Start / Blue Security / White house national cybersecurity strategy

White House National Cybersecurity Strategy

29 min • 20 mars 2023

On this week's episode, Adam and Andy talk about the new White House National Cybersecurity Strategy from the Biden-Harris administration.

-------------------------------------------

Youtube Video Link: ⁠https://youtu.be/BxG155ryP5I

-------------------------------------------

Documentation: https://www.whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-administration-announces-national-cybersecurity-strategy/

https://www.whitehouse.gov/wp-content/uploads/2023/03/National-Cybersecurity-Strategy-2023.pdf

https://blogs.microsoft.com/on-the-issues/2023/03/09/national-cybersecurity-strategy-cyber-readiness/

-------------------------------------------

Website: ⁠https://bluesecuritypod.com⁠

Twitter: ⁠https://twitter.com/bluesecuritypod⁠

Linkedin: ⁠https://www.linkedin.com/company/bluesecpod⁠

Youtube: ⁠https://www.youtube.com/c/BlueSecurityPodcast⁠

Twitch: ⁠https://www.twitch.tv/bluesecuritypod⁠

-------------------------------------------

Andy Jaw

Mastodon: ⁠https://infosec.exchange/@ajawzero⁠

Twitter: ⁠https://twitter.com/ajawzero⁠

LinkedIn: ⁠https://www.linkedin.com/in/andyjaw/⁠

Email: ⁠andy@bluesecuritypod.com⁠

-------------------------------------------

Adam Brewer

Twitter: ⁠https://twitter.com/ajbrewer⁠

LinkedIn: ⁠https://www.linkedin.com/in/adamjbrewer/⁠

Email: ⁠adam@bluesecuritypod.com

Senaste avsnitt

JP Morgan's CISO open letter, Microsoft & Crowdstrike working together on threat intel

17 juni | 39 min

Microsoft Deputy CISOs, Defending Identity Attacks

10 juni | 39 min

Windows 11 Security Book

3 juni | 37 min

Microsoft News Update

27 maj | 24 min

Microsoft Security Exposure Management

20 maj | 29 min

Administrator protection on Windows 11, Multi-tenancy in Unified SOC

13 maj | 28 min

Microsoft's Secure by Design journey - One year of success

6 maj | 44 min

Quick Recovery, Hotpatch, Copilot Podcast

29 april | 36 min

CVE Program under fire, NLRB whistleblower, Microsoft Zero-Day

22 april | 30 min

Side-by-Side with Third-Party Products

15 april | 41 min

Automatic Attack Disruption with OAuth Protection

8 april | 32 min

The Signal Incident

1 april | 49 min

Entra Conditional Access - Deep Dive

25 mars | 46 min

3rd Party Vendor or Contractor Access

18 mars | 48 min

Next-Gen Logging for the Next-Gen SIEM with Special Guest Karl Niblock

11 mars | 57 min

Defender Experts with Special Guest Raae Wolfram

4 mars | 65 min

UK vs Apple on Encryption, MITRE Eval results, How to Rethink Phishing Simulations

25 februari | 66 min

FBI warns about unencrypted messaging, Deepseek discussion

18 februari | 46 min

CISA guidance on securing CI/CD pipelines

11 februari | 32 min

Microsoft Fasttrack with Special Guest Thomas Finney

4 februari | 48 min

Microsoft Industry Solutions Delivery with Special Guest Brodie Cassell

28 januari | 64 min

CISA zero trust, macOS malware, IRS PIN, Cyber Trust Mark

21 januari | 49 min

CISA SCuBA Project

14 januari | 24 min

Sophos, Digital License Plates, TP-Link, Github Copilot

7 januari | 30 min

Cloud Security - Defender for ARM, DNS, and AI Workloads

31 december 2024 | 29 min

Cloud Security - Defender for App Service and Defender for Databases

24 december 2024 | 18 min

Cloud Security - Defender for Key Vault and Defender for API

17 december 2024 | 22 min

Options for Microsoft training

10 december 2024 | 28 min

2024 Ignite Recap

3 december 2024 | 62 min

CMMC with Special Guest Justin Orcutt

26 november 2024 | 26 min

T-Mobile Breach, Sophos hacks back, Bluesky surges

19 november 2024 | 41 min

Securing contingent workers

12 november 2024 | 35 min

Offboarding employees

5 november 2024 | 25 min

Detecting AD Compromise, Safe MDE Deployment, macOS SSO

29 oktober 2024 | 31 min

2024 Microsoft's Digital Defense Report

22 oktober 2024 | 42 min

Secure Future Initiative Update

15 oktober 2024 | 27 min

Let's talk about passwords!

8 oktober 2024 | 40 min

Protect against token theft

1 oktober 2024 | 35 min

BSP Turns 4, WSUS Deprecated, macOS Firewall Woes

24 september 2024 | 41 min

Cloud Security - Containers 101 & Defender for Containers

17 september 2024 | 27 min

IBM's Cost of a Data Breach 2024

10 september 2024 | 48 min

Entra Suite Overview

3 september 2024 | 39 min

Where do you get technical training?

27 augusti 2024 | 40 min

Trump and NPD Hacked, Microsoft Admin MFA

20 augusti 2024 | 33 min

Cloud Security - Defender for Storage Deep Dive

13 augusti 2024 | 28 min

New Autopilot Features, Intune Enrollment Attestation, MAM for W365/AVD

6 augusti 2024 | 25 min

Cloud Security - Defender CSPM Deep-Dive

30 juli 2024 | 33 min

CrowdStrike Major Incident

22 juli 2024 | 50 min

Cybersecurity is full?

16 juli 2024 | 41 min

Cloud Security - Defender for Servers Deep-Dive

9 juli 2024 | 35 min

Recommended EOP and MDO settings

2 juli 2024 | 39 min

Arlington BEC, Kaspersky Ban, Crown Equipment Cyberattack

25 juni 2024 | 38 min

Snowflake, Findlay Auto Ransomware, Olympics

18 juni 2024 | 32 min

Microsoft Recall update, Windows Hello Enhanced Sign-in Security

11 juni 2024 | 42 min

Ticketmaster breach, Slack AI, Microsoft Recall

4 juni 2024 | 29 min

Microsoft Build Recap

28 maj 2024 | 40 min

Entra Private Access, Endpoint Privilege Management

21 maj 2024 | 20 min

MSRC Transparency and USB Threats

14 maj 2024 | 29 min

2024 Verizon Data Breach Report

7 maj 2024 | 34 min

Mobile Threats

30 april 2024 | 37 min

VDI and Shared Responsibility Model

22 april 2024 | 26 min

Entra Follow-up, Helpdesk Security, Certifications

16 april 2024 | 34 min

Managed Machines, E3 vs E5

9 april 2024 | 29 min

Teams External User Phishing

2 april 2024 | 36 min

Midnight Blizzard Update, CISO Technical Skills, BEC + Automatic Attack Disruption

26 mars 2024 | 31 min

Microsoft Secure Recap

19 mars 2024 | 44 min

FBI Internet Crimes Report and BEC Protection

12 mars 2024 | 25 min

Application Allow Listing, iMessage Post Quantum

5 mars 2024 | 32 min

Edge Password Vault, SSO, Domain Admin Creds

27 februari 2024 | 35 min

Bitlocker Bypass and USAF Re-org

20 februari 2024 | 32 min

Microsoft Sentinel Deep-Dive with Henrik Wojcik

13 februari 2024 | 48 min

Cloudflare Hacked, Intune Suite, Apple Stolen Device Protection

6 februari 2024 | 32 min

Midnight Blizzard Attack on Microsoft

30 januari 2024 | 29 min

X accounts hacked, 23andMe revisited, CA for Entitlement Management

23 januari 2024 | 31 min

Entra Join is the way

16 januari 2024 | 43 min

Entra improvements, QR Code phishing, AppGuard deprecated

9 januari 2024 | 33 min

Common PIM mistakes

1 januari 2024 | 30 min

Microsoft Digital Defense Report 2023

25 december 2023 | 54 min

Audits and Data/AI Security with Special Guests Carley Salmon and Megan Maley

18 december 2023 | 59 min

CNAPP - Defender for Cloud Overview

11 december 2023 | 34 min

MeridianLink extortion, Plastic Surgery office breached, AI voice clones

4 december 2023 | 34 min

Microsoft Ignite 2023 - Part 2

4 december 2023 | 50 min

Microsoft Ignite 2023 - Part 1

20 november 2023 | 41 min

Okta Breach Follow-up and Passkeys

13 november 2023 | 37 min

SEC charges Solarwinds CISO & Backing up and Archiving M365 data

12 november 2023 | 36 min

23andMe, Okta breach, MDE Automatic Attack Disruption

30 oktober 2023 | 34 min

Entra Web-sign in, MDE Device Control, Imposter Syndrome

23 oktober 2023 | 22 min

Conditional Access Gap Analysis

19 oktober 2023 | 27 min

Unpopular Cybersecurity Opinions

9 oktober 2023 | 34 min

JCI Ransomware, Ransomware Negotiations, CISA guidance

2 oktober 2023 | 27 min

MITRE Engenuity ATT&CK Evaluations and Insider Risk

26 september 2023 | 24 min

MGM Resorts Security Incident

18 september 2023 | 36 min

Apple 0-day's, Storm-0558 follow up, MFST Conditional Access Dashboard

11 september 2023 | 34 min

Data Security in Microsoft 365

4 september 2023 | 34 min

Side channel attack, White House cybersecurity workforce plan, IBM Cost of a Data Breach

28 augusti 2023 | 40 min

Red Teaming with Special Guest 23P

21 augusti 2023 | 38 min

Securing Entra External Identities

14 augusti 2023 | 27 min

Educating Defenders with Special Guest Howard Friedman, Ascent Solutions

7 augusti 2023 | 40 min

New SEC and FCC rules, and Samsung device security

31 juli 2023 | 26 min

Expanded M365 audit logs, Threads, new Entra features

24 juli 2023 | 30 min

Storm-0558 - Attack on Exchange Online

17 juli 2023 | 25 min

Common M365 Misconfigurations

10 juli 2023 | 26 min

What's new with Intune and Entra

3 juli 2023 | 25 min

OWASP Top 10 and Top 10 for LLM

26 juni 2023 | 32 min

Network Security 101

19 juni 2023 | 26 min

MSSP's

12 juni 2023 | 29 min

Protecting M365 from on-premise attacks

5 juni 2023 | 30 min

Microsoft Build 2023 Recap

30 maj 2023 | 39 min

Limiting Chatgpt

22 maj 2023 | 32 min

Apple Rapid Security, Data Encryption, Layoffs & Insider Risk

15 maj 2023 | 31 min

Microsoft Secure Score

8 maj 2023 | 32 min

Workplace Join, Azure AD Join, and Windows (Cloud) LAPS

1 maj 2023 | 27 min

Meta E2E, Proton Pass, LI Verified ID, iPhone Security

24 april 2023 | 35 min

Security Copilot, Incident Response Retainer, Exchange Server On-Prem

17 april 2023 | 22 min

State of Identity 2023

10 april 2023 | 19 min

News Update - MDVM, SEC Guidance, M365 Copilot

3 april 2023 | 24 min

Protect your home network by the NSA

27 mars 2023 | 34 min

White House National Cybersecurity Strategy

20 mars 2023 | 29 min

Intune Suite

13 mars 2023 | 18 min

Lastpass Incident Update

6 mars 2023 | 35 min

Road to the Cloud

27 februari 2023 | 39 min

Identity Trends

20 februari 2023 | 37 min

Identity Governance and Administration

13 februari 2023 | 33 min

ChatGPT

6 februari 2023 | 27 min

Tech Layoffs

30 januari 2023 | 37 min

Operational Excellence

23 januari 2023 | 37 min

News Catchup

16 januari 2023 | 33 min

Windows Defender Firewall

9 januari 2023 | 13 min

What we learned in 2022 in cybersecurity

2 januari 2023 | 27 min

Windows Autopatch with Special Guest Adam Nichols

26 december 2022 | 40 min

Passkeys

19 december 2022 | 27 min

Microsoft's Insider Risk Report

12 december 2022 | 31 min

DDoS Protection

5 december 2022 | 18 min

Microsoft's Digital Defense Report

28 november 2022 | 39 min

How to Mastodon

21 november 2022 | 34 min

Patch Tuesday, Medibank Breach, Twitter Meltdown

14 november 2022 | 29 min

Old Phishing Tricks Are Still Working

7 november 2022 | 19 min

SOCRadar and Ignite 2022 highlights

31 oktober 2022 | 44 min

IBM Incident Responder Report

24 oktober 2022 | 34 min

BYOD Zero-Trust Architecture

17 oktober 2022 | 31 min

MDE Tamper Protection

10 oktober 2022 | 14 min

Active Directory Security Tips

3 oktober 2022 | 29 min

Kerberoasted

26 september 2022 | 18 min

Microsoft Teams, Patreon, and Uber

19 september 2022 | 29 min

Cloudflare and Kiwi Farms

12 september 2022 | 34 min

Cloud Security 101

5 september 2022 | 43 min

Beyond E5, Rebranding, Public Previews in Microsoft Security

29 augusti 2022 | 30 min

Quantum & Cryptography Follow-up, TikTok, and Janet Jackson

22 augusti 2022 | 29 min

Post Quantum Series - Part 2 - Quantum Cryptography

15 augusti 2022 | 25 min

Post Quantum Series - Part 1 - Quantum Computers

8 augusti 2022 | 22 min

Exchange Online Protection Deep-Dive

1 augusti 2022 | 26 min

Personal and Organization Privacy

25 juli 2022 | 39 min

Microsoft Security News

18 juli 2022 | 32 min

Risk Management and Data Protection

11 juli 2022 | 25 min

Basic Auth, Zero Days, & Burnout

4 juli 2022 | 37 min

Secure Authentication to Azure VMs

27 juni 2022 | 15 min

Don't Phish Me, Bro

20 juni 2022 | 28 min

Securing Guest Access to M365

12 juni 2022 | 27 min

Windows Defender Exploit Guard

6 juni 2022 | 22 min

Patch Management

30 maj 2022 | 33 min

Domain Controller Security

23 maj 2022 | 24 min

Cyber Threat Intelligence with Special Guest Charity Wright

16 maj 2022 | 41 min

Andy was hacked!

9 maj 2022 | 20 min

MFA Bombing

2 maj 2022 | 20 min

Interview with Special Guest Christina Morillo

25 april 2022 | 34 min

VPNs vs SDPs

18 april 2022 | 31 min

Okta Says Sorry, Fake Warrants, New PCI Reqs

11 april 2022 | 33 min

LAPSUS$

4 april 2022 | 41 min

Infosec News Catch Up

28 mars 2022 | 29 min

Helpdesk Security

21 mars 2022 | 30 min

War in the Digital Age

14 mars 2022 | 32 min

Windows Hello for Business Revisited

7 mars 2022 | 26 min

Password Cracking

28 februari 2022 | 21 min

Geopolitical Crises and Cybersecurity

21 februari 2022 | 23 min

Windows Defender Application Control

14 februari 2022 | 23 min

Tabletop Scenarios with Special Guests Nate Gardner and Gavin Ashton

7 februari 2022 | 47 min

News Smash

31 januari 2022 | 34 min

Windows Device Management with Special Guest Shannon Fritz

24 januari 2022 | 59 min

F12 and Find Out

17 januari 2022 | 23 min

Digital Asset Management

10 januari 2022 | 25 min

A look back on 2021

3 januari 2022 | 30 min

Work Life Balance

27 december 2021 | 38 min

Threat and Vulnerability Management

20 december 2021 | 30 min

Log4Shell

13 december 2021 | 34 min

Security Champions

6 december 2021 | 21 min

Things are getting better

29 november 2021 | 33 min

Zero Trust, Amazon Security, and other news

22 november 2021 | 34 min

Ignite 2021 Fall Highlights

15 november 2021 | 36 min

Cybersecurity Talent Gap

8 november 2021 | 40 min

Microsoft Digital Defense Report, Consumer Expectations, and Gartner

1 november 2021 | 39 min

Windows 365 with Special Guest Bradley Dupay

25 oktober 2021 | 53 min

Facebook Outage Learnings and Windows 11 security

18 oktober 2021 | 34 min

You are going to be a victim of ransomware

11 oktober 2021 | 21 min

TPM design limitations and Apple-Google app store actions

4 oktober 2021 | 28 min

Protonmail kerfuffle

27 september 2021 | 17 min

Misconceptions about MDM

20 september 2021 | 43 min

One year anniversary!

13 september 2021 | 31 min

Apple's Protections for Children

6 september 2021 | 34 min

Security News Edition: Lockfile, Razer, and T-mobile

30 augusti 2021 | 33 min

Windows Hello for Business

23 augusti 2021 | 35 min

Mistakes that hinder a security team's success with Special Guest Nate Gardner

16 augusti 2021 | 20 min

Secure Privileged Access

9 augusti 2021 | 46 min

Windows Defender Application Guard

2 augusti 2021 | 23 min

Pegasus, Twitter MFA, & Underfunding Infosec

25 juli 2021 | 30 min

CISA's RVA findings and what it means for organizations

19 juli 2021 | 51 min

The Tech We Use

12 juli 2021 | 42 min

Information Protection with Special Guest Rachel O'Shea

5 juli 2021 | 44 min

Should you block or allow this app?

28 juni 2021 | 34 min

Special Episode - Programming Note

21 juni 2021 | 5 min

Windows Defender Credential Guard

21 juni 2021 | 27 min

The True Cost of Ransomware

14 juni 2021 | 35 min

Digital Every Day Carry (EDC)

7 juni 2021 | 43 min

That Infosec Op-Ed

31 maj 2021 | 46 min

Information Security Leadership with Special Guest Doug Turecek

24 maj 2021 | 42 min

Colonial Pipeline and other news

17 maj 2021 | 34 min

Security Change Management

10 maj 2021 | 36 min

Browser Security

3 maj 2021 | 41 min

Mentorship with Special Guest Matt Wood

26 april 2021 | 37 min

M365 Productivity Tips and Tricks

19 april 2021 | 34 min

Zscaler Security with Raja Khalid

12 april 2021 | 40 min

Mac Management with Special Guest Matthew Ward and Matt Benyo

5 april 2021 | 56 min

How to get into cybersecurity and the skills you need

29 mars 2021 | 53 min

Azure Sentinel with Special Guest John Joyner

21 mars 2021 | 42 min

Physical Security with Special Guest Wesley Strey

15 mars 2021 | 35 min

Say Goodbye to Domain Join with Special Guest Shannon Fritz

8 mars 2021 | 61 min

Cloud Application Security Brokers

28 februari 2021 | 40 min

Password Managers

22 februari 2021 | 40 min

What is EvilGinx and How do you protect against it?

15 februari 2021 | 42 min

Modern Device Management

8 februari 2021 | 45 min

Real-world Ransomware Experience with Special Guest Gavin Ashton

1 februari 2021 | 40 min

Application Security with Special Guest Tanya Janca

25 januari 2021 | 59 min

Secure Messaging

18 januari 2021 | 37 min

Solarwinds Revisited and Tech Policy under a Biden Administration

11 januari 2021 | 35 min

Information Security Tips & Tricks for Parents

4 januari 2021 | 32 min

Merry Christmas! Learn how to spin up your own VM lab and dev environments

27 december 2020 | 34 min

Our thoughts on Fireeye, Solarwinds, and Sunburst

21 december 2020 | 34 min

Passwordless Authentication

14 december 2020 | 38 min

Conditional Access

7 december 2020 | 35 min

Work from Home - Tips and Tricks

30 november 2020 | 26 min

Our thoughts on Chris Krebs, Infosec Job Security, and Infosec Qualifications

23 november 2020 | 25 min

Active Directory Security with Special Guest Morgan Patzwald

16 november 2020 | 37 min

Single-Sign On (SSO) and Self-Service Password Reset (SSPR)

9 november 2020 | 32 min

How did we get into information security and career progression advice

2 november 2020 | 43 min

Ransomware protection - Part 4 - Windows 10 Security, Network Segmentation, Detection and Recovery

26 oktober 2020 | 30 min

Ransomware Protection - Part 3 - Admin Rights, Email Protection, Phishing Training

19 oktober 2020 | 34 min

Ransomware Protection - Part 2 - EDR, Patching, and Pentesting

12 oktober 2020 | 32 min

Ransomware Protection - Part 1 - Soft Skills and Endpoint Protection

5 oktober 2020 | 34 min

Enabled MFA!

28 september 2020 | 31 min

Geo-restricting IP addresses, Password policies, Defense against password spray attacks

21 september 2020 | 32 min

White House National Cybersecurity Strategy

Senaste avsnitt

Shadow AI is already happening -- now what?

Palo Alto acquires Cyberark, Sentinel News, MDTI is going to be FREE!

SharePoint Server, Help Desk Security, Terminating IT Admins

Power grid vulnerabilities, To Catch a Thief, AI Bug Hunter

Windows Kernel & AV/EDR, BSOD Rebrand, Easier 3rd Party Updates

Applying "Assume Breach" to Layoffs

CIAM Deployment Guide; external authentication methods

Securing AI Agents; Using AI Agents for Security

JP Morgan's CISO open letter, Microsoft & Crowdstrike working together on threat intel

Microsoft Deputy CISOs, Defending Identity Attacks

Windows 11 Security Book

Microsoft News Update

Microsoft Security Exposure Management

Administrator protection on Windows 11, Multi-tenancy in Unified SOC

Microsoft's Secure by Design journey - One year of success

Quick Recovery, Hotpatch, Copilot Podcast

CVE Program under fire, NLRB whistleblower, Microsoft Zero-Day

Side-by-Side with Third-Party Products

Automatic Attack Disruption with OAuth Protection

The Signal Incident

Entra Conditional Access - Deep Dive

3rd Party Vendor or Contractor Access

Next-Gen Logging for the Next-Gen SIEM with Special Guest Karl Niblock

Defender Experts with Special Guest Raae Wolfram

UK vs Apple on Encryption, MITRE Eval results, How to Rethink Phishing Simulations

FBI warns about unencrypted messaging, Deepseek discussion

CISA guidance on securing CI/CD pipelines

Microsoft Fasttrack with Special Guest Thomas Finney

Microsoft Industry Solutions Delivery with Special Guest Brodie Cassell

CISA zero trust, macOS malware, IRS PIN, Cyber Trust Mark

CISA SCuBA Project

Sophos, Digital License Plates, TP-Link, Github Copilot

Cloud Security - Defender for ARM, DNS, and AI Workloads

Cloud Security - Defender for App Service and Defender for Databases

Cloud Security - Defender for Key Vault and Defender for API

Options for Microsoft training

2024 Ignite Recap

CMMC with Special Guest Justin Orcutt

T-Mobile Breach, Sophos hacks back, Bluesky surges

Securing contingent workers

Offboarding employees

Detecting AD Compromise, Safe MDE Deployment, macOS SSO

2024 Microsoft's Digital Defense Report

Secure Future Initiative Update

Let's talk about passwords!

Protect against token theft

BSP Turns 4, WSUS Deprecated, macOS Firewall Woes

Cloud Security - Containers 101 & Defender for Containers

IBM's Cost of a Data Breach 2024

Entra Suite Overview

Where do you get technical training?

Trump and NPD Hacked, Microsoft Admin MFA

Cloud Security - Defender for Storage Deep Dive

New Autopilot Features, Intune Enrollment Attestation, MAM for W365/AVD

Cloud Security - Defender CSPM Deep-Dive

CrowdStrike Major Incident

Cybersecurity is full?

Cloud Security - Defender for Servers Deep-Dive

Recommended EOP and MDO settings

Arlington BEC, Kaspersky Ban, Crown Equipment Cyberattack

Snowflake, Findlay Auto Ransomware, Olympics

Microsoft Recall update, Windows Hello Enhanced Sign-in Security

Ticketmaster breach, Slack AI, Microsoft Recall

Microsoft Build Recap

Entra Private Access, Endpoint Privilege Management

MSRC Transparency and USB Threats

2024 Verizon Data Breach Report

Mobile Threats

VDI and Shared Responsibility Model

Entra Follow-up, Helpdesk Security, Certifications

Managed Machines, E3 vs E5

Teams External User Phishing

Midnight Blizzard Update, CISO Technical Skills, BEC + Automatic Attack Disruption

Microsoft Secure Recap

FBI Internet Crimes Report and BEC Protection

Application Allow Listing, iMessage Post Quantum

Edge Password Vault, SSO, Domain Admin Creds

Bitlocker Bypass and USAF Re-org