エピソード

  • Insider Risk Management, Hands-Free Music Production and Cyber Resilience vs Traditional BC/HA/DR

    Insider Risk Management, Hands-Free Music Production and Cyber Resilience vs Traditional BC/HA/DR
    2025/04/07
    In this episode of 'Cloudy with a Chance of Insights', thehosts discuss various topics related to Microsoft Cloud technologies, including the innovative Microsoft Hands-Free Sound Jam, which allows users to control music through brainwave technology. They also delve into recent cybersecurity incidents, such as the potential Royal Mail dat breach, and the implications of new legislation on cybersecurity resilience. The conversation shifts to the relationship between cyberresiliency and traditional disaster recovery, highlighting the need for a more integrated approach. The discussion moves to insider risk management, emphasising the importance of understanding internal threats and the tools available for monitoring and managing these risks. In this conversation, the speakers discuss recent Microsoft security announcements, focusing on data loss prevention, classification challenges, and the impact of AI tools on cybersecurity. Finally, they explore innovations in AI, including a project toisolate copyrighted material in large language models, and the importance of critical thinking when using AI-generated content. CHAPTERS 00:00 Introduction to Cloudy with a Chance of Insights01:23 Exploring Microsoft Hands-Free Sound Jam06:20 Cybersecurity Updates: Royal Mail Breach and NewLegislation10:19 Cyber Resiliency vs. Traditional Disaster Recovery18:35 Diving into Insider Risk Management29:22 Introduction to Microsoft Security Announcements32:41 Data Loss Prevention and Classification Challenges36:55 Innovations in AI and Cyber Resilience39:31 The Role of AI in Content Generation and Analysis43:06 Sentiment Analysis and Employee Well-being LINKS Microsoft Hands-Free Sound Jamhttps://www.microsoft.com/en-us/research/project/microsoft-hands-free-sound-jam/ Royal Mail investigates data leak claims, no impact onoperations.https://www.bleepingcomputer.com/news/security/royal-mail-investigates-data-leak-claims-no-impact-on-operations/ New cyber laws to safeguard UK economy and securelong-term growthhttps://www.gov.uk/government/news/new-cyber-laws-to-safeguard-uk-economy-secure-long-term-growth NCSC Annual Review 2024https://www.ncsc.gov.uk/collection/ncsc-annual-review-2024GCHQ worker admits taking top secret data homehttps://www.bbc.co.uk/news/articles/c5y6933pp9go Microsoft unveils Microsoft Security Copilot agents andnew protections for AIhttps://www.microsoft.com/en-us/security/blog Obliviate: Efficient Unmemorization for LLMshttps://github.com/microsoft/Obliviate-Unmemorization Microsoft Securehttps://register.secure.microsoft.com/?ocid=cmm204t3pxf CONTACTS https://themicrosoftclpudblog.comhttps://www.linkedin.com/in/richardhogan/https://x.com/richardihogan https://bsky.app/profile/richardihogan.bsky.social
    続きを読む 一部表示
    53 分
  • Identity Governance, SMB's & Cybercrime, Azure Landing Zones and Iced Coffee | EP09

    Identity Governance, SMB's & Cybercrime, Azure Landing Zones and Iced Coffee | EP09
    2025/03/24

    This week the hosts discuss various topics related toMicrosoft Cloud, including the significance of JML processes for account security, the challenges of managing permissions and access control, the launch of serverless GPUs, strategies for infrastructure landing zones, and the increasing cybersecurity threats faced by small and medium businesses (SMBs).

    The conversation emphasises the necessity for organisationsto be proactive in their security measures and to remain informed about the latest technological developments.

    This discussion explores the critical issues surroundingcybersecurity for small businesses, underscoring the vulnerabilities they encounter and the significance of tailored security solutions. Cyrus addresses the alarming statistics regarding consumer attacks, the role of Microsoft in delivering security solutions for SMBs, and the broaderimplications of cybercrime on small enterprises.

    The discussion also touches upon user experience incybersecurity measures and innovative methods to raise awareness about security threats.


    SHOW NOTES

    Announcing GA for Azure Container Apps Serverless GPU

    https://techcommunity.microsoft.com/blog/appsonazureblog/announcing-ga-for-azure-container-apps-serverless-gpus/4394302

    Level up your defense: protect against attacks usingstale user accounts

    https://techcommunity.microsoft.com/blog/microsoftthreatprotectionblog/level-up-your-defense-protect-against-attacks-using-stale-user-accounts/4386290

    The Hiscox Cyber Readiness Report 2024

    https://www.hiscox.co.uk/cyberreadiness

    Smart Choices, Strong Foundations: Selecting the RightInfrastructure Approach

    https://techcommunity.microsoft.com/blog/azureinfrastructureblog/infrastructure-landing-zone---implementation-decision-making/4386520/replies/4394658

    Unveiling Kubernetes lateral movement and attack pathswith Microsoft Defender for Cloud

    https://techcommunity.microsoft.com/blog/microsoftdefendercloudblog/unveiling-kubernetes-lateral-movement-and-attack-paths-with-microsoft-defender-f/4374958

    March Windows updates mistakenly uninstall Copilot

    https://www.bleepingcomputer.com/news/microsoft/microsoft-march-windows-updates-mistakenly-uninstall-copilot/

    FBI Cyber Internet Crime Report

    https://www.ic3.gov/AnnualReport/Reports/2023_IC3Report.pdf

    Lakera Gandalf

    https://gandalf.lakera.ai/do-not-tell-and-block

    NASA Sonification’s

    https://science.nasa.gov/mission/hubble/multimedia/sonifications/

    and just for David (which is scarily accurate)

    Ross from Friends showing his music/Keyboard Skills

    https://youtu.be/z0PJnc8BFTk

    CHAPTERS

    00:00 Introduction to Cloudy with a Chance of Insights

    02:15 JML Processes and Account Security

    08:10 Managing Permissions and Access Control

    13:17 Serverless GPUs and Cost Management

    16:50 Infrastructure Landing Zone Strategies

    21:26 Cybersecurity in the SMB Market

    22:35 Cybersecurity Landscape for Small Businesses

    30:12 Microsoft's Security Solutions for SMBs

    36:04 The Impact of Cybercrime on Small Enterprises

    40:35 User Experience in Cybersecurity

    49:37 Innovative Approaches to Cybersecurity Awareness
    続きを読む 一部表示
    53 分
  • The Kaito Project, Microsoft AI Tour London, IBM Cyber Range and Apple vs UK Government | EPO8

    The Kaito Project, Microsoft AI Tour London, IBM Cyber Range and Apple vs UK Government | EPO8
    2025/03/10

    In this episode of 'Cloudy with a Chance of Insights', thehosts discuss various topics related to Microsoft Cloud, AI tools, cybersecurity, and recent technological developments.

    They share insights from the Microsoft AI Tour, the benefitsof accessibly from Generative AI, and experiences from an IBM Cyber Range exercise.

    The conversation also delves into the implications ofgovernment requests for encrypted data and recent tech developments, including tools for reporting phishing emails and releasing classic game source codes.

    LINKS

    The Microsoft AI Tour - London

    https://aitour.microsoft.com/en-US/london

    The Kaito Project

    https://github.com/kaito-project/kaito

    Microsoft Dragon Copilot provides the healthcareindustry’s first unified voice AI assistant that enables clinicians tostreamline clinical documentation, surface information and automate tasks
    https://news.microsoft.com/2025/03/03/microsoft-dragon-copilot-provides-the-healthcare-industrys-first-unified-voice-ai-assistant-that-enables-clinicians-to-streamline-clinical-documentation-surface-information-and-automate-task/

    New sales agents accessible in Microsoft 365 Copilot helpteams close more deals, faster.

    https://www.microsoft.com/en-us/microsoft-365/blog/2025/03/05/new-sales-agents-accessible-in-microsoft-365-copilot-help-teams-close-more-deals-faster/?msockid=2db0be1eba176e053806ab29bbf76ff3

    IBM Cyber Range

    https://www.ibm.com/services/xforce-cyber-range

    IBM Completes Acquisition of HashiCorp, CreatesComprehensive, End-to-End Hybrid Cloud Platform

    https://newsroom.ibm.com/2025-02-27-ibm-completes-acquisition-of-hashicorp,-creates-comprehensive,-end-to-end-hybrid-cloud-platform

    MSFTRecon: : A Powerful Reconnaissance Tool For Microsoft 365 And Azure

    https://kalilinuxtutorials.com/msftrecon/
    続きを読む 一部表示
    30 分
  • Entra God Mode, Intune MAC OS Update, Data Formulator & Impact of GenAI on Critical Thinking

    Entra God Mode, Intune MAC OS Update, Data Formulator & Impact of GenAI on Critical Thinking
    2025/02/24
    In this episode of Cloudy with the Chance of Insights, the bi-weekly Microsoft Cloud Podcast. The hosts discuss various topics related to Microsoft Cloud technology, including the new God Mode feature in Entra, enhancements in Intune for MAC security, and recent data breaches affecting organisations like the British Museum and HPE. The conversation emphasises the importance of security hygiene, user access management, and the need for organisations to adapt to modern endpoint management solutions. In this conversation, the speakers delve into various aspects of technology governance, data automation, and the implications of generative AI on critical thinking.They discuss the importance of security in technology, the challenges of managing insider risks, and the need for practical data transformation tools. The conversation also highlights the role of confidence in AI outputs and the emerging concept of shadow IT, emphasising the necessity for organisations to adapt to these changes. Securing DeepSeek and other AI systems with Microsoft Securityhttps://www.microsoft.com/en-us/security/blog/2025/02/13/securing-deepseek-and-other-ai-systems-with-microsoft-security/ HPE notifies employees of data breach after Russian Office 365 hackhttps://www.bleepingcomputer.com/news/security/hpe-notifies-employees-of-data-breach-after-russian-office-365-hack/ Google remakes Super Bowl ad after AI cheese gaffehttps://www.bbc.co.uk/news/articles/cx2j15r1g09o The Impact of Generative AI on Critical Thinking: Self-Reported Reductions in Cognitive Effort and Confidence Effects From a Survey of Knowledge Workershttps://www.microsoft.com/en-us/research/uploads/prod/2025/01/lee_2025_ai_critical_thinking_survey.pdf?msockid=2db0be1eba176e053806ab29bbf76ff3 Data Formulator: A concept-driven, AI-powered approach to data visualisationhttps://www.microsoft.com/en-us/research/blog/data-formulator-a-concept-driven-ai-powered-approach-to-data-visualization/?msockid=2db0be1eba176e053806ab29bbf76ff3 Law firm restricts AI after 'significant' staff usehttps://www.bbc.co.uk/news/articles/cglyjn7le2ko Gaining Insight into Entra's "God Mode" for Azurehttps://www.linkedin.com/pulse/gaining-insight-entras-god-mode-azure-john-savill-yehrc/ British Museum hit by alleged IT attack by ex-workerhttps://www.bbc.co.uk/news/articles/cd9qjde4wnqo Intune for MAC OS - Pre-install and post-install scripthttps://techcommunity.microsoft.com/blog/intunecustomersuccess/understand-pre-install-and-post-install-scripts-for-macos-in-microsoft-intune/4377799 Payloadless packagedhttps://techcommunity.microsoft.com/blog/intunecustomersuccess/exploring-the-use-cases-of-payloadless-packages-in-microsoft-intune-for-macos/4382728 New application types in MacOS:https://techcommunity.microsoft.com/blog/intunecustomersuccess/understanding-application-types-in-microsoft-intune-for-macos/4373987
    続きを読む 一部表示
    40 分
  • Project Stargate, Coldplay + AI, SASE vs SSE & Residuality | EP06 | Cloudy with a Chance of Insights

    Project Stargate, Coldplay + AI, SASE vs SSE & Residuality | EP06 | Cloudy with a Chance of Insights
    2025/02/10

    In this episode of 'Cloudy with a Chance of Insights', the hosts discuss the latest developments in the Microsoft Cloud space, including OpenAI's Project Stargate and its implications for AI investments.
    They explore the evolving landscape of cybersecurity, particularly the relevance of VPNs and the emergence of SASE. The conversation also touches on the concept of Residuality Theory in software architecture, emphasizing flexibility over perfection.
    The episode concludes with insights on Microsoft's innovative collaboration with Coldplay and reflections on the global tech market dynamics.

    LINKS

    Announcing The Stargate Project
    https://openai.com/index/announcing-the-stargate-project/
    Microsoft and OpenAI evolve partnership to drive the next phase of AI
    https://blogs.microsoft.com/blog/2025/01/21/microsoft-and-openai-evolve-partnership-to-drive-the-next-phase-of-ai/
    UK chip firm Arm sale by Softbank collapses amid competition fears
    https://www.bbc.co.uk/news/business-60297874
    PM plans to 'unleash AI' across UK to boost growth
    https://www.bbc.co.uk/news/articles/crr05jykzkxo
    Reeves Says Regulators Are Holding Back Britain’s Growth
    https://uk.finance.yahoo.com/news/reeves-says-regulators-holding-back-124058118.html
    What is secure access service edge (SASE)?
    https://www.microsoft.com/en-us/security/business/security-101/what-is-sase
    Advanced Software Architecture with Residuality
    https://ddd.academy/introduction-to-residuality-theory/
    Coldplay evolves the fan experience with Microsoft AI< br />https://azure.microsoft.com/en-us/blog/coldplay-evolves-the-fan-experience-with-microsoft-ai/
    Cisco AI Summit
    https://www.ciscoaisummit.com/
    続きを読む 一部表示
    30 分
  • M365 Expanded Logs, Red Teaming & DDoS Attacks | EP05 | Cloudy with a Chance of Insights

    M365 Expanded Logs, Red Teaming & DDoS Attacks | EP05 | Cloudy with a Chance of Insights
    2025/01/27

    In this episode of 'Cloudy with a Chance of Insights', the hosts discuss recent developments in Microsoft Cloud, focusing on security updates related to Exchange Online, the implications of red teaming in AI security, and the growing threat of DDoS attacks. They also touch on the challenges in the cybersecurity field, including the shortage of professionals and the costs associated with defending against attacks.

    The conversation highlights the importance of proactive measures and collaboration in enhancing cloud security. In this conversation, the speakers delve into the latest advancements in AI and storage technologies.

    They wrap up by discussing the importance of understanding cloud-native concepts, emphasizing the need for scalable, resilient, and portable applications. The conversation also highlights the emergence of micro VMs and the role of Rust in enhancing security and efficiency in cloud environments.


    LINKS

    CISA Publishes Microsoft Expanded Cloud Log Playbook.
    https://www.cisa.gov/news-events/news/cisa-publishes-microsoft-expanded-cloud-log-implementation-playbook

    Cloudflare Mitigates Record Breadking 5.6Tbps DDoS attack
    https://blog.cloudflare.com/ddos-threat-report-for-2024-q4

    IBM Training https://skillsbuild.org

    Lessons from Red Teaming 100 Gen AI Products
    https://www.microsoft.com/en-us/microsoft-cloud/blog/2025/01/14/enhancing-ai-safety-insights-and-lessons-from-red-teaming/?msockid=2db0be1eba176e053806ab29bbf76ff3
    続きを読む 一部表示
    42 分
  • 2024 Retrospective and Thoughts on 2025

    2024 Retrospective and Thoughts on 2025
    2025/01/10

    UPDATE: Apologies, I uploaded the incorrect audio file, this has now been resolved


    In this episode of 'Cloudy with a Chance of Insights', the hosts reflect on the past year in Microsoft Cloud, discussing key highlights and looking forward to future trends.


    They emphasize the growing importance of security, shifts in security practices, and the shared responsibility model. The conversation also delves into challenges in cloud migration, the future of quantum computing, and the intersection of AI and quantum technologies.


    KEYWORDS:

    #MicrosoftCloud, #security, #quantumcomputing, #AI, #cloudmigration, #cybersecurity


    LINKS:

    IBM Secure by Design
    https://ibm.co/3Pr3eff

    Microsoft Secure Futures Initiative
    https://ibm.co/3Pr3eff

    Geico Repatriates Workloads to On-Premises
    https://bit.ly/40v067h

    Apple urged to withdraw 'out of control' AI news alerts
    https://www.bbc.co.uk/news/articles/cge93de21n0o

    Mark Russinovich - MSFT Blog
    https://bit.ly/4a7Awtn

    Open Quantum Safe Project
    https://openquantumsafe.org
    続きを読む 一部表示
    49 分
  • Introduction to Maester, Oversharing Controls in M365 & Zero Trust

    Introduction to Maester, Oversharing Controls in M365 & Zero Trust
    2025/01/03

    In this episode of 'Cloudy with a Chance of Insights', the hosts discuss various topics related to Microsoft Cloud, including the Meister tool for security configuration, the concept of Zero Trust, oversharing controls in M365, and the importance of data security.

    They also highlight Microsoft's achievement of 100% coverage of the MITRE attack framework and new features in Microsoft Sentinel for security posture assessment. The conversation emphasises the need for proactive security measures and user adoption in organisations.

    CHAPTERS
    00:00 Introduction to Microsoft Cloud Insights
    02:30 Exploring Meister: A PowerShell-Based Tool for Security Configuration
    10:10 Understanding Zero Trust and Identity Management
    12:50 Oversharing Controls in M365: Risks and Solutions
    20:50 The Importance of Data Security and User Trust
    26:43 Microsoft's 100% Coverage of the MITRE Attack Framework
    39:10 New Features in Microsoft Sentinel for Security Posture

    TAGS: #microsoftcloud, #Azure, #M365, #Microsoft365, #ZeroTrust, #zerotrustsecurity, #Maester, #Sentonel

    LINKS:
    Companion Site: https://maester.dev/
    Introducing SOC Optimization Recommendations Based on Similar Organizations https://bit.ly/3Dx2Vwy
    Microsoft 365 Defender demonstrates 100 percent protection coverage in the 2023 MITRE Engenuity ATT&CK® Evaluationshttps://bit.ly/3DwrxWg
    続きを読む 一部表示
    43 分