.pdf
https://arstechnica.com/information-technology/2026/05/in-stunning-display-of-stupid-secret-cisa-credentials-found-in-public-github-repo/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Control the Agents, Find the Bugs - Microsoft's AI Security Double Play
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss two significant topics: Agent 365, a new dashboard for monitoring AI agents in the Microsoft ecosystem, and MDash, a multi-model vulnerability scanner. They explore the importance of visibility and control over AI agents, the innovative licensing model for Agent 365, and the multi-model approach of MDash that enhances vulnerability detection. The conversation emphasizes the evolving landscape of cybersecurity and the need for organizations to adapt to new technologies and methodologies.
----------------------------------------------------
YouTube Video Link: https://youtu.be/BIqPhIkRFwg
----------------------------------------------------
Documentation:
https://www.microsoft.com/en-us/security/blog/2026/05/01/microsoft-agent-365-now-generally-available-expands-capabilities-and-integrations/
https://www.microsoft.com/en-us/security/blog/2026/05/12/defense-at-ai-speed-microsofts-new-multi-model-agentic-security-system-tops-leading-industry-benchmark/
https://www.microsoft.com/en-us/msrc/blog/2026/05/a-note-on-patch-tuesday
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
You Can't Patch Fast Enough: Exchange Zero-Day and Tycoon2FA Strike
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss two significant topics: Agent 365, a new dashboard for monitoring AI agents in the Microsoft ecosystem, and MDash, a multi-model vulnerability scanner. They explore the importance of visibility and control over AI agents, the innovative licensing model for Agent 365, and the multi-model approach of MDash that enhances vulnerability detection. The conversation emphasizes the evolving landscape of cybersecurity and the need for organizations to adapt to new technologies and methodologies.----------------------------------------------------
YouTube Video Link: https://youtu.be/HZrE_4NejVo
----------------------------------------------------
Documentation:
https://gbhackers.com/tycoon-2fa-operators-use-oauth-device/
https://www.securityweek.com/microsoft-warns-of-exchange-server-zero-day-exploited-in-the-wild/
https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
You Can't Patch Fast Enough: Exchange Zero-Day and Tycoon2FA Strike
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss two significant topics: Agent 365, a new dashboard for monitoring AI agents in the Microsoft ecosystem, and MDash, a multi-model vulnerability scanner. They explore the importance of visibility and control over AI agents, the innovative licensing model for Agent 365, and the multi-model approach of MDash that enhances vulnerability detection. The conversation emphasizes the evolving landscape of cybersecurity and the need for organizations to adapt to new technologies and methodologies.
----------------------------------------------------
YouTube Video Link: https://youtu.be/HZrE_4NejVo
----------------------------------------------------
Documentation:
https://gbhackers.com/tycoon-2fa-operators-use-oauth-device/
https://www.securityweek.com/microsoft-warns-of-exchange-server-zero-day-exploited-in-the-wild/
https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Lockdown Mode Success, Howler Cell, and Entra Conditional Access
Summary
This episode covers Apple Lockdown Mode's effectiveness against spyware, the Phantom Device attack exploiting Azure AD, and best practices for securing device registration and conditional access policies.
----------------------------------------------------
YouTube Video Link: https://youtu.be/g68OMWYIc0k
----------------------------------------------------
Documentation:
https://techcrunch.com/2026/03/27/apple-says-no-one-using-lockdown-mode-has-been-hacked-with-spyware/
https://cyberpress.org/azure-ad-security-bypass-exploits-phantom-device-registration-and-prt-abuse/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Lockdown Mode Success, Howler Cell, and Entra Conditional Access
Summary
This episode covers Apple Lockdown Mode's effectiveness against spyware, the Phantom Device attack exploiting Azure AD, and best practices for securing device registration and conditional access policies.
----------------------------------------------------
YouTube Video Link: https://youtu.be/g68OMWYIc0k
----------------------------------------------------
Documentation:
https://techcrunch.com/2026/03/27/apple-says-no-one-using-lockdown-mode-has-been-hacked-with-spyware/
https://cyberpress.org/azure-ad-security-bypass-exploits-phantom-device-registration-and-prt-abuse/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Copy Fail, Claude Security, and Microsoft's AI Defense Playboo
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant topics in cybersecurity, including the discovery of a critical Linux vulnerability known as Copy Fail, the introduction of Cloud Security in public beta, and Microsoft's comprehensive AI security strategy. They explore how AI is revolutionizing vulnerability scanning, the implications of the Copy Fail bug, and the proactive measures organizations can take to enhance their security posture. The conversation emphasizes the importance of timely patching and the evolving landscape of cybersecurity driven by AI advancements.
----------------------------------------------------
YouTube Video Link: https://youtu.be/5Hrt9QdI7bY
----------------------------------------------------
Documentation:
https://www.theverge.com/tech/922243/linux-cve-2026-3141-copy-fail-exploit
https://copy.fail
https://claude.com/blog/claude-security-public-beta
https://www.microsoft.com/en-us/security/blog/2026/04/22/ai-powered-defense-for-an-ai-accelerated-threat-landscape/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Copy Fail, Claude Security, and Microsoft's AI Defense Playbook
Summary
In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant topics in cybersecurity, including the discovery of a critical Linux vulnerability known as Copy Fail, the introduction of Cloud Security in public beta, and Microsoft's comprehensive AI security strategy. They explore how AI is revolutionizing vulnerability scanning, the implications of the Copy Fail bug, and the proactive measures organizations can take to enhance their security posture. The conversation emphasizes the importance of timely patching and the evolving landscape of cybersecurity driven by AI advancements.
----------------------------------------------------
YouTube Video Link: https://youtu.be/5Hrt9QdI7bY
----------------------------------------------------
Documentation:
https://www.theverge.com/tech/922243/linux-cve-2026-3141-copy-fail-exploit
https://copy.fail
https://claude.com/blog/claude-security-public-beta
https://www.microsoft.com/en-us/security/blog/2026/04/22/ai-powered-defense-for-an-ai-accelerated-threat-landscape/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Apple-Signal Bug, NCSC recommends passkeys, Open Source debate
Summary
In this episode, Andy and Adam discuss a recent vulnerability in the Signal messaging app that allowed the FBI to recover deleted messages from an iPhone due to a flaw in Apple's notification system. They emphasize the importance of user settings and the need for regular updates. The conversation then shifts to the UK National Cyber Security Centre's endorsement of passkeys as a preferred login method for consumers, highlighting the shift away from traditional passwords. Finally, they address the challenges of open source software security, referencing Marcus Hutchins' insights on the lack of bug bounty programs and the potential risks associated with unmonitored code.
----------------------------------------------------
YouTube Video Link: https://youtu.be/yXuUc32MPL4
----------------------------------------------------
Documentation:
https://arstechnica.com/tech-policy/2026/04/apple-stops-weirdly-storing-data-that-let-cops-spy-on-signal-chats/
https://www.infosecurity-magazine.com/news/ncsc-backs-passkeys-new-era-of/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Apple-Signal Bug, NCSC recommends passkeys, Open Source debate
Summary
In this episode, Andy and Adam discuss a recent vulnerability in the Signal messaging app that allowed the FBI to recover deleted messages from an iPhone due to a flaw in Apple's notification system. They emphasize the importance of user settings and the need for regular updates. The conversation then shifts to the UK National Cyber Security Centre's endorsement of passkeys as a preferred login method for consumers, highlighting the shift away from traditional passwords. Finally, they address the challenges of open source software security, referencing Marcus Hutchins' insights on the lack of bug bounty programs and the potential risks associated with unmonitored code.
----------------------------------------------------
YouTube Video Link: https://youtu.be/yXuUc32MPL4
----------------------------------------------------
Documentation:
https://arstechnica.com/tech-policy/2026/04/apple-stops-weirdly-storing-data-that-let-cops-spy-on-signal-chats/
https://www.infosecurity-magazine.com/news/ncsc-backs-passkeys-new-era-of/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Ep 292 - NIST Taps Out, $21B Lost in cybercrime, and MDI Password Protection
Summary
In this episode, Andy and Adam discuss significant changes in cybersecurity, focusing on NIST's new policy for handling CVEs, the alarming statistics from the FBI's 2025 Cybercrime Report, and the introduction of a new password protection feature in Defender for Identity. They explore the implications of these developments, including the increasing effectiveness of AI-driven scams and the challenges faced by organizations in managing vulnerabilities and protecting sensitive information.
----------------------------------------------------
YouTube Video Link: https://youtu.be/ZKQQkOF85z0
----------------------------------------------------
Documentation:
https://www.bleepingcomputer.com/news/security/nist-to-stop-rating-non-priority-flaws-due-to-volume-increase/
https://www.pcgamer.com/software/security/us-victims-lost-nearly-usd21-billion-to-cybercrime-last-year-says-fbi-with-crypto-and-ai-complaints-among-the-costliest/
https://learn.microsoft.com/en-us/defender-for-identity/password-protection
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
NIST Taps Out, $21B Lost in cybercrime, and MDI Password Protection
Summary
In this episode, Andy and Adam discuss significant changes in cybersecurity, focusing on NIST's new policy for handling CVEs, the alarming statistics from the FBI's 2025 Cybercrime Report, and the introduction of a new password protection feature in Defender for Identity. They explore the implications of these developments, including the increasing effectiveness of AI-driven scams and the challenges faced by organizations in managing vulnerabilities and protecting sensitive information.
----------------------------------------------------
YouTube Video Link: https://youtu.be/ZKQQkOF85z0
----------------------------------------------------
Documentation:
https://www.bleepingcomputer.com/news/security/nist-to-stop-rating-non-priority-flaws-due-to-volume-increase/
https://www.pcgamer.com/software/security/us-victims-lost-nearly-usd21-billion-to-cybercrime-last-year-says-fbi-with-crypto-and-ai-complaints-among-the-costliest/
https://learn.microsoft.com/en-us/defender-for-identity/password-protection
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Hack the Planet, Ban the Router: Your Weekly Dose of Cyber Chaos
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the recent FCC ban on foreign-made routers, citing national security concerns and the implications for consumer cybersecurity. They explore the potential negative effects of the ban, including the risk of forcing consumers to use older, less secure devices. The conversation then shifts to the introduction of Claude Mythos, an advanced AI model from Anthropic that has shown remarkable capabilities in identifying and exploiting software vulnerabilities. The hosts discuss the significance of Mythos in the cybersecurity landscape, its potential for both attackers and defenders, and the collaborative initiative, Project Glasswing, aimed at enhancing cybersecurity through partnerships with major tech companies.
----------------------------------------------------
YouTube Video Link: https://youtu.be/t-gdvMFRC-E
----------------------------------------------------
Documentation:
https://www.theverge.com/news/899172/fcc-foreign-router-ban
https://www.anthropic.com/glasswing
https://www.microsoft.com/en-us/msrc/blog/2026/04/strengthening-secure-software-global-scale-how-msrc-is-evolving-with-ai
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Hack the Planet, Ban the Router: Your Weekly Dose of Cyber Chaos
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the recent FCC ban on foreign-made routers, citing national security concerns and the implications for consumer cybersecurity. They explore the potential negative effects of the ban, including the risk of forcing consumers to use older, less secure devices. The conversation then shifts to the introduction of Claude Mythos, an advanced AI model from Anthropic that has shown remarkable capabilities in identifying and exploiting software vulnerabilities. The hosts discuss the significance of Mythos in the cybersecurity landscape, its potential for both attackers and defenders, and the collaborative initiative, Project Glasswing, aimed at enhancing cybersecurity through partnerships with major tech companies.----------------------------------------------------
YouTube Video Link: https://youtu.be/t-gdvMFRC-E
----------------------------------------------------
Documentation:
https://www.theverge.com/news/899172/fcc-foreign-router-ban
https://www.anthropic.com/glasswing
https://www.microsoft.com/en-us/msrc/blog/2026/04/strengthening-secure-software-global-scale-how-msrc-is-evolving-with-ai
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Claude code leak and Axios NPM Supply Chain attack
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents, including a cloud code leak from Anthropic and a supply chain attack on the Axios NPM package. They explore the implications of these events for developers and organizations, emphasizing the need for caution when handling leaked code and the risks associated with supply chain vulnerabilities. The conversation also touches on the integration of AI tools in Microsoft 365, highlighting both the opportunities and security concerns that arise from granting AI access to organizational data.
----------------------------------------------------
YouTube Video Link: https://youtu.be/cAGMbypoylQ
----------------------------------------------------
Documentation:
https://thehackernews.com/2026/04/claude-code-tleaked-via-npm-packaging.html
https://www.microsoft.com/en-us/security/blog/2026/04/01/mitigating-the-axios-npm-supply-chain-compromise/
https://x.com/claudeai/status/2040086268562842097
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Claude code leak and Axios NPM Supply Chain attack
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents, including a cloud code leak from Anthropic and a supply chain attack on the Axios NPM package. They explore the implications of these events for developers and organizations, emphasizing the need for caution when handling leaked code and the risks associated with supply chain vulnerabilities. The conversation also touches on the integration of AI tools in Microsoft 365, highlighting both the opportunities and security concerns that arise from granting AI access to organizational data.
----------------------------------------------------
YouTube Video Link: https://youtu.be/cAGMbypoylQ
----------------------------------------------------
Documentation:
https://thehackernews.com/2026/04/claude-code-tleaked-via-npm-packaging.html
https://www.microsoft.com/en-us/security/blog/2026/04/01/mitigating-the-axios-npm-supply-chain-compromise/
https://x.com/claudeai/status/2040086268562842097
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Small Business Security from a MSP Perspective
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss various aspects of cybersecurity, particularly focusing on small business security challenges and the features available in Microsoft 365. They address a listener's email regarding the limitations of basic licensing for small businesses and explore the available alerts, security features, and compliance tools. The conversation also covers the importance of Defender Antivirus, managing multiple tenants with GDAP and Lighthouse, and the need for centralized alerting solutions. The episode concludes with a recognition of the challenges faced by those supporting small and medium businesses in cybersecurity.
----------------------------------------------------
YouTube Video Link: https://youtu.be/Yclj1kFxxdU
----------------------------------------------------
Documentation:
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Small Business Security from a MSP Perspective
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss various aspects of cybersecurity, particularly focusing on small business security challenges and the features available in Microsoft 365. They address a listener's email regarding the limitations of basic licensing for small businesses and explore the available alerts, security features, and compliance tools. The conversation also covers the importance of Defender Antivirus, managing multiple tenants with GDAP and Lighthouse, and the need for centralized alerting solutions. The episode concludes with a recognition of the challenges faced by those supporting small and medium businesses in cybersecurity.
----------------------------------------------------
YouTube Video Link: https://youtu.be/Yclj1kFxxdU
----------------------------------------------------
Documentation:
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Microsoft Frontier Suite (E7)
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the newly announced E7 Frontier Suite from Microsoft, which consolidates various licensing options into a comprehensive package. They explore the features of Microsoft 365 Copilot, the importance of AI agents, and the components of the Entra Suite. The conversation also evaluates the pricing structure and target audience for the E7 bundle, emphasizing its value for organizations looking to adopt AI and enhance their security and productivity tools.
----------------------------------------------------
YouTube Video Link: https://youtu.be/BmAAd6jrwDs
----------------------------------------------------
Documentation:
https://techcommunity.microsoft.com/blog/partnernews/partner-blog--introducing-microsoft-365-e7-the-frontier-suite/4500520
Entra Suite: https://open.spotify.com/episode/7gE5hvX8ksTxURbCq7fMPX?si=JCwbOuWPShqezylUsXFGUA
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Microsoft Frontier Suite (E7)
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the newly announced E7 Frontier Suite from Microsoft, which consolidates various licensing options into a comprehensive package. They explore the features of Microsoft 365 Copilot, the importance of AI agents, and the components of the Entra Suite. The conversation also evaluates the pricing structure and target audience for the E7 bundle, emphasizing its value for organizations looking to adopt AI and enhance their security and productivity tools.
----------------------------------------------------
YouTube Video Link: https://youtu.be/BmAAd6jrwDs
----------------------------------------------------
Documentation:
https://techcommunity.microsoft.com/blog/partnernews/partner-blog--introducing-microsoft-365-e7-the-frontier-suite/4500520
Entra Suite: https://open.spotify.com/episode/7gE5hvX8ksTxURbCq7fMPX?si=JCwbOuWPShqezylUsXFGUA
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Spies, Wipes, and AI Gripes
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant developments in AI ethics and cybersecurity. They delve into the legal battles between Anthropic and the US government, Microsoft's support for Anthropic, and the backlash against OpenAI's military contract. The conversation shifts to the misuse of a US cyber weapon, Karuna, and concludes with a case study on the cyber attack against Stryker, a major medical technology company, highlighting the implications of such attacks on critical infrastructure.
----------------------------------------------------
YouTube Video Link: https://youtu.be/1b0l8DIczlo
----------------------------------------------------
Documentation:
https://www.npr.org/2026/03/09/nx-s1-5742548/anthropic-pentagon-lawsuit-amodai-hegseth
https://www.inc.com/leila-sheridan/microsoft-just-backed-anthropics-fight-against-the-pentagon-and-issued-a-stark-warning-to-the-department-of-war/91315453
https://techcrunch.com/2026/03/07/openai-robotics-lead-caitlin-kalinowski-quits-in-response-to-pentagon-deal/
https://techcrunch.com/2026/03/07/openai-robotics-lead-caitlin-kalinowski-quits-in-response-to-pentagon-deal/
https://www.wired.com/story/coruna-iphone-hacking-toolkit-us-government/
https://www.bleepingcomputer.com/news/security/medtech-giant-stryker-offline-after-iran-linked-wiper-malware-attack/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Spies, Wipes, and AI Gripes
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant developments in AI ethics and cybersecurity. They delve into the legal battles between Anthropic and the US government, Microsoft's support for Anthropic, and the backlash against OpenAI's military contract. The conversation shifts to the misuse of a US cyber weapon, Karuna, and concludes with a case study on the cyber attack against Stryker, a major medical technology company, highlighting the implications of such attacks on critical infrastructure.
----------------------------------------------------
YouTube Video Link: https://youtu.be/1b0l8DIczlo
----------------------------------------------------
Documentation:
https://www.npr.org/2026/03/09/nx-s1-5742548/anthropic-pentagon-lawsuit-amodai-hegseth
https://www.inc.com/leila-sheridan/microsoft-just-backed-anthropics-fight-against-the-pentagon-and-issued-a-stark-warning-to-the-department-of-war/91315453
https://techcrunch.com/2026/03/07/openai-robotics-lead-caitlin-kalinowski-quits-in-response-to-pentagon-deal/
https://techcrunch.com/2026/03/07/openai-robotics-lead-caitlin-kalinowski-quits-in-response-to-pentagon-deal/
https://www.wired.com/story/coruna-iphone-hacking-toolkit-us-government/
https://www.bleepingcomputer.com/news/security/medtech-giant-stryker-offline-after-iran-linked-wiper-malware-attack/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Dial 'F' for Fraud: Uncovering IRSF
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam delve into a significant surge in external ID charges experienced by a customer, leading to the discovery of an international revenue share fraud attack. They discuss the mechanics of this fraud, how it exploits telecommunication systems, and the importance of monitoring and mitigating such attacks. The conversation emphasizes the need for organizations to implement security measures, including web application firewalls and billing alerts, to prevent financial losses from similar attacks. The episode concludes with key takeaways and recommendations for enhancing security in external identity management.
----------------------------------------------------
YouTube Video Link: https://youtu.be/6jXBULGx5aA
----------------------------------------------------
Documentation:
https://learn.microsoft.com/en-us/entra/architecture/deployment-external-operations
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-telephony-fraud
https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-region-code-opt-in
https://learn.microsoft.com/en-us/entra/external-id/customers/concept-multifactor-authentication-customers#sms-pricing-tiers-by-countryregion
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Dial 'F' for Fraud: Uncovering IRSF
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam delve into a significant surge in external ID charges experienced by a customer, leading to the discovery of an international revenue share fraud attack. They discuss the mechanics of this fraud, how it exploits telecommunication systems, and the importance of monitoring and mitigating such attacks. The conversation emphasizes the need for organizations to implement security measures, including web application firewalls and billing alerts, to prevent financial losses from similar attacks. The episode concludes with key takeaways and recommendations for enhancing security in external identity management.
----------------------------------------------------
YouTube Video Link: https://youtu.be/6jXBULGx5aA
----------------------------------------------------
Documentation:
https://learn.microsoft.com/en-us/entra/architecture/deployment-external-operations
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-telephony-fraud
https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-region-code-opt-in
https://learn.microsoft.com/en-us/entra/external-id/customers/concept-multifactor-authentication-customers#sms-pricing-tiers-by-countryregion
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Guardrails or Going Off the Rails: Anthropic vs US Government
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam delve into the recent tensions between the U.S. government and the private tech sector regarding artificial intelligence. They discuss the clash between Anthropic and the Department of Defense over AI safety guardrails, the implications of designating Anthropic as a supply chain risk, and the broader impact on the defense sector. The conversation also touches on the importance of AI guardrails, the dangers of autonomous AI systems, and the ethical considerations surrounding AI in mental health. The hosts conclude by exploring the competitive landscape of AI and the potential for multiple winners in the field.
----------------------------------------------------
YouTube Video Link: https://youtu.be/rnUsvQbQkQQ
----------------------------------------------------
Documentation:
https://www.npr.org/2026/02/27/nx-s1-5729118/trump-anthropic-pentagon-openai-ai-weapons-ban
https://www.theverge.com/ai-artificial-intelligence/882005/amazon-blames-human-employees-for-an-ai-coding-agents-mistake
https://www.newsweek.com/ai-chooses-nuclear-option-in-95-of-war-simulations-11589197
https://www.fastcompany.com/91497841/meta-superintelligence-lab-ai-safety-alignment-director-lost-control-of-agent-deleted-her-emails
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Guardrails or Going Off the Rails: Anthropic vs US Government
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam delve into the recent tensions between the U.S. government and the private tech sector regarding artificial intelligence. They discuss the clash between Anthropic and the Department of Defense over AI safety guardrails, the implications of designating Anthropic as a supply chain risk, and the broader impact on the defense sector. The conversation also touches on the importance of AI guardrails, the dangers of autonomous AI systems, and the ethical considerations surrounding AI in mental health. The hosts conclude by exploring the competitive landscape of AI and the potential for multiple winners in the field.
----------------------------------------------------
YouTube Video Link: https://youtu.be/rnUsvQbQkQQ
----------------------------------------------------
Documentation:
https://www.npr.org/2026/02/27/nx-s1-5729118/trump-anthropic-pentagon-openai-ai-weapons-ban
https://www.theverge.com/ai-artificial-intelligence/882005/amazon-blames-human-employees-for-an-ai-coding-agents-mistake
https://www.newsweek.com/ai-chooses-nuclear-option-in-95-of-war-simulations-11589197
https://www.fastcompany.com/91497841/meta-superintelligence-lab-ai-safety-alignment-director-lost-control-of-agent-deleted-her-emails
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
ClawdBot, MoltBot, and OpenClaw
Summary
In this episode, Adam and Andy explore the security challenges and risks associated with OpenClaw, an AI assistant with extensive system access, highlighting recent incidents, vulnerabilities, and best practices for security in AI development.
----------------------------------------------------
YouTube Video Link: https://youtu.be/TGAbhPQa9iw
----------------------------------------------------
Documentation:
https://www.zdnet.com/article/openclaw-moltbot-clawdbot-5-reasons-viral-ai-agent-security-nightmare/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
ClawdBot, MoltBot, and OpenClaw
Summary
In this episode, Adam and Andy explore the security challenges and risks associated with OpenClaw, an AI assistant with extensive system access, highlighting recent incidents, vulnerabilities, and best practices for security in AI development.
----------------------------------------------------
YouTube Video Link: https://youtu.be/TGAbhPQa9iw
----------------------------------------------------
Documentation:
https://www.zdnet.com/article/openclaw-moltbot-clawdbot-5-reasons-viral-ai-agent-security-nightmare/
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Notepad++ supply chain compromise and 7-Zip malware
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents involving Notepad++ and 7-Zip, highlighting the vulnerabilities in open-source software and the importance of enterprise software management. They emphasize the need for ad blockers, the challenges of identifying legitimate software downloads, and the necessity of implementing robust security measures in organizations.
----------------------------------------------------
YouTube Video Link: https://youtu.be/t6ERCYqFHFU
----------------------------------------------------
Documentation:
https://arstechnica.com/security/2026/02/notepad-updater-was-compromised-for-6-months-in-supply-chain-attack/
https://www.rapid7.com/blog/post/tr-chrysalis-backdoor-dive-into-lotus-blossoms-toolkit/
https://msendpointmgr.com/2025/10/04/taming-browser-extensions-with-intune/
https://www.malwarebytes.com/blog/threat-intel/2026/02/fake-7-zip-downloads-are-turning-home-pcs-into-proxy-nodes
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Notepad++ supply chain compromise and 7-Zip malware
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss significant cybersecurity incidents involving Notepad++ and 7-Zip, highlighting the vulnerabilities in open-source software and the importance of enterprise software management. They emphasize the need for ad blockers, the challenges of identifying legitimate software downloads, and the necessity of implementing robust security measures in organizations.
----------------------------------------------------
YouTube Video Link: https://youtu.be/t6ERCYqFHFU
----------------------------------------------------
Documentation:
https://arstechnica.com/security/2026/02/notepad-updater-was-compromised-for-6-months-in-supply-chain-attack/
https://www.rapid7.com/blog/post/tr-chrysalis-backdoor-dive-into-lotus-blossoms-toolkit/
https://msendpointmgr.com/2025/10/04/taming-browser-extensions-with-intune/
https://www.malwarebytes.com/blog/threat-intel/2026/02/fake-7-zip-downloads-are-turning-home-pcs-into-proxy-nodes
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Do we need phishing sims & Upcoming Intune changes
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the evolving landscape of cybersecurity training, particularly in light of generative AI and the limitations of traditional phishing simulations. They argue that expecting employees to outsmart sophisticated cybercriminals is unrealistic and emphasize the need for a robust security architecture that assumes clicks will happen. The conversation then shifts to recent updates regarding Microsoft Intune Suite, including pricing changes and new features, highlighting the importance of adapting to the changing cybersecurity environment.
----------------------------------------------------
YouTube Video Link: https://youtu.be/KzT_wOyC4-w
----------------------------------------------------
Documentation:
https://www.linkedin.com/posts/james-haynes_im-going-to-say-something-that-might-get-activity-7417944035304079360-s1D_/
https://techcommunity.microsoft.com/blog/microsoftintuneblog/microsoft-365-adds-advanced-microsoft-intune-solutions-at-scale/4474272
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com
Do we need phishing sims & Upcoming Intune changes
Summary
In this episode of the Blue Security Podcast, hosts Andy and Adam discuss the evolving landscape of cybersecurity training, particularly in light of generative AI and the limitations of traditional phishing simulations. They argue that expecting employees to outsmart sophisticated cybercriminals is unrealistic and emphasize the need for a robust security architecture that assumes clicks will happen. The conversation then shifts to recent updates regarding Microsoft Intune Suite, including pricing changes and new features, highlighting the importance of adapting to the changing cybersecurity environment.
----------------------------------------------------
YouTube Video Link: https://youtu.be/KzT_wOyC4-w
----------------------------------------------------
Documentation:
https://www.linkedin.com/posts/james-haynes_im-going-to-say-something-that-might-get-activity-7417944035304079360-s1D_/
https://techcommunity.microsoft.com/blog/microsoftintuneblog/microsoft-365-adds-advanced-microsoft-intune-solutions-at-scale/4474272
----------------------------------------------------
Contact Us:
Website: https://bluesecuritypod.com
Bluesky: https://bsky.app/profile/bluesecuritypod.com
LinkedIn: https://www.linkedin.com/company/bluesecpod
YouTube: https://www.youtube.com/c/BlueSecurityPodcast
-----------------------------------------------------------
Andy Jaw
Bluesky: https://bsky.app/profile/ajawzero.com
LinkedIn: https://www.linkedin.com/in/andyjaw/
Email: andy@bluesecuritypod.com
----------------------------------------------------
Adam Brewer
Twitter: https://twitter.com/ajbrewer
LinkedIn: https://www.linkedin.com/in/adamjbrewer/
Email: adam@bluesecuritypod.com