Free Daily Podcast Summary
Blue Security: Daily Summaries Delivered
by Andy Jaw & Adam Brewer
A podcast for information security defenders (blue team) on best practices, tools, and implementation for enterprise security.
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 6 days ago44 min
LG TV's data collection and Crowdstrike Zero Day
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam celebrate six years of consistent podcasting, reflecting on their journey and the evolution of their roles in the tech industry. They delve into a significant controversy surrounding LG TVs, discussing privacy concerns related to data collection and microphone usage. The conversation transitions into smart home and IoT security, where they provide practical strategies for securing connected devices and protecting personal data. In this episode, the hosts discuss the importance of securing IoT devices through VLANs, the ongoing threat posed by the hacker known as Nightmare Eclipse, and the implications of a new vulnerability discovered in CrowdStrike's Falcon product. They also delve into the ethical considerations surrounding vulnerability disclosure, emphasizing the need for coordinated responses to prevent collateral damage in the cybersecurity landscape.----------------------------------------------------YouTube Video Link: https://youtu.be/hxPShoN-Rb8----------------------------------------------------Documentation: https://www.techradar.com/televisions/lg-tvs-collect-far-more-data-on-you-than-youd-expect-says-new-report-including-logging-microphone-audio-while-on-standbyhttps://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- 1 weeks ago45 min
LiteLLM Breach, an Entra Connect Deadline, and 153 Million Leaked IDs
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into significant cybersecurity topics, including the Light LLM breach, a supply chain attack that affected thousands of organizations, and an urgent reminder for Microsoft Entra Connect users to upgrade their systems. The discussion emphasizes the importance of understanding the origins of security breaches, the need for ongoing credential management, and the critical nature of timely software updates to maintain security integrity. In this conversation, Adam and Andy discuss the implications of Microsoft's Secure Future Initiative, emphasizing the need for organizations to prepare for breaking changes in software and services. They also delve into the ID Scan.net leak, highlighting the risks associated with compromised driver's licenses and the potential for identity theft. The discussion concludes with a focus on data retention practices and the importance of vendor risk management in safeguarding sensitive information.----------------------------------------------------YouTube Video Link: https://youtu.be/fHGJBUazeOI----------------------------------------------------Documentation: https://docs.litellm.ai/blog/security-update-march-2026https://thehackernews.com/2026/08/malicious-litellm-releases-tied-to.htmlhttps://learn.microsoft.com/en-us/entra/identity/hybrid/connect/reference-connect-version-historyhttps://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- 2 weeks ago54 min
AI 101 - Understanding core AI terminology
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam delve into the complexities of AI in cybersecurity, focusing on the adoption rates and understanding of various AI technologies. They discuss the differences between large language models (LLMs) and small language models (SLMs), the importance of APIs, and the role of harnesses and agents in executing AI tasks. The conversation highlights the need for clarity in terminology and the varying levels of AI adoption across different regions and industries. In this episode, the hosts delve into the intricacies of AI agents, skills, and the MCP (Model-Connect-Protocol) as a universal connector for AI tools. They discuss the importance of understanding the attack surface created by these integrations and the role of Retrieval Augmented Generation (RAG) in enhancing AI accuracy. The conversation emphasizes the need for governance and best practices in deploying AI solutions responsibly while recognizing the significant productivity gains they can offer.----------------------------------------------------YouTube Video Link: https://youtu.be/31WI5iFFLog----------------------------------------------------Documentation: https://www.sans.org/press/announcements/ai-use-cybersecurity-jumped-from-50-to-78-year-ai-related-failures-rose-sharply-too-new-sans-institute-survey-reveals-governance-gaphttps://www.digitalapplied.com/blog/mcp-adoption-statistics-2026-model-context-protocolhttps://learn.microsoft.com/en-us/copilot/security/plugin-mcphttps://www.zscaler.com/es/resources/white-papers/zscaler-ai-guard-detectors-inline-protection-for-ai.pdf----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- 3 weeks ago46 min
DEF CON Is Not Cooked; Why AI Won't Replace Cybersecurity
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the implications of AI on cybersecurity, particularly in light of recent comments from Jason Haddock regarding the future of the industry. They explore the notion that AI will not replace cybersecurity but rather enhance it by reducing the time needed to identify vulnerabilities. The conversation also delves into the evolving nature of entry-level roles in cybersecurity, emphasizing the need for new training methods and the importance of human ingenuity in a rapidly changing landscape. Finally, they address the misconceptions surrounding AI's capabilities and the complexities of implementing it in enterprise environments. In this conversation, Adam Brewer and Andy Jaw explore the complexities of AI adoption in enterprise environments, the challenges faced by cybersecurity professionals, and the evolving landscape of technology. They discuss the disparity between the capabilities of early adopters and the average enterprise, the importance of human expertise in leveraging AI, and the asymmetrical advantages that attackers may gain from AI advancements. The conversation emphasizes the need for a balanced perspective on AI's role in cybersecurity, advocating for a realistic understanding of its capabilities and limitations.----------------------------------------------------YouTube Video Link: https://youtu.be/SsLKJABOeGc----------------------------------------------------Documentation: https://x.com/Jhaddix/status/2088299917370601734----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- Aug 18, 202640 min
Evil Twins, AI Agents, and Cyber Privateers
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant cybersecurity topics, including an evil twin attack on a Delta flight, the emergence of fully autonomous cyber attacks, and a new policy allowing private companies to conduct offensive cyber operations against transnational criminal organizations. They explore the implications of these events on the cybersecurity landscape and the responsibilities of professionals in the field.----------------------------------------------------YouTube Video Link: https://youtu.be/fPGObiqf0SI----------------------------------------------------Documentation: https://arstechnica.com/information-technology/2026/08/def-con-crowd-suspected-in-fake-hotspot-attack-on-delta-flight/https://www.cnn.com/2026/08/13/tech/china-taiwan-ai-agent-cyberattack-intl-hnkhttps://www.whitehouse.gov/presidential-actions/2026/08/expanding-capabilities-to-combat-transnational-cyber-enabled-crime/----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- Aug 11, 202654 min
Critical infrastructure hacks and rogue AI agents
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the recent cyberattacks on water systems in Minnesota, attributed to Iran-linked hackers. They explore the vulnerabilities of programmable logic controllers (PLCs) and the broader implications for operational technology (OT) security. The conversation delves into the differences between Iranian and Chinese cyber threats, the limitations of traditional security measures, and the cultural challenges faced by cybersecurity professionals in securing OT environments. The episode concludes with key takeaways and recommendations for improving security in municipal utilities. The conversation delves into recent AI security incidents involving OpenAI and Anthropic, highlighting the implications of these breaches and the need for better operational discipline and regulatory frameworks. The speakers discuss the maturity of AI companies, the human errors leading to security lapses, and the potential risks associated with AI models. They emphasize the importance of treating AI testing environments with the same seriousness as production environments and call for standardized incident reporting in the AI sector.----------------------------------------------------YouTube Video Link: https://youtu.be/6svC857Z_Wg----------------------------------------------------Documentation: https://cybernews.com/security/minnesota-water-systems-cyberattack-iranian-hackers/https://thehackernews.com/2026/08/over-4400-rockwell-plcs-exposed-online.htmlhttps://www.techspot.com/news/113281-openai-rogue-ai-agent-did-more-than-hack.htmlhttps://thehackernews.com/2026/08/claude-mythos-5-tried-to-backdoor-real.htmlhttps://www.anthropic.com/news/investigating-incidents-cybersecurity-evalshttps://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- Aug 4, 202647 min
Hotel Wi-Fi Hijacks and Border Phone Searches
SummaryIn this episode of the Blue Security Podcast, host Andy Jaw and guest Carly Salmon discuss critical issues in data security, focusing on a recent hotel Wi-Fi hack that exploits DNS settings to capture sensitive information and the legal ramifications of digital privacy through the case of Sam Tulnik, who faces charges for allegedly destroying evidence on his phone during a border search. The conversation emphasizes the importance of vigilance in cybersecurity and the complexities of legal protections for digital privacy. In this conversation, Carley and Andy delve into the legalities surrounding phone searches at borders, the implications of consent, and the nuances of privacy in the digital age. They discuss the recent case involving a phone being wiped before a search, the use of Graphene OS for enhanced security, and practical tips for travelers to protect their data. The conversation highlights the balance between security and usability in technology, emphasizing the importance of being vigilant and informed about personal safety measures.----------------------------------------------------YouTube Video Link: https://youtu.be/pHZiQDWXxVs----------------------------------------------------Documentation: https://reliaquest.com/blog/threat-spotlight-dns-poisoning-tactics-expand-to-hospitality/https://www.bleepingcomputer.com/news/security/hackers-hijack-hotel-wi-fi-dns-to-steal-microsoft-365-accounts/https://cybernews.com/privacy/grapheneos-duress-password-border-case-legality/----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- Jul 28, 202650 min
MDASH in Prod, Intune Sync, OpenAI-Hugging Face Incident
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss significant developments in cybersecurity, including Microsoft's new AI vulnerability scanner, the long-awaited fix for Intune's sync button, and the implications of the Hugging Face and OpenAI incident. They explore the operationalization of AI in vulnerability discovery, the technical nuances of Intune's functionality, and the autonomy of AI agents in cyber operations, emphasizing the need for a balanced understanding of AI capabilities and limitations. In this conversation, Adam Brewer and Andy Jaw discuss the limitations of AI, the importance of cybersecurity in innovation, and the implications of recent incidents involving AI models. They emphasize the need for better security practices, the geopolitical aspects of AI development, and the future of AI models in various applications. The discussion highlights the balance between innovation and security, as well as the evolving landscape of AI technologies.----------------------------------------------------YouTube Video Link: https://youtu.be/FrhlHhjHtAQ----------------------------------------------------Documentation: https://huggingface.co/blog/security-incident-july-2026https://openai.com/index/hugging-face-model-evaluation-security-incident/https://www.techrepublic.com/article/news-microsoft-july-2026-patch-tuesday/https://patchmypc.com/blog/inside-the-improved-on-demand-sync-for-windows-devices/----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
About Blue Security
A podcast for information security defenders (blue team) on best practices, tools, and implementation for enterprise security.
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from Blue Security in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's Blue Security daily summary?
It's a free AI-powered email that summarizes new episodes of Blue Security as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the Blue Security podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official Blue Security product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Andy Jaw & Adam Brewer.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts. Upgrade to Pro for 15, or Premium for 50. Browse our full catalog at /podcasts.
What topics does Blue Security cover?
Blue Security covers topics including Technology. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting Blue Security summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.