Free Daily Podcast Summary
Blue Security: Daily Summaries Delivered
by Andy Jaw & Adam Brewer
A podcast for information security defenders (blue team) on best practices, tools, and implementation for enterprise security.
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 4 days ago47 min
Binance’s $6.3 Billion Breach, Fake Job Interviews, and Entra’s Passkey Deadline
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam discuss the recent Binance hack, which resulted in the largest cryptocurrency theft on record, amounting to $6.3 billion. They delve into the details of the attack, including how it was executed, the response from Binance, and the attribution of the attack to North Korea. The conversation also explores the cybersecurity implications of such attacks, particularly focusing on social engineering tactics like fake job interviews that can lead to compromises. The hosts emphasize the importance of robust cybersecurity measures and the need for organizations to adapt to the evolving threat landscape. In this conversation, Andy Jaw and the Blue Security Podcast team discuss various strategies for enhancing cybersecurity, focusing on the importance of EDR detections, domain management, and the separation of workstations to mitigate risks. They delve into the significance of a healthy workplace culture in reducing employee turnover and the risks associated with business email compromise. The discussion also highlights the transition to passkeys in identity management and the need for organizations to adopt stronger security practices, including phish-resistant MFA and proper device management.----------------------------------------------------YouTube Video Link: ----------------------------------------------------Documentation: https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attackhttps://www.helpnetsecurity.com/2026/09/21/north-korean-hackers-contagious-interview-defenses/https://www.bleepingcomputer.com/news/security/north-korean-hackers-adopt-clickfix-attacks-to-target-crypto-firms/https://learn.microsoft.com/entra/identity/authentication/concept-sms-voice-retirement----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- 1 weeks ago44 min
Awareness Month Became Patch Month: PHP2Shell, Stolen AI Keys, and a Broken CA
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss the critical cybersecurity incidents that emerged during Cybersecurity Awareness Month. They delve into the PHP vulnerabilities that were leaked, the Railway incident involving AI API keys, the Light LLM attack with poisoned releases, and the breach of the E Mudara certificate authority. The conversation emphasizes the importance of responsible vulnerability disclosure, the challenges faced by cybersecurity teams, and the need for continuous improvement in security practices.----------------------------------------------------YouTube Video Link: https://youtu.be/M_5pnEqUC14----------------------------------------------------Documentation: https://www.php.net/archive/2026.php#2026-10-23-1https://www.wiz.io/blog/litellm-compromised-steals-credentialshttps://blog.railway.com/p/preliminary-report-october-security-incidenthttps://bugzilla.mozilla.org/show_bug.cgi?id=2083449----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- 2 weeks ago48 min
AI Readiness for Defenders - What the Data Actually Shows
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss the concept of AI readiness for defenders in cybersecurity. They explore the findings from Zscaler's Threat Labs, focusing on the vulnerabilities that organizations face and the importance of having the right controls in place. The conversation delves into the Frontier AI Readiness Report, highlighting the speed at which AI can exploit vulnerabilities and the need for companies to enhance their security architecture. The hosts emphasize the significance of understanding the five pillars of AI security, managing blast radius, and improving identity security to protect against evolving threats. In this episode, the hosts discuss critical themes in cybersecurity, focusing on phishing resistance, AI governance, real-world attack case studies, data protection strategies, and the role of deception techniques in enhancing security. They emphasize the importance of user awareness in security controls, the need for effective governance of AI systems, and the necessity of implementing robust data protection measures. The conversation also highlights the significance of deception techniques in detecting and responding to AI-driven attacks, advocating for proactive measures to safeguard sensitive information.----------------------------------------------------YouTube Video Link: https://youtu.be/uVPVNzerp4M----------------------------------------------------Documentation: https://www.zscaler.com/resources/industry-reports/zscaler-threatlabz-frontier-ai-readiness-report.pdfhttps://www.zscaler.com/resources/industry-reports/threatlabz-2026-phishing-initial-access-report.pdfhttps://www.zscaler.com/press/new-zscaler-report-reveals-ai-assisted-attackers-move-massive-data-theft-executive-targeting----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- 3 weeks ago57 min
Microsoft Digital Defense Report 2026
SummaryIn this episode, Andy and Adam discuss the 2026 Microsoft Digital Defense Report, focusing on the evolving threat landscape shaped by AI. They explore how AI is changing the speed of attacks, the challenges of vulnerability management, and the risks associated with AI workloads. The conversation also highlights the importance of governance and best practices for managing AI agents in cybersecurity. In this episode, the hosts discuss the critical aspects of cybersecurity, focusing on foundational concepts of agent governance, the importance of identity management, and the evolving tactics of phishing attacks. They emphasize the need for fish resistant MFA, the rise of voice phishing, and the significance of patch velocity in maintaining security. The conversation also covers emerging threats like device code phishing and the vulnerabilities in supply chains and container security. The hosts provide actionable takeaways for security leaders to enhance their cybersecurity posture.----------------------------------------------------YouTube Video Link: https://youtu.be/NOogOoP8TRs----------------------------------------------------Documentation: https://www.microsoft.com/en-us/security/security-insider/threat-landscape/2026-digital-defense-report----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- Oct 6, 202638 min
Stop phishing tests, Microsoft's Humanist AI Code of Conduct
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer delve into two significant topics in cybersecurity: the effectiveness of phishing tests and Microsoft's new Humanist AI Code of Conduct. They critically analyze the traditional approach to phishing tests, likening them to outdated fire drills that do not enhance security. The discussion emphasizes the need for a shift in focus from punitive measures to fostering a culture of reporting and collaboration. The second part of the conversation introduces Microsoft's draft code of conduct for AI, which aims to ensure that AI systems remain under human control and adhere to ethical guidelines. The hosts express optimism about these developments while acknowledging the challenges that lie ahead in both cybersecurity practices and AI governance.----------------------------------------------------YouTube Video Link: https://youtu.be/4B4EHq5peFI----------------------------------------------------Documentation: https://security.googleblog.com/2024/05/on-fire-drills-and-phishing-tests.htmlhttps://microsoft.ai/code-of-conduct/----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- Sep 29, 202629 min
Why Your Cloud Region Is Now a Physical Attack Surface
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam discuss two significant cybersecurity incidents: the emergence of AI API drain attacks and the implications of military strikes on AWS data centers. They explore how attackers can exploit API keys to run up costs without directly breaching networks and the lessons learned from AWS's experience with data loss due to drone strikes. The conversation emphasizes the evolving landscape of cybersecurity threats and the importance of robust threat modeling and data management practices.----------------------------------------------------YouTube Video Link: https://youtu.be/JWzG46q898c----------------------------------------------------Documentation: https://cybernews.com/security/hackers-advertise-ai-token-draining-service/https://arstechnica.com/gadgets/2026/09/iran-strikes-on-amazon-data-centers-caused-permanent-loss-of-customer-data/----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- Sep 22, 202653 min
Anthropic Threat Intelligence Report
SummaryIn this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss Anthropic's latest threat intelligence report, highlighting the evolving landscape of cyber threats facilitated by AI technologies. They explore various harm areas, including cyber operations, influence operations, surveillance, and conventional weapons development, emphasizing how AI is democratizing sophisticated attack methods and enabling new forms of manipulation and surveillance. In this episode, the hosts delve into the complexities of AI governance, the importance of creativity in utilizing AI, and the necessity for diversity in cybersecurity. They discuss the dual-use dilemmas of biological research, the exploitation of AI for scams, and the illicit distillation of AI models. The conversation emphasizes the evolving landscape of AI threats and the need for pragmatic approaches to security in a rapidly changing technological environment.----------------------------------------------------YouTube Video Link: https://youtu.be/pB3KxTkNDWU----------------------------------------------------Documentation: https://www.anthropic.com/threat-intelligence-report-september-2026----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
- Sep 15, 202644 min
LG TV's data collection and Crowdstrike Zero Day
SummaryIn this episode of the Blue Security Podcast, hosts Andy and Adam celebrate six years of consistent podcasting, reflecting on their journey and the evolution of their roles in the tech industry. They delve into a significant controversy surrounding LG TVs, discussing privacy concerns related to data collection and microphone usage. The conversation transitions into smart home and IoT security, where they provide practical strategies for securing connected devices and protecting personal data. In this episode, the hosts discuss the importance of securing IoT devices through VLANs, the ongoing threat posed by the hacker known as Nightmare Eclipse, and the implications of a new vulnerability discovered in CrowdStrike's Falcon product. They also delve into the ethical considerations surrounding vulnerability disclosure, emphasizing the need for coordinated responses to prevent collateral damage in the cybersecurity landscape.----------------------------------------------------YouTube Video Link: https://youtu.be/hxPShoN-Rb8----------------------------------------------------Documentation: https://www.techradar.com/televisions/lg-tvs-collect-far-more-data-on-you-than-youd-expect-says-new-report-including-logging-microphone-audio-while-on-standbyhttps://www.infosecurity-magazine.com/news/crowdstrike-privilege-escalation/----------------------------------------------------Contact Us:Website: https://bluesecuritypod.comBluesky: https://bsky.app/profile/bluesecuritypod.comLinkedIn: https://www.linkedin.com/company/bluesecpodYouTube: https://www.youtube.com/c/BlueSecurityPodcast-----------------------------------------------------------Andy JawBluesky: https://bsky.app/profile/ajawzero.comLinkedIn: https://www.linkedin.com/in/andyjaw/Email: andy@bluesecuritypod.com----------------------------------------------------Adam BrewerTwitter: https://twitter.com/ajbrewerLinkedIn: https://www.linkedin.com/in/adamjbrewer/Email: adam@bluesecuritypod.com
Get Blue Security summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
Cyberside Chats: Cybersecurity Insights from the Experts
Cybersecurity experts discuss emerging threats, AI-driven attacks, and defense strategies for professionals and executives.
The Low Down
A podcast about hacking.
Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.
Risky Bulletin
Cybersecurity news updates from the Risky Business team.
The Watchtower
Cybersecurity, data, and AI leaders share candid insights on real-world challenges and innovations beyond the headlines.
Latent Space: The AI Engineer Podcast
Conversations with AI engineers, researchers, and founders on foundation models, AI agents, infrastructure, and scientific discovery.
Hacked
Stories of hacking, tech scams, and digital mysteries explored by two hosts diving into how systems are built and broken.
Random Access Memories
Conversations with tech professionals reveal the personal stories behind their careers in cybersecurity, AI, startups, and leadership.
Ahead of the Threat: The FBI Cyber Podcast
FBI officials and experts discuss emerging cyber threats and cybersecurity fundamentals with government and industry guests.
Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure
Expert discussions on cybersecurity, national security, and threats to critical infrastructure like energy and water systems.
Phoenix Cast
Discusses cybersecurity, technology, and innovation issues in the military.
Plaintext with Rich
Explains cybersecurity topics in simple terms to help listeners stay safer online.
About Blue Security
A podcast for information security defenders (blue team) on best practices, tools, and implementation for enterprise security.
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from Blue Security in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's Blue Security daily summary?
It's a free AI-powered email that summarizes new episodes of Blue Security as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the Blue Security podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official Blue Security product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Andy Jaw & Adam Brewer.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
What topics does Blue Security cover?
Blue Security covers topics including Technology. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting Blue Security summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.