This is the audio podcast version of Troy Hunt's weekly update video published here: https://www.troyhunt.com/tag/weekly-update/
…
continue reading
Player FM - Internet Radio Done Right
Checked 4d ago
Added four years ago
Content provided by Richard Campbell. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Richard Campbell or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.
Similar to RunAs Radio
The power of Data is undeniable. And unharnessed - it’s nothing but chaos. Making data your ally. Using it to lead with confidence and clarity. Host Jess Carter is solving problems in real-time to reveal what’s possible. Helping communities and people thrive. This is Data Driven Leadership, a show brought to you by Resultant.
…
continue reading
When it comes to technology, you may have questions. So do we. Every other week, we demystify the tech industry, one answer at a time. Join us as we bring together a chorus of perspectives from within Red Hat to break down the big, emerging ideas that matter both today and beyond. Compiler is hosted by Angela Andrews and Brent Simoneaux. Learn more about our show at redhat.com/en/compiler-podcast
…
continue reading
S
Security Weekly Podcast Network (Audio)
1
Security Weekly Podcast Network (Audio)
Security Weekly Productions
2k
3k
Welcome to the Security Weekly Podcast Network, your all-in-one source for the latest in cybersecurity! This feed features a diverse lineup of shows, including Application Security Weekly, Business Security Weekly, Paul's Security Weekly, Enterprise Security Weekly, and Security Weekly News. Whether you're a cybersecurity professional, business leader, or tech enthusiast, we cover all angles of the cybersecurity landscape. Tune in for in-depth panel discussions, expert guest interviews, and ...
…
continue reading
BBC Radio 5 live’s award winning gaming podcast, discussing the world of video games and games culture.
…
continue reading
Android Backstage, a podcast by and for Android developers. Hosted by developers from the Android engineering team, this show covers topics of interest to Android programmers, with in-depth discussions and interviews with engineers on the Android team at Google. Subscribe to Android Developers YouTube → https://goo.gle/AndroidDevs
…
continue reading
Africa-focused technology, digital and innovation ecosystem insight and commentary.
…
continue reading
Show notes are at https://stevelitchfield.com/sshow/chat.html
…
continue reading
Embedded is the show for people who love gadgets. Making them, breaking them, and everything in between. Weekly interviews with engineers, educators, and enthusiasts. Find the show, blog, and more at embedded.fm.
…
continue reading
.NET Rocks! is an Internet Audio Talk Show for Microsoft .NET Developers.
…
continue reading
Player FM - Podcast App
Go offline with the Player FM app!
Go offline with the Player FM app!
))
Application Risk in Security Copilot with Ari Schorr
Manage episode 475937191 series 2971858
Content provided by Richard Campbell. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Richard Campbell or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.
How can Security Copilot help you secure your applications? Richard talks to Ari Schorr about assessing application risk with Microsoft Security Copilot - a new feature in preview in Security Copilot that focuses on application roles and entities. Ari talks about the sheer array of resources that applications depend on, and the many security risks that exist in that space - how do you even get started on the problem? Security Copilot helps to sort through potential risks and help a sysadmin focus in on the most significant risks, especially the low-hanging fruit weak authentication and unused resources. The conversation also explores some of the future potential of a tool like this to detect supply chain attacks, find ways to strengthen and simplify applications so their attack surface is smaller. It's a great time to get familiar with these tools!
Links
- Microsoft Security Copilot
- Midnight Blizzard Attack on Microsoft
- Secure Future Initiative
- Assess Application Risk with Microsoft Security Copilot
- Microsoft Sentinel
Recorded February 18, 2025
982 episodes
Share
Manage episode 475937191 series 2971858
Content provided by Richard Campbell. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Richard Campbell or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.
How can Security Copilot help you secure your applications? Richard talks to Ari Schorr about assessing application risk with Microsoft Security Copilot - a new feature in preview in Security Copilot that focuses on application roles and entities. Ari talks about the sheer array of resources that applications depend on, and the many security risks that exist in that space - how do you even get started on the problem? Security Copilot helps to sort through potential risks and help a sysadmin focus in on the most significant risks, especially the low-hanging fruit weak authentication and unused resources. The conversation also explores some of the future potential of a tool like this to detect supply chain attacks, find ways to strengthen and simplify applications so their attack surface is smaller. It's a great time to get familiar with these tools!
Links
- Microsoft Security Copilot
- Midnight Blizzard Attack on Microsoft
- Secure Future Initiative
- Assess Application Risk with Microsoft Security Copilot
- Microsoft Sentinel
Recorded February 18, 2025
982 episodes
All episodes
×
R
RunAs Radio
1 Modern Work in 2025 with Karoliina Kettukari 34:55
34:55 
Play Later 
Play Later 
Lists 
Like 
Liked34:55
Play Later Play Later Lists Like LikedSo what does modern work look like today? Richard talks to Karoliina Kettukari about her new role as the Head of Modern Work for a financial services company in Finland, and what modern work has evolved. Karoliina talks about how the pandemic accelerated modern work, such as being able to work anywhere and collaborating with whomever you need to. Post-pandemic, there is a push for more work from the office, but remote work is still essential - and now artificial intelligence is changing the landscape again. The rapid evolution of AI technologies is a challenge for admins, but the productivity benefits are becoming obvious - you need some good governance! Links Microsoft 365 Copilot Overview The EU Artificial Intelligence Act European Collaboration Summit Recorded March 6, 2025…
R
RunAs Radio
What can agentic AI do for you? Richard talks to Tim Warner about his work utilizing next generation agentic AI technologies to help with sysadmin tasks. Tim talks about the early lead that Cursor AI took with AI agents capable of writing and executing scripts on your behalf - as opposed to just creating code you can cut-and-paste. Today, GitHub Copilot has caught up with Agent Mode in Copilot Edits, although still in preview, it speaks to a future where sysadmins use these tools to write better scripts for work - and get more done in less time! Links Cursor AI OpenAI Operator GitHub Copilot Copilot Edits Recorded February 17, 2025…
R
RunAs Radio
1 How to Not Hate PowerShell with Barbara Forbes 36:54
36:54 Play Later Play Later Lists Like Liked36:54
Play Later Play Later Lists Like LikedAre some of your team members starting to hate PowerShell? Richard talks to Barbara Forbes about her experiences with teams frustrated by PowerShell. Barbara talks about overcomplicating PowerShell scripts—the kind the most senior folks can create but no one else can maintain. Eventually, nobody will want to touch those scripts. Then there is the question of business value—does everything need to be automated? And by how much? Often, the appropriate solution solves 80% of the cases; the other 20% are best done by hand because the cost and complexity of the last 20% are too high. Focus on the return on investment for the business, and you'll keep the love of PowerShell alive! Links PowerShell Pester Testing GitHub Copilot Bicep Recorded February 24, 2025…
R
RunAs Radio
1 Application Risk in Security Copilot with Ari Schorr 34:02
34:02 Play Later Play Later Lists Like Liked34:02
Play Later Play Later Lists Like LikedHow can Security Copilot help you secure your applications? Richard talks to Ari Schorr about assessing application risk with Microsoft Security Copilot - a new feature in preview in Security Copilot that focuses on application roles and entities. Ari talks about the sheer array of resources that applications depend on, and the many security risks that exist in that space - how do you even get started on the problem? Security Copilot helps to sort through potential risks and help a sysadmin focus in on the most significant risks, especially the low-hanging fruit weak authentication and unused resources. The conversation also explores some of the future potential of a tool like this to detect supply chain attacks, find ways to strengthen and simplify applications so their attack surface is smaller. It's a great time to get familiar with these tools! Links Microsoft Security Copilot Midnight Blizzard Attack on Microsoft Secure Future Initiative Assess Application Risk with Microsoft Security Copilot Microsoft Sentinel Recorded February 18, 2025…
R
RunAs Radio
1 GitHub Copilot for SysAdmins with Jessica Deen 38:32
38:32 Play Later Play Later Lists Like Liked38:32
Play Later Play Later Lists Like LikedWhat can GitHub Copilot do for SysAdmins in 2025? Richard talks to Jessica Deen from GitHub about her experiences using Copilot for her work. Jessica talks about Copilot being the first stop for most tasks - describing the task to Copilot helps you think through the problem, and often the tool can generate code or information to get that task done fast. Today's GitHub Copilot can handle everything from explaining existing code to writing something new, debugging a problem, or even writing documentation! Links GitHub Copilot Changing the AI Model for Copilot Chat Visual Studio Code Insiders Azure Extensions GitHub Spark Launch Darkly Recorded March 13, 2025…
R
RunAs Radio
How do you write better PowerShell? Richard talks to Jeff Hicks about his latest book, Behind the PowerShell Pipeline, and his efforts to promote writing PowerShell scripts that are easy to understand, use, and maintain! Jeff talks about how making a script work is not enough anymore - you can use GitHub Copilot. The goal is to make the output as usable as possible, whether that is consistent output that is pipe-able or using color coding and column controls to make the results as actionable as possible. This is especially true as your team grows and more than one person works on scripts. Now, you'll want testing and source control, too! Links PowerShell 7.5 Behind the PowerShell Pipeline GitHub Copilot Pester PowerShell Summit Recorded February 20, 2025…
R
RunAs Radio
How are you managing your AI costs? Richard chats with Sonia Cuff about how she's been helping sysadmins understand how AI technology is billed out and how to measure them within a given application and across the organization. Sonia starts with some definitions since the term AI is so broad. It's not just about large language models! The conversation also dives into carbon footprints, and using the FinOps models to help with costing for your cloud infrastructure, whether you're using AI or not! Links OpenAI Tokenizer Manage Cost for Azure OpenAI Service Sustainable Software Engineering with AKS Azure Carbon Optimization FinOps Foundation FinOps FOCUS Phoenix Project Recorded February 19, 2025…
R
RunAs Radio
1 Strong Certificate Mapping in Active Directory with Richard Hicks 39:33
39:33 Play Later Play Later Lists Like Liked39:33
Play Later Play Later Lists Like LikedAre you using strong certificate mapping in Active Directory? Richard Hicks returns to the show to talk about the impacts of KB5015754, issued way back in 2022, and how it turned into an enforcement event on February 11, 2025 that might have caused some serious problems for folks trying to authenticate to Active Directory. For most sites, the upgrade to strong certificates was pretty much automatic. But if you're using Intune SCEP, you needed to do some configuration - and if that was missed, there is trouble. There are workarounds for now, but come September 2025, enforcement will be mandatory and everything gets harder, so it's worth looking into it now! Links KB5015754: Certificate-based Authentication Changes on Windows Domain Controllers Richard's Blog Post on Strong Certificate Mapping Enforcement Active Directory Certificate Services Create and Assign SCEP Certificate Profiles in Intune Heartbleed Recorded February 17, 2025…
R
RunAs Radio
What does it mean to be secure by design? Richard chats with Karinne Bessette about the scope of the problem around making more secure software. Karinne talks about the US government's Cybersecurity and Infrastructure Security Agency (CISA) push to promote more secure software products. The conversation digs into some of the more famous exploits in recent years and some of the challenges of dealing with development tools that require super-user privileges, getting security testing done promptly and responding to exploits effectively when they happen. Links Women in Teams CISA Secure by Design Azure Kubernetes Service Microsoft Security Response Center Recorded February 21, 2025…
R
RunAs Radio
1 Exchange Server in 2025 with Michel de Rooij 31:42
31:42 Play Later Play Later Lists Like Liked31:42
Play Later Play Later Lists Like LikedWhat is it like to take care of an Exchange Server in 2025? Richard chats with Michel de Rooij about his work with Exchange, including the many scripts he has written and published over the years to help sysadmins solve problems. Michel discusses how staying on-premises with Exchange is getting harder - the new version will be subscription-based! The conversation also digs into the new version of Outlook, the challenges of securing email, and Michel's latest book Pro Exchange Administration. Links Remove DuplicateItems Script Unarchive Script Pro Exchange Administration Office 365 for IT Pros Microsoft Defender for Office 365 Recorded January 9, 2025…
R
RunAs Radio
How do you manage your CI/CD pipeline resources? Richard chats with Eliza Tarasila about Managed DevOps Pools in Azure DevOps. Eliza tells the story of discovering that teams were using Azure DevOps internally at Microsoft but would need to build their tooling to stand up the resources for testing and deployment. Managed DevOps Pools became the standard way to specify resources like virtual machines and assign them to projects so that they would start up automatically. The resources in the pool can be custom resources in Azure or even on-premises servers! And, more importantly, you don't need to care and feed for the infrastructure used in the pipelines, Azure DevOps will do it for you. Links Azure DevOps Create and Manage Pools Managed DevOps Pool Origin Story Azure DevOps Pricing Azure Spot Virtual Machines Managed DevOps Pools Documentation Recorded January 6, 2025…
R
RunAs Radio
1 Upgrading to Windows Server 2025 with Robert Smit 37:51
37:51 Play Later Play Later Lists Like Liked37:51
Play Later Play Later Lists Like LikedReady to upgrade to Windows Server 2025? Richard talks to Robert Smit about his experiences doing an upgrade—with a few important dos and don'ts! Robert talks about dusting off your Active Directory setup and ensuring you're at the Server 2016 functional level. The conversation also dives into the new-build-versus-upgrade options, taking advantage of SMB over QUIC and SMB Compression, and much more! Links Windows Server 2025 Upgrading to Windows Server 2025 Azure Arc Windows Admin Center SMB Compression Windows Tools Remote Server Administration Tools Configuration Manager Azure Arc-enabled System Center Virtual Machine Manager Live Migration with Workgroup Cluster Recorded January 7, 2025…
R
RunAs Radio
1 Microsoft Entra ID Protection with Corissa Koopmans 38:20
38:20 Play Later Play Later Lists Like Liked38:20
Play Later Play Later Lists Like LikedHow can Entra ID Protection help keep your organization resist security breaches? Richard talks to Corissa Koopmans about thinking beyond authentication and authorization and into conditional access - knowing what is normal and abnormal behavior for your users. Corissa recommends looking at the Entra ID Protection Dashboard - whether you have configured anything or not - to see what potential risks you have today. Whether it's logins from places where you have no workers or some "impossible travel" or weird browser connections, ID Protection detects and identifies those events. When combined with conditional access, Defender for Cloud, or even Microsoft Intune - you get a "better together" effect that makes it easier to know when something bad is happening! Links Microsoft Entra ID Protection Azure Active Directory Conditional Access Entra ID Protection Dashboard Log Analytics Agent Microsoft Intune Microsoft Defender for Cloud Microsoft Sentinel Recorded December 10, 2024…
R
RunAs Radio
1 Querying for Breaches with Mark Morowcyznski 34:07
34:07 Play Later Play Later Lists Like Liked34:07
Play Later Play Later Lists Like LikedDo you Kusto? Richard talks to Mark Morowczynski about his new book, The Definitive Guide to KQL, and the power of Kusto to look across your Azure tenant and understand operational and security issues. Mark talks about being able to query across all log sets, telemetry, the M365 graph, and more - to help understand issues. The book provides example queries you could run today, including knowing the first and last time a user logged on and what devices they used. There are examples of calculating baseline behavior for an account so that you can see when unusual activity starts. There are a ton of excellent queries for operational excellence and cybersecurity - get started today! And for RunAs listeners, you can use code KUSTO to get 30% off the book! Links Threat Intelligence Blog Phishing-Resistant Passwordless Authentication Kusto Query Language Microsoft Sentinel Microsoft Security Copilot KQL Guide on GitHub Recorded December 19, 2024…
R
RunAs Radio
What about SQL Server in Microsoft Fabric? Richard chats with Anna Hoffman about the preview release of SQL 2025 in Microsoft Fabric and the power of having your data store where you are doing your analytics and machine learning! Anna talks about new applications being developed using AI technologies like large language models and that often those applications need a data store - so why not keep it with the application in a configuration ideally suited for that work? The conversation digs into the relationship between existing SQL data stores and Fabric, how interconnections can happen, and perhaps a future of motion between them - but for now, it's a preview, so take a look! Links SQL Database in Microsoft Fabric Microsoft Purview Microsoft Entra Azure Private Link for Azure SQL Database Microsoft Copilot for Azure SQL Database sp_invoke Recorded December 16, 2024…
Welcome to Player FM!
Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.
Daily Deals
Daily Deals
Similar to RunAs Radio
This is the audio podcast version of Troy Hunt's weekly update video published here: https://www.troyhunt.com/tag/weekly-update/
…
continue reading
The power of Data is undeniable. And unharnessed - it’s nothing but chaos. Making data your ally. Using it to lead with confidence and clarity. Host Jess Carter is solving problems in real-time to reveal what’s possible. Helping communities and people thrive. This is Data Driven Leadership, a show brought to you by Resultant.
…
continue reading
When it comes to technology, you may have questions. So do we. Every other week, we demystify the tech industry, one answer at a time. Join us as we bring together a chorus of perspectives from within Red Hat to break down the big, emerging ideas that matter both today and beyond. Compiler is hosted by Angela Andrews and Brent Simoneaux. Learn more about our show at redhat.com/en/compiler-podcast
…
continue reading
S
Security Weekly Podcast Network (Audio)
1
Security Weekly Podcast Network (Audio)
Security Weekly Productions
2k3k
Welcome to the Security Weekly Podcast Network, your all-in-one source for the latest in cybersecurity! This feed features a diverse lineup of shows, including Application Security Weekly, Business Security Weekly, Paul's Security Weekly, Enterprise Security Weekly, and Security Weekly News. Whether you're a cybersecurity professional, business leader, or tech enthusiast, we cover all angles of the cybersecurity landscape. Tune in for in-depth panel discussions, expert guest interviews, and ...
…
continue reading
BBC Radio 5 live’s award winning gaming podcast, discussing the world of video games and games culture.
…
continue reading
Android Backstage, a podcast by and for Android developers. Hosted by developers from the Android engineering team, this show covers topics of interest to Android programmers, with in-depth discussions and interviews with engineers on the Android team at Google. Subscribe to Android Developers YouTube → https://goo.gle/AndroidDevs
…
continue reading
Africa-focused technology, digital and innovation ecosystem insight and commentary.
…
continue reading
Show notes are at https://stevelitchfield.com/sshow/chat.html
…
continue reading
Embedded is the show for people who love gadgets. Making them, breaking them, and everything in between. Weekly interviews with engineers, educators, and enthusiasts. Find the show, blog, and more at embedded.fm.
…
continue reading
.NET Rocks! is an Internet Audio Talk Show for Microsoft .NET Developers.
…
continue reading
Player FM - Podcast App
Go offline with the Player FM app!
Go offline with the Player FM app!
