401 Access Denied
Delinea's ethical hacker Joseph Carson on privileged access, ransomware, and security culture. 126 episodes from 2020 to February 2025.
- Host
- Joseph Carson
- Publisher
- Delinea · Vendor
- Pillar
- Privileged & Governance
- Level
- Practitioner
- Format
- Interview
- Cadence
- Every two weeks, paused since February 2025, 30 to 45 min
- Status
- Dormant, last episode 2025-02-19
- Since
- 2020
- Episodes
- 263
What it is
401 Access Denied launched in January 2020 under Thycotic, which became Delinea, and is hosted by Joseph Carson, described in the feed as Delinea's ethical hacker. Over 126 episodes it covered privileged access, ransomware response, security culture, and the year's cyber trends with guests from across the industry. It won the Cybersecurity Excellence Awards' best North American cybersecurity podcast in 2021, 2022, and 2023.
Who it suits
Security practitioners who want a broad, story-driven security show with a privileged access angle.
Editor note
Engaging and well produced, but broader than identity: many episodes are about security culture and incidents rather than PAM. It has published nothing since February 19, 2025, and Delinea's page still lists it without an end notice, so we list it as dormant. For an ordered PAM education, use our PAM learning path and the best PAM tools ranking.
Where to start
- 401 Access Denied Ep. 39 | Zero Trust Fundamentals with Dave Lewis2021-10-20 · 40 min · Learner · Zero trust
Covers zero trust basics and its deperimeterization roots, building a strategy from an inventory of users, devices and workloads, winning board buy-in, and giving people simple security tools.
- 401 Access Denied Podcast Ep. 76 | Discovering and Stealing Secrets with Mackenzie Jackson2023-03-22 · 33 min · Practitioner · Non-human and AI agent identity
The main ways attackers find and exploit secrets and credentials leaked in source code, and how developers can defend against those attacks.
- 401 Access Denied Podcast Ep. 119 | Segregation of Duties: A Key to Security with Chris Katz2024-11-13 · 38 min · Learner · Identity governance (IGA)
Identity compliance basics: defining roles, applying segregation of duties to prevent errors and fraud, and running regular access audits.
Also in our learning paths
- 401 Access Denied Podcast Ep. 114 | The Rise and Future of Identity with Ian Glazer2024-09-04 · 48 min · Practitioner · Privileged access management
Why role-based access falls short, how event-time data can support dynamic access decisions, and what it takes to move toward zero standing privilege.
Last verified 2026-09-30 against the show's feed, recent episode notes, and the publisher's own pages. Status and last-episode date update weekly from the feed.
401 Access Denied is produced by Delinea. Listed on the same terms as independent shows.
Independent, community-driven analysis. No vendor sponsorship. Compiled from public research and community input and verified on a best-effort basis, so details may be incomplete or out of date. Scores are opinions, not advice. Trademarks belong to their owners; mention does not imply affiliation or endorsement. See the full disclaimer, or send corrections to community@startwithidentity.com.
Related on Start with Identity
- CVEBeyondTrust Remote Support pre-auth command injection, a variant of CVE-2024-12356
An unauthenticated request could run operating system commands on self-hosted BeyondTrust Remote Support and older Privileged Remote Access appliances. Scanning
- Blog1Password buys Apono, moving from credential vault to access control plane
Reported at 250 to 300 million dollars, the deal gives 1Password just-in-time privileged access across AWS, Azure, GCP, Kubernetes, Snowflake, and Databricks, a
- CVECheck Point Remote Access VPN lets attackers in without a password over IKEv1
A certificate validation logic flaw in Check Point Remote Access and Mobile Access over deprecated IKEv1 let attackers open a VPN session without a valid passwo
- GlossaryJust-in-Time (JIT) Access
Granting elevated permissions only when needed, for a limited duration, and revoking them automatically. JIT eliminates [standing privilege](/glossary/standing-
- GlossaryPrivileged Access Workstation (PAW)
A privileged access workstation (PAW) is a dedicated, hardened computer used only for administrative work, with no email, no general web browsing and only appro
- GlossaryPrivileged Remote Access (PRA)
Privileged remote access (PRA) is the brokering of administrative sessions to servers, network devices, databases and OT systems for remote employees, vendors a