RunAs Radio

00:37:07

Cloudflare Edge Workers with Bob Fornal

RunAs Radio ·

2026/10/07

What can Cloudflare do for you? While at KCDC in Kansas City, Richard chatted with Bob Fornal about how his organization uses Cloudflare - not just for content delivery or DDoS protection, but also edge compute - and more! Bob talks about moving workloads between the client and server, where Cloudflare Workers can run some code and save time while staying secure. This leads to a broader conversation about introducing these tools to your organization - it's not likely something web developers will

en-us

00:33:15

AI and Penetration Testing with Paula Januszkiewicz

RunAs Radio ·

2026/09/30

How is artificial intelligence changing cybersecurity and penetration testing? Richard talks to Paula Januszkiewicz about how her team now uses large language models throughout the security workflow, from vulnerability research and data analysis to penetration testing and incident response. Paula explains that AI hasn't replaced security professionals, but it has dramatically accelerated the work, making it possible to analyze more data, build better tools, and identify attack paths faster than ever

en-us

00:39:45

Building Agents with Andrew Connell

RunAs Radio ·

2026/09/23

Microsoft offers a surprising number of ways to build agents in Microsoft 365. Which one should you choose? Richard talks to Andrew Connell about the evolving Microsoft 365 Copilot landscape and the four major approaches to building agents. Starting with SharePoint Agents for document-focused scenarios, Andrew walks through Agent Builder inside Microsoft 365 Copilot, the increasingly popular Copilot Studio in the Power Platform ecosystem, and the often-overlooked Agents Toolkit for VS Code. Along

en-us

00:35:45

Patching in 2026 with Susan Bradley

RunAs Radio ·

2026/09/16

How has patching changed in 2026? Richard chats with patching goddess Susan Bradley about what she's seeing in vendor patches and how they're affecting consumers and businesses. On one hand, you have the security risk of unpatched servers, which puts a lot of pressure on sysadmins to deploy patches immediately. And, at the same time, the number of patches has grown massively as tools like Anthropic's Fable have revealed far more vulnerabilities. Then there are the vendors that are slow to get fixes

en-us

00:28:52

State of WSUS with Adam Marshall

RunAs Radio ·

2026/09/09

Windows Server Update Services (WSUS) was deprecated in Sept 2024 - when does it go away? Richard talks to Adam Marshall about how WSUS is still an essential service for Configuration Manager, included with Server 2025 and V.Next - it's not going anywhere! Adam talks about the use cases WSUS covers that no other update solution does, especially granular control of updates and offline scenarios. And while Microsoft is still feeding updates into the WSUS stack, no new code is going into the solution,

en-us

00:36:25

Reimagining Intranets with Susan Hanley

RunAs Radio ·

2026/09/02

How does AI change the intranet? Richard chats with Susan Hanley about her work helping organizations build great intranets and how tools like M365 Copilot are changing the intranet. Susan talks about the new reality of an intranet, where some users no longer go to the intranet directly but use an agent to retrieve the information they need. This impacts search statistics, but also means it's important to write pages that an agent can easily understand. The conversation also dives into the bane of

en-us

00:31:31

Security Features of PowerShell 7 with Mike O'Neill

RunAs Radio ·

2026/08/26

How secure are your PowerShell scripts? Richard talks to Mike O'Neill about the powerful security features introduced with PowerShell 7.3 and above, including session configuration files and clean blocks. Mike talks about how some organizations are strict about installing anything on servers, including the latest version of PowerShell - which is one of the reasons 5.1 has persisted so long. But that ends with 26H2 and opens the door to securing your PowerShell with strict controls over accounts,

en-us

00:38:44

Automatic Attack Disruption with Liz Tesch

RunAs Radio ·

2026/08/19

What if Microsoft Defender not only detected attackers - but also fought back? Richard talks to Liz Tesch about Microsoft Defender Automatic Attack Disruption and Predictive Shielding. Liz talks about how attacks are often detected before the payload executes, but by the time humans can respond, far more damage has been done. Automatic Attack Disruption acts immediately on detection to limit the attacker by locking accounts, restricting access on a compromised server, and more. Predictive Shielding

en-us

00:40:54

The Content Management System Landscape with Matt...

RunAs Radio ·

2026/08/12

What is the state of content management systems today? Richard chats with Matthew Garrepy of CMS Critic about his views on how the CMS market continues to evolve. Matt digs into the build-vs-buy conversation that has been going on since the web first emerged - now made more complex with the power of the large language model to generate code. The evolution toward headless CMS brings up the idea of the explosion of different places that a CMS needs to touch now - not just web pages. The landscape for

en-us

00:37:01

Ransomware Readiness with Heather Renze

RunAs Radio ·

2026/08/05

The risk of ransomware is real - are you ready? Richard talks with Heather Renze about her experiences dealing with a ransomware attack and how to get prepared when it happens to you. Heather talks about how ransomware has evolved into a business that has operators, affiliates, and even tech support. Making a plan is essential - involving finance, legal, and IT. Cyberinsurance plays a big role, as do regulatory bodies - it depends on the business you're in. But your plan needs to know three

en-us

00:34:53

Azure Virtual Desktop Hybrid with Travis Roberts

RunAs Radio ·

2026/07/29

More ways to use Azure Virtual Desktop! Richard chats with Travis Roberts about how Azure Virtual Desktop continues to evolve and provides more options for remote users. Travis talks about how AVD grew out of Terminal Services and so is still very much an IaaS offering - as opposed to Windows 365, which is more PaaS, with less flexibility, but easier deployment. But when you need control, AVD is the way to go, and today will operate in Azure, on-premises via Azure Local. And if you've got an

en-us

00:37:07

Security Begins at Procurement with Jessie Schofer

RunAs Radio ·

2026/07/22

Bringing new software or SaaS into your organization is a security risk - how do you assess it? Richard chats with Jessie Schofer about her experiences in HR software acquisition, which led to the creation of secureless.ai. Jessie tells the story of evaluating various SaaS and other software products and realizing that, while the website says they are compliant with GDPR and/or SOC 2, are they really? This leads to a conversation about the product procurement process and about actually understanding

en-us

00:38:02

Finding Security Vulnerabilities using AI with Sami...

RunAs Radio ·

2026/07/15

How are large language models changing the way security vulnerabilities are found? Richard chats with Sami Laiho about the rapidly changing landscape in security exploits. Certain LLM models like Anthropic's Mythos and Microsoft MDASH are optimized to find software vulnerabilities - and potentially fix them. And so there is an arms race of sorts, repairing old vulnerabilities before LLMs in the hands of black hats can exploit them. But what about everyone else? Sami talks about getting LLMs working

en-us

00:35:42

Implementing Azure Policies with Barbara Forbes

RunAs Radio ·

2026/07/08

How can Azure Policies help you? While at Techorama in Belgium, Richard sat down with Barbara Forbes to discuss how Azure Policies have evolved and the techniques sysadmins are using to improve security, cost controls, efficiency, and more. Barbara talks about how the default policies are designed to get folks started in Azure quickly - not necessarily optimally. And there are plenty of policy templates out there, but before you implement them, it's worthwhile to review each policy and ask the

en-us

00:36:45

AI-Accelerated Supply Chain Attacks with Mackenzie...

RunAs Radio ·

2026/07/01

How are supply-chain attacks evolving? Richard chats with Mackenzie Jackson about his work helping companies protect their software supply chains from malware attacks. Mackenzie discusses the vulnerability of developers to attacks, since their accounts are often highly privileged and invariably contain access to exploitable secrets. The conversation digs into the challenges of securing various code distribution mechanisms like npm and how you can protect your organization - starting with, don't

en-us

00:34:27

Securing Developers with Tanya Janca

RunAs Radio ·

2026/06/24

How can sysadmins help software developers work securely and make more secure applications? While at NDC in Toronto, Richard sat down with Tanya Janca of SheCodesPurple to discuss what admins can do to help address the security challenges software developers face. Tanya talks about securing development environment and pipelines - developers routinely work from high privilege accounts because their tools require it, and as a result, have become the targets of black hats to get access to accounts,

en-us

00:37:53

47 Day Certificates with Todd Gardner

RunAs Radio ·

2026/06/17

The 47-day certificate is coming! While at NDC in Toronto, Richard received an update from Todd Gardner about his show last year: certificate authorities are moving toward SSL certificates that last only 47 days! Todd talks about the first decrease in duration that has already passed - as of March 2026, the longest duration certificate you can buy from certificate authorities is 200 days. At the core of these changes is the problem that certificate revocation just isn't working properly, so a short

en-us

00:36:54

How Machine Learning Fails with Megan Robertson

RunAs Radio ·

2026/06/10

What can go wrong with machine learning? While at NDC in Toronto, Richard chatted with Megan Robertson about her experience with machine learning projects, often using retail datasets, and where they can go wrong. Megan talks about getting clear expectations and metrics for projects, so you know when you succeed, but then digs into the specifics of problems in machine learning, such as overfitting on test data. Your results are only as good as the data you put in, so a lot of focus goes into

en-us

00:36:30

Data API Builder and SQL MCP with Jerry Nixon

RunAs Radio ·

2026/06/03

How do you intelligently surface access to your database? While at NDC Toronto, Richard spoke with Jerry Nixon about Data API Builder, Microsoft's tool that enables data professionals using Microsoft databases, including SQL Server, Postgres, CosmosDB, and MySQL, to provide an API layer with security, schema extraction, and governance policies. You can expose the API as a REST interface, a GraphQL interface, and an MCP server! This is a powerful tool for providing controlled access to data while

en-us

00:35:44

Team Productivity using Loop with Karinne Bessette

RunAs Radio ·

2026/05/27

How can Microsoft Loop make your team more productive? Richard chats with Karinne Bessette about the role that Loop components can play in making meetings where the agenda is live, generating work items in Microsoft Planner, and keeping key information up to date. Karinne talks about how Loop components can be connected to any M365 document, including Outlook, Word, Excel, and OneNote, but only for members of the M365 tenant. Loop is a powerful tool for productivity within the organization!Links

en-us

All Episodes

Similar Podcasts

Lead With AI

Tamara Nall

Two Blokes Talking Tech

Trevor Long and Stephen Fenech

Pioneers of AI

WaitWhat

The Brave Technologist

Brave Software

The Good Tech Companies

HackerNoon