// Security

Chris Reddington is joined by Ivo, a cloud evangelist based in Belgium with hands-on experience transforming one of the country's largest telco providers. They explore how telecommunications companies are leveraging Azure to evolve from traditional connectivity providers into platform-scale service businesses — covering 5G, IoT, edge computing, AI/ML, Azure Arc, security, compliance, and the cultural challenges of cloud adoption in a regulated industry.

Chris covers a wave of Azure service deprecations and retirements scheduled through 2022-2024, the launch of GitHub CLI 2.0 with its new extension model, and npm's TLS 1.0/1.1 deprecation. He highlights an impactful accessibility episode with Kaizota about hearing impairment at tech conferences, discusses GitHub branch protection rules for shifting left on code quality, and shares insights on Azure Front Door Standard and Premium tiers.

Chris and community members sail the Sea of Thieves while covering Azure updates including Government Top Secret GA, ASP.NET app migration tooling, and Forrester Wave recognition for streaming analytics. GitHub updates include 2FA enforcement for git operations, Git 2.33, and Discussions GA, while the crew discusses Azure certification prep strategies, career transitions into DevOps, and the open-source Cloud Katana security assessment tool.

Security vulnerabilities don't wait to be discovered — and developers are often unknowingly shipping them through open source dependencies. In this episode, Chris is joined by DeveloperSteve Coochin, Developer Advocate at Snyk, to explore the real-world state of vulnerabilities in modern applications. Steve shares findings from his research into the PHP ecosystem and explains how developers can shift vulnerability detection left — catching CVEs in dependencies before they reach production, by integrating tools like Snyk directly into their CI/CD pipelines and GitHub workflows.

Whether you're brand new to Azure or have been using it for some time, you have likely either heard of - or come across - Azure Security Center. It's a service which can prove extremely valuable in baselining, measuring and improving your security posture. But, did you know there is additional functionality beyond the free tier? You may have previously known this as the standard tier, or now know this as Azure Defender, where you can opt in for those Azure Services that you particularly want to protect.

Chris covers Azure updates including container app modernization, DDoS protection trends for H1 2021, and virtual network resizing in preview, alongside the general availability of GitHub Codespaces with a deep dive into how GitHub's engineering team uses Codespaces to develop GitHub.com. He also discusses Bicep and Infrastructure as Code on the Azure DevOps blog, plus upcoming sessions on AKS, application security, and cell-based cloud architectures.

When using Azure Kubernetes Service (AKS), there's a chance that kubenet might be the only possible choice due to your requirements. If so, you may still want to use Application Gateway Ingress Controller (AGIC) to leverage Azure Application Gateway's Web Application Firewall (WAF) capabilities. In this session, we will make the journey together to have a working AGIC in an AKS cluster with kubenet and managed identities.

When COVID-19 forced the vOpen.Tech conference to pivot from a physical event to a fully virtual one, the organising team had fewer than two weeks to build a production-ready registration and identity system — with minimal budget. In this episode, Chris is joined by Facundo La Rocca (Faku), a .NET developer and conference organiser from Buenos Aires, who shares how Azure AD B2C became the silver bullet that made it possible: delivering a scalable, secure IAM platform with almost no custom code, at no cost, in under a fortnight.

Chris opens with a heartfelt tribute to Abel Wang before covering Azure updates including Site Recovery cross-region replication, ExpressRoute expansions, and immutable blob storage. The episode highlights GitHub's 15+ new code scanning integrations with open source security tools, a comparison of Azure Static Web Apps hosting options, and upcoming Cloud with Chris content plans.

Chris and Simon play Sea of Thieves while covering Azure Firewall Premium features, 5G and cloud computing for IoT edge scenarios, GitHub Actions for static site deployments, and open source project best practices from a recent Cloud With Chris episode with JJ Asghar.