iiinova — where your digital self keeps evolving

Reposted by Bailey Bercik

The Azure Security Podcast @azsecpod.bsky.social · 19/02/2025

Episode #109 is out! We speak to guest @baileybercik.bsky.social about the problem of over permissioning and how to use Microsoft Entra Permissions Management to identify and manage over-permissioned identities. Also, the news.

022

Reposted by Bailey Bercik

Richard Campbell @richcampbell.bsky.social · 08/01/2025

How has least privilege changed in 2025? @BaileyBercik.bsky.social talks on RunAs Radio at buff.ly/3WcEjQ7 about Entra Permissions Management and more to help you implement least privilege rules in your systems!

194

Bailey Bercik @baileybercik.bsky.social · 13/12/2024

It also dives deep on building GenAI apps with a Retrieval-Augmented Generation (RAG) framework and appropriate scenarios for AI agents. Really neat stuff and fun to play around with. Super excited to see this course evolve and more security content in the GenAI space evolve.

000

Bailey Bercik @baileybercik.bsky.social · 13/12/2024

I learned a TON about AWS Bedrock and Kubernetes which I don't get to explore in my day to day. I loved that the course emphasizes how to defend against prompt injection, data poisoning, and model provided key breaches.

100

Bailey Bercik @baileybercik.bsky.social · 13/12/2024

Earlier this week, I was invited to participate in the Alpha run of SANS SEC545: GenAI and LLM Application Security. Getting to be one of the first to see this content was a huge honor. For y’all who are interested, their Beta kicks off on January 21st: www.sans.org/cyber-securi...

110

Reposted by Bailey Bercik

Mark Morowczynski @markmorow.com · 09/12/2024

Applies to explaining lots of specialty career paths, like tech/info sec.

021

Bailey Bercik @baileybercik.bsky.social · 09/12/2024

Linking out the talk directly for those who are interested. We cover best practices and break down how to practically secure Gen AI apps in a vendor neutral way youtu.be/wIGevut8o7A?...

youtu.be

Best Practices for How to Manage All Your Access from the Cloud

YouTube video by SANS Cloud Security

000

Bailey Bercik @baileybercik.bsky.social · 09/12/2024

Honored that the governance for #GenerativeAI talk @jeftek.com and I gave at SANS was listed in the top 17 SANS talks of 2024 out of 300 total presentations! www.sans.org/blog/top-san...

jeftek.com

JefTek.com

Info on Cloud Identity shared by Jef Kazimer (JefTek)

131

Reposted by Bailey Bercik

Mark Morowczynski @markmorow.com · 08/11/2024

First, if you aren't familiar with oAuth application consent, we did a few sessions on this topic a few years ago. You can watch the one @baileybercik.bsky.social and I did www.youtube.com/watch?v=oqb3.... Start by checking what your current application permissions are. /2

youtube.com

How attackers can use applications for sustained persistence and how to find it - September 2021

YouTube video by Microsoft Community Learning

123

Reposted by Bailey Bercik

Jef Kazimer 😶‍🌫️ 🆔 @jeftek.com · 26/10/2024

It was my pleasure to share the stage with @baileybercik.bsky.social at #SANS Institute #CloudSecNext where we were able to present on the importance of governance controls in the cloud & AI era. www.youtube.com/watch?v=wIGe... #microsoft #entra #identity #security

youtube.com

Best Practices for How to Manage All Your Access from the Cloud

YouTube video by SANS Cloud Security

131