Free Daily Podcast Summary
Security in 45: Daily Summaries Delivered
by Mike Veedock and Andres Sarmiento
Get key takeaways, quotes, and insights from Security in 45 in a 5-minute read. Delivered straight to your inbox.
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- Mar 27, 202636 min
Identity is the New Perimeter — How Attackers Bypass MFA in 2026
Identity has officially replaced email as the #1 threat vector — and attackers already know you have MFA. In this episode, Andres and Mike break down why the old network perimeter is dead, what modern identity attacks look like in the wild, and the concrete steps every organization should take to defend themselves in 2026.What we cover:🔴 Identity is the New Perimeter Credentials, sessions, and tokens are the crown jewels now. Your firewall no longer defines your security boundary — your identity layer does.🏛️ IGA — Identity Governance & Administration Not a product, a framework. How organizations manage user identities, roles, permissions, and compliance across every user, device, and workload.⚔️ Modern Identity AttacksPush Fatigue — bots flooding MFA requests timed for nights and weekendsToken Theft — bypasses MFA entirely by stealing your sessionOAuth Abuse — using legitimate workflows to gain persistent app accessSession Hijacking — stealing cookies and replaying tokensPrivilege Escalation — enumerating users, targeting admin accounts🔐 MFA Evolution Phishing-resistant MFA, BLE proximity auth (your phone must be physically near the device), passwordless with biometrics, and Cisco Duo + Persona for social-engineering-proof identity resets.🛡️ How to Defend Require phishing-resistant MFA, implement device trust, continuously verify after initial access, monitor Identity Behavior Analytics signals (impossible travel, unusual token usage, suspicious admin activity), and isolate privileged workflows.Resources:Verizon DBIR: verizon.com/business/resources/reports/dbirCrowdStrike Global Threat Report: crowdstrike.com/global-threat-reportCisco Duo: duo.comPersona: withpersona.com🎙️ Next episode: Season 3, Episode 3 — Ransomware 🌐 All episodes + show notes: securityin45.com
- Feb 9, 202637 min
Zero Trust in the Real World
How Does Zero Trust Look Like — Architecture & ExamplesPractical example components and tactics used in Zero Trust👉 12 Zero Trust Architecture Examples With Actionable GuideBreaks down real architectural elements you’ll see in a Zero Trust deployment (like micro-segmentation, identity verification, etc.). Zero Trust explained in simple terms with key goals👉 Zero Trust Security Model Explained — ZPE Systems GuideCovers model vs perimeter security, how trust boundaries shift to protect surfaces, and key principles. Government & public sector perspective including ZTA guidance👉 Zero Trust | Cybersecurity and Infrastructure Security Agency (CISA)Official guidance on how Zero Trust is being defined and applied in practice across agencies. Beginners + real project example (Google’s BeyondCorp)👉 BeyondCorp (Google’s Zero Trust Model) — WikipediaGoogle’s BeyondCorp is a well-known industry example of Zero Trust in large scale production
- Dec 13, 202455 min
S2 E3 - Breaking down Segmentation with Chad Buey and Sam Baxter
The meeting discussed the importance of segmentation for network performance and security, highlighting Cisco's role in providing solutions and support for implementing effective segmentation.The importance of rewatching the recorded meeting on various platforms like YouTube and Apple podcasts is mentioned.Micro segmentation using group based policy is considered more granular than VLAN to VLAN segmentation.The meeting discussed the topic of segmentation, with a focus on proper segmentation and its importance for network performance and security.The evolution of segmentation over the past ten years was highlighted, including the transition to dynamic segmentation and the impact of cloud environments.Segmentation was described as having both proactive and reactive components, with a proactive approach being important for implementing zero trust and a reactive approach being necessary to respond to threats and contain potential breaches.Segmentation can be enforced at various points in the network, such as through VLANs, zone-based firewalls, and group-based policy.Different organizations use different methods for segmentation enforcement, including firewalls and access control lists on switch ports.Trustsec and security group tags (SGTs) are effective ways to enforce segmentation and maintain a common policy across the network.Cisco plays a key role in segmentation, with products like ISE, duo, and multi-cloud defense.Integration of different security solutions makes implementing segmentation easier and more effective.Cisco's secure access and secure workload offer additional features for application micro-segmentation and resource connectors for hybrid workers.Segmentation is critical for network security and should be planned and designed carefully.Cisco offers solutions and support to help achieve segmentation goals and limit the blast radius of network breaches.
- Nov 1, 202452 min
S2 E2 - Simplicity with SSE - Cisco Secure Access Discussion with David Keller and Justin Murphy
The meeting discussed updates and plans for Secure Access and User Suite, including hybrid cloud deployment, VPN enhancements, simplification of connectivity and policy management, and the consolidation of tools into a single dashboard. Secure Access and User Suite were discussed in a recent meeting, including plans for a hybrid cloud deployment. There have been updates to VPN, such as radius support and SMB version two for ZTA. The use of quick and mask for performance improvement is being discussed, but no claims are being made yet. Participants discussed their plans for trick-or-treating and handing out candy on Halloween. They also mentioned decorating their houses with inflatables and lights for the occasion. Secure Access offers flexibility for connecting different devices and users to various resources. The goal is to move towards simplicity, allowing end users to connect without thinking about the process. Security features include zero trust access, user identity verification, posture controls, and various security controls for internet and private access. Secure access is working on all aspects of the dashboard, including policy, internet experience insights, and analyzing reporting and logs. Experience insights integrated with secure access dashboard provides real-time monitoring of user experience, device resources, and network performance. Secure access simplifies connectivity by allowing application definitions to be defined once and providing redundancy through network tunnel groups and resource connectors. The goal is to have a unified policy that can be implemented across all layers and aspects of the network. Secure access aims to simplify remote access VPN for end users and make it easier for administrators. The secure access solution consolidates multiple tools and services into a single dashboard. There is a focus on simplification, enabling engineers to be more strategic and less tactical. SSL decryption in secure access allows for global decryption at the firewall level and selective decryption for web traffic. TLS 1.3 is fully decrypted, providing advanced capabilities to block specific aspects of applications. Secure access offers scalability and handles increased encrypted traffic without impacting user experience or requiring additional hardware.
- Oct 2, 20241h 1m
XDR Conversation with Briana Farro and Matt Robertson
The meeting discussed the features and benefits of Cisco XDR, including its integration capabilities, threat detection capabilities, and plans for expansion. Season two of the Security 45 show will feature live demos after each conversation. Matt Robertson, a distinguished engineer at Cisco, focuses on threat detection and oversees analytics stacks. XDR has gained higher demand and market traction over the past year, with Cisco XDR acquiring new customers. Cisco XDR defines XDR as a collection of telemetry from multiple sources and the application of analytics for threat detection and response. Cisco XDR is an open ecosystem that integrates with third-party vendors, even direct competitors, to provide comprehensive threat detection capabilities. Meraki integration allows for easy deployment of network detection and response product with direct cloud upload of logs. The XDR integration solves the problem of overlapping IP spaces in branch scenarios, allowing for unique profiling of devices. Matt is the champion of the effort to bring Cisco's solutions together and make them simple and unified. XDR has added many integrations for responsive actions, including extra hop, dark trace, and Microsoft 3605 for email. XDR allows for customization of guided response playbooks and the sharing of workflows on the automate exchange. Cisco XDR simplifies incidents by consolidating related information into a single incident. Advanced analytics and correlation across multiple sources help determine incident severity and prioritize actions. XDR's ability to correlate data from suspicious emails to network logons enables the identification of compromised accounts. Cisco plans to expand XDR capabilities to include enterprise networking spaces like Meraki and Cat 9000. Vendors are transitioning from EDR or SIM to XDR, with Cisco, Microsoft, and Palo Alto making acquisitions. Cisco aims to bring together threat detection, incident response, and intelligent response management for customers. Integration and collaboration between different solutions, such as Splunk Enterprise and XDR, are being prioritized.
- Oct 2, 202455 min
Security & Artificial Intelligence with with Joel Sprague and Sudhir Desai
Summary (AI-Generated) what AI is and how it works; why we are seeing so much emphasis on AI these days; the dangers of AI, such as data exposure and wrong information; what Cisco is doing to secure AI; recommendations for customers who are using AI. Some key points from the video: AI is a fancy expensive autocomplete. We are seeing so much emphasis on AI these days because we have more resources to really see it explode and to see the benefits of it. The dangers of AI include data exposure, wrong information, and hacks. Cisco is working on securing AI by monitoring it, testing it out all the time, and keeping it secure. Recommendations for customers who are using AI include monitoring it, testing it out all the time, and keeping it secure.
- Oct 2, 202448 min
Zero Trust with Estefania Fernandez and Neil Lovering
Meeting summary AI-generated The meeting discussed technical challenges with editing webinar links, the concept of zero trust as a security approach, the importance of multi-factor authentication and endpoint protection in implementing zero trust, and the need for careful planning and a multi-vendor approach in achieving comprehensive security solutions. The participants discuss technical issues and difficulties with editing links for a webinar. They talk about their busy schedules and inability to say no to requests. They also have casual conversations about their backgrounds, camping experiences, and military service. The concept of zero trust originated more than 20 years ago as a way to define a better and closer concept of security. Zero trust is not a product, but an industry concept that vendors contribute to with their products and capabilities. Everyday examples of zero trust include configuring social media privacy settings and setting parental controls on devices for children. In the industry, examples of zero trust can be seen in multi-factor authentication for banking access and limiting access to specific servers based on individual roles. Zero trust is a journey and requires the adoption of technologies and tools. Implementing multi-factor authentication (MFA) is essential as relying solely on usernames and passwords is risky. Endpoint protection and segmentation are important steps in the zero trust journey. Balancing security and usability is crucial, and implementing hidden technologies can frustrate attackers while providing a consistent user experience. Zero trust is a continuous journey and requires ongoing effort and improvement. Implementing zero trust involves careful planning, identifying areas of improvement, and seeking help from experts. It is important to avoid rushing into implementing security measures without considering the specific needs of the company. Zero trust requires a multi-vendor approach and no single vendor can provide a complete solution.
- Oct 2, 202450 min
Identity Management with John Newman and Sam Baxter
Cisco’s Identity and Access Management (IAM) tools, such as the Identity Services Engine (ISE), are designed to provide secure access to networks by ensuring that the right people or devices can access the appropriate resources. Some of the key features include: Centralized Access Control: ISE provides policy-based network access control, enabling administrators to define rules based on user identity, device type, and other contextual data. This is critical in enforcing security policies. Zero Trust Architecture: It supports a Zero Trust model, which requires users and devices to authenticate every time they request access to resources, reducing the risk of security breaches. Endpoint Visibility and Profiling: Cisco ISE identifies and profiles devices that are connected to the network, enabling administrators to monitor, segment, and control access based on device type and security posture. Multi-factor Authentication (MFA): Integrating with MFA, Cisco IAM solutions provide added layers of security by ensuring that users must prove their identity with multiple factors. Integration with Other Cisco Solutions: Cisco’s IAM integrates seamlessly with other Cisco security and networking solutions, like Secure Network Analytics and Cisco Umbrella, to provide enhanced visibility and protection.
Get Security in 45 summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
The Security Podcast of Silicon Valley
YSecurity
Enterprise Security Weekly (Audio)
Security Weekly Productions
Security Weekly Podcast Network (Video)
Security Weekly Productions
CISO Series Podcast
David Spark, Mike Johnson, and Andy Ellis
Enterprise Security Weekly (Video)
Security Weekly Productions
Security Weekly Podcast Network (Audio)
Security Weekly Productions
Cloud Security Today
Matthew Chiodi
The Azure Security Podcast
Michael Howard, Sarah Young, Gladys Rodriguez and Mark Simos
Decipher Security Podcast
Decipher
Shared Security Podcast
Tom Eston, Scott Wright, Kevin Tackett
The Cybersecurity Defenders Podcast
LimaCharlie
Security Intelligence Podcast
IBM Security
About Security in 45
A monthly security-focused webinar in a fun podcast format! Each episode features a new security topic, with industry-leading guest speakers on every show. Every episode is followed by a Live Demo of the same topic the following day! Designed to be enjoyed over your lunch or coffee break! And open to ALL, customers, partners, and internal Cisco employees.
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from Security in 45 in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's Security in 45 daily summary?
It's a free AI-powered email that summarizes new episodes of Security in 45 as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the Security in 45 podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official Security in 45 product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Mike Veedock and Andres Sarmiento.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts. Upgrade to Pro for 15, or Premium for 50. Browse our full catalog at /podcasts.
What topics does Security in 45 cover?
Security in 45 covers topics including Technology. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting Security in 45 summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.