Cloudfirst Podcast

24 - Microsoft Graph scopes giving attackers high hopes

In this episode we talk about the Midnight Blizzard attack on Microsoft, which turns into a rather detailed discussion on Microsoft Graph scopes and their wide permissions. Also, how many Copilot products does Microsoft have now? And how hyper-scale is Azure really? 

23 - So much new stuff and some other fluff

As it has been a while since last episode, there is a lot of news to cover! - The final details about Storm 0558 has been published - Microsoft and Oracle Expand Partnership to Deliver Oracle Database Services on Oracle Cloud Infrastructure in Microsoft Azure - Microsoft Fabric - Microsoft 365 Copilot in GA November 1st - Bicep support for Entra ID - Azure Updated Manager GA - Delegate Azure RBAC assignments with conditions - Azure VNET Flow Logs - Terraform licensing and OpenTOFU - Entra I...

22 - Microsoft security issue development and MobileIron based attacks on government

In this episode we talk about the new Entra ID inbound provisioning API, the recent developments in a few Microsoft security issues and the recent 0-day utilized to attack the Norwegian government through MobileIron.

21 - Global Secure Access and Entrataining renaming stress

In this episode we discuss the renaming of Azure Active Directory to Entra ID, as well as deep diving into the Global Secure Access service launched into preview at the recent "Reimagine secure access with Microsoft Entra" event.

20 - Build news unfurled, followed by a Microsoft licensing ranting whirl

In this episode Marius and Marius talks about the news from Microsoft Build and potential new licensing for Microsoft Entra. Also, is Cloud PC really the future, or is Microsoft actually just reinventing the thin client?

19 - Ai ai ai

In this Episode, Marius and Marius discusses AI, or more specifically the Large Language Model (LLM) AIs available and how they can actually be used by enterprises for their own data, today.

18 - Antipatterns for cloud no longer covered in shroud

Cloud can be adopted in many ways, but not all ways are created equal. In this episode we talk about antipatterns for cloud adoption. Resource used for inspiration: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/antipatterns/antipatterns-to-avoid

17 - News from conventions and other mentions

In this episode, Marius and Marius talks about news in the different cloud platforms. Ignite, AWS re:Invent and Google Cloud Next has all been arranged, all containing some interesting news.

16 - Education and certification

What is really the importance of education and certification within IT? Listen in as your two favorite Mariuses discuss their way through education and certifications, and share their best tricks on how to pass your certification exams!

15 - Summer TLDR

Join us as we discuss the latest in cloud, this time talking about Azure Permissions Management (Cloudnox), Databricks, the Microsoft Oracle partnership, DevBox, Defender Threat Intelligence, External Attack Surface Management and much more!

14 - Find your zen with a CDN

In this episode, your hosts Marius Sandbu and Marius Solbakken Mellum talks about what CDNs are, and why you most likely have a need them in your environment.

13 - Can you trust PaaS services?

In this episode, we discuss PaaS services and whether you can trust these, with all security issues happening lately. We also discuss the Microsoft and Okta hacks, while the stories are still developing.

12 - CI/CD or AC/DC?

In this episode we talk about Continuous Integration and Continuous Deployment, what is it and how can we get going with it?  Mr Sandu had a temporary headset with poor audio, but we'll fix it for the next episode!

11 - Workload Identities gone wild

Join us as we discuss workload identities, and different options available. What is really the difference between app registrations and enterprise applications? Which problems does Managed Service Identities solve? And what does Workload Identity Federation really mean?

10 - Ransomware

9 - Yay, Log4J!

In this episode, we talk about the Log4J security issue.

8 - Public cloud, 503 service unavailable

In this episode Marius Sandbu and Marius Solbakken Mellum discuss public cloud availability considerations, recent downtime in AWS and the end of mankind.

7 - Publishing services to the internet without breaking a sweat

Join us as we talk about ways of publishing services to the internet.  The Azure load balancing decision tree

6 - Every byte from Microsoft Ignite

In this episode we dig through most of the news announced at Microsoft Ignite. Lots of it is listed at in the Book of News, but there were quite a few more things than that. 

5 - Azure Networking for the whole family, part 2

Join as we continue our discussion around Azure Networking. This time we focus more on PaaS services, and how we can enable private or managed networking for these.

4 - Azure Networking for the whole family, part 1

NIC, NSG, ASG, Virtual Network, Vnet Peering, Global Vnet Peering, Azure Firewall, Network Virtual Appliance, VPN Gateway, Express Route, Load Balancer,  Public IPs, NAT... and some more. Listen in on us talking about Azure Networking!

3 - The Hybrid Strikes Back!

Hybrid is a word thrown around all the time, but what is hybrid cloud, what can it solve and what cannot it not solve?  Do you remember Azure Pack? AWS Outposts or Azure Stack Hub? How about PaaS services in hybrid? And why would you want VMware on Public Cloud? Join us as we discuss hybrid cloud.

2 - The key management conundrum

Managing the keys to your services is an important task ignored by many. Listen in to learn about key rollover, what a service principal really is and avoid do not make keys the future you's problem. Marius Sandbu Marius Solbakken Mellum

1 - Summer of fun with printers and Exchange

Everyone loves printers and Exchange servers, and we have had our fair share of security issues with those this summer. Join us as we discuss the last two months. Attack trends Marius Sandbu Marius Solbakken Mellum