Cloud Security Podcast
autor: TechRiot.io
Nejnovější epizoda
How to Scale Cloud Security with Auto-Remediation
How to Scale Cloud Security with Auto-Remediation
O tomto podcastu
Learn Cloud Security in Public Cloud and for AI systems, the unbiased way from CyberSecurity Experts solving challenges at Cloud Scale. We are honest because we are not owned by Cloud Service Provider like AWS, Azure or Google Cloud.
We aim to make the community learn Cloud Security through community stories from small - Large organisations solving multi-cloud challenges to diving into specific topics of Cloud Security.
We STREAM interviews on Cloud Security Topics every week on Linkedin, YouTube and Twitter with over 150K people tuning in.
Epizody
Nejnovějších 50 z 366 epizod
- How to Scale Cloud Security with Auto-Remediation · 43 min · Řada 7 Epizoda 31When Cloud Security Posture Management (CSPM) tools generate thousands of low and medium-severity alerts, security teams often struggle to manage the infinite backlog. Many…
- Pentesting AWS Security Agent · 39 min · Řada 7 Epizoda 30When cloud providers introduce autonomous AI agents to conduct penetration testing on customer environments, who is responsible when the AI breaks out of scope? In this episode…
- Using LLMs for Enterprise Threat Modeling · 36 min · Řada 7 Epizoda 29Creating an application threat model was a resource-intensive process that took weeks or months, resulting in static documents that were abandoned 80% of the time after their…
- Mythos Hype vs. Reality: Why You Need an Agentic Harness · 48 min · Řada 7 Epizoda 28Is the fear surrounding Anthropic’s Mythos model justified? In this episode, Ashish sits down with Johnny Hand, Global CISO at Trend AI and host of The AI Security Brief. Johnny…
- How Block Solved DNS Vulnerabilities · 55 min · Řada 7 Epizoda 27When companies rapidly migrate to the cloud without strict registrar policies, users often spin up unsanctioned subdomains pointed at third-party services like Vercel or Hugging…
- Why AI Security is Actually a Data Security Problem · 40 min · Řada 7 Epizoda 26When an AI coding agent hallucinates a software package name, attackers can simply create malicious packages with that exact name, tricking the AI into downloading malware…
- Securing Millions of AI-built Apps: How Lovable Defends Against Insider Threats · 1 h 10 min · Řada 7 Epizoda 25Empowering non-technical users to build production-grade applications requires a proactive, secure-by-design architecture. In this episode, Ashish sits down with Marcus Hallberg…
- Why AI Won't Replace Your SOC: Federated Data & APEX Framework · 38 min · Řada 7 Epizoda 24Hash values, IP addresses, and domains are virtually useless as primary detection mechanisms in the era of AI-driven polymorphic malware and short-lived phishing kits. If your…
- The "Hunt First" AI Security Strategy · 46 min · Řada 7 Epizoda 23Did you know that 82% of all intrusions don't involve any sort of malware, and AI-augmented attacks are up 89% year over year? If your security operations team is solely focused…
- Shadow AI & Sandbox Escapes: Why You Need an Agentic Control Plane? · 32 min · Řada 7 Epizoda 22When Claude Cowork hits a roadblock, it doesn't give up, it writes a custom Python script and downloads an untrusted NPM package just to bypass its restrictions and finish its…
- How Adobe Uses AI Agents for building a WAF Pipeline? · 47 min · Řada 7 Epizoda 21When vulnerability disclosures shrink the wild exploit window down to less than 24 hours (or even minutes), traditional manual patching and WAF rule creation simply cannot keep…
- Why Runtime Agents Are Replacing Static Posture Checks · 45 min · Řada 7 Epizoda 20The attack window from the discovery of a vulnerability to its exploitation has shrunk to less than 24 hours and sometimes down to just 25 minutes. Is your security team prepared…
- The Hidden Cost of BlackBox AI: Bridging Cloud and Code Security · 43 min · Řada 7 Epizoda 19Traditional SCA and SAST tools are notorious for drowning security teams in false positives, historically flagging nine out of ten alerts incorrectly. But while generative AI…
- Who Governs Your AI Agents? Identity, Offboarding & Open Standards · 35 min · Řada 7 Epizoda 18Are overprivileged AI agents the biggest emerging threat in cybersecurity? In a recent high-profile attack, a vibe-coding company had its entire source code stolen because an…
- AI-Powered Forensics: How Attackers Automate Breaches · 39 min · Řada 7 Epizoda 17AI isn't necessarily creating impossible new attacks, but it is drastically lowering the technical barrier to entry for cybercriminals. In this episode, Ashish Rajan speaks with…
- The 4 Pillars of AI SOC:From Threat Hunting to Vibe Hunting · 47 min · Řada 7 Epizoda 20Threat hunting has officially evolved into "vibe hunting". However, if your AI security tools lack the right semantic context, they might be doing more harm than good. In this…
- Native Cloud Firewalls Falling Short in a Multicloud World · 37 min · Řada 7 Epizoda 15As enterprises expand across multiple cloud environments, on-premise data centers, and dynamic AI workloads, traditional perimeter defenses and siloed cloud-native tools are no…
- How AI Agents Will Negotiate Your Vendor Contracts · 38 min · Řada 7 Epizoda 14Third-Party Risk Management (TPRM) has historically been a tedious, 200-page paper exercise that felt like being catapulted back to 1979. But AI is changing that. In this…
- How Claude Mythos Changes Vulnerability Management: From CVSS to Exploitability · 45 min · Řada 7 Epizoda 13Is your vulnerability management program ready for something like Claude Mythos? The old days of treating vulnerabilities as temporal events (like Heartbleed or Log4J) and…
- AISPM Isn't Enough: How to Apply Zero Trust to AI Agents · 54 min · Řada 7 Epizoda 12We are officially entering the "Multi-AI Era." Much like the multi-cloud times, organizations are no longer just using a single AI tool like Microsoft Copilot, they are building…
- The Rise of Agentic Cloud Security: Code-to-Cloud Shrinks to 3 Days · 27 min · Řada 7 Epizoda 11Is your cloud security strategy ready for the "messy middle" of AI adoption? With developers pushing code from inception to production in under three days using "vibe coding,"…
- Why EDR Fails at AI Security & The Rise of Endpoint Behavior Modeling · 31 min · Řada 7 Epizoda 10Is your EDR blinding you to insider threats? In this episode, Ashish is joined by Brandon Dixon (Co-Founder & CTO of Ent AI, and former Microsoft Security Copilot leader) to…
- Solving Prompt Injection & Shadow AI for AI Malware · 37 min · Řada 7 Epizoda 9Are AI agents functioning like adversarial malware inside your network? In this episode of the Cloud Security Podcast, Ashish sits down with Jasson Casey, Co-founder and CEO of…
- Browser Security Explained: Consent Phishing, "Click Fix" Attacks & The Limits of EDR · 46 min · Řada 7 Epizoda 8Is your security team treating your Identity Provider (IDP) like a firewall? In this episode, Adam Bateman (CEO & Co-founder of Push Security) explains why that's a dangerous…
- Is AI Hallucinations a Myth and the Real Threat from AI · 40 min · Řada 7 Epizoda 7Are attackers really using AI to run end-to-end cyber campaigns? In this episode, Edward Wu (Founder and CEO, DropzoneAI) joins Ashish to separate the hype from reality when it…
- Why AI Infrastructure is Harder to Secure Than Cloud · 34 min · Řada 7 Epizoda 11Is AI security just "Cloud Security 2.0"? Toni De La Fuente, creator of the open-source tool Prowler, joins Ashish to explain why securing AI workloads requires a fundamentally…
- How Attackers Bypass AI Guardrails with Natural Language · 47 min · Řada 7In the world of Generative AI, natural language has become the new executable. Attackers no longer need complex code to breach your systems, sometimes, asking for a "poem" is…
- Vulnerability Management vs. Exposure Management · 40 min · Řada 7 Epizoda 4In this episode, Brad Hibbert (COO & Chief Strategy Officer at Brinqa) joins Ashish to explain why traditional risk-based vulnerability management (RBVM) is no longer enough in a…
- Is Developer Friendly AI Security Possible with MCP & Shadow AI · 1 h 3 min · Řada 7 Epizoda 3Is "developer-friendly" AI security actually possible? In this episode, Bryan Woolgar-O'Neil (CTO & Co-founder of Harmonic Security) joins Ashish to dismantle the traditional…
- Why AI Can't Replace Detection Engineers: Build vs. Buy & The Future of SOC · 52 min · Řada 7 Epizoda 2Is the AI SOC a reality, or just vendor hype? In this episode, Antoinette Stevens (Principal Security Engineer at Ramp) joins Ashish to dissect the true state of AI in detection…
- AI Vulnerability Management: Why You Can't Patch a Neural Network · 41 min · Řada 7 Epizoda 1Traditional vulnerability management is simple: find the flaw, patch it, and verify the fix. But what happens when the "asset" is a neural network that has learned something…
- Why Backups Aren't Enough & Identity Recovery is Key against Ransomware · 37 min · Řada 6 Epizoda 55Think your cloud backups will save you from a ransomware attack? Think again. In this episode, Matt Castriotta (Field CTO at Rubrik) explains why the traditional "I have backups"…
- How to secure your AI Agents: A CISOs Journey · 55 min · Řada 6 Epizoda 49Transitioning a mature organization from an API-first model to an AI-first model is no small feat. In this episode, Yash Kosaraju, CISO of Sendbird, shares the story of how they…
- AI-First Vulnerability Management: Should CISOs Build or Buy? · 1 h 1 min · Řada 6 Epizoda 48Thinking of building your own AI security tool? In this episode, Santiago Castiñeira, CTO of Maze, breaks down the realities of the "Build vs. Buy" debate for AI-first…
- SIEM vs. Data Lake: Why We Ditched Traditional Logging? · 47 min · Řada 6 Epizoda 46In this episode, Cliff Crosland, CEO & co-founder of Scanner.dev, shares his candid journey of trying (and initially failing) to build an in-house security data lake to replace…
- How to Build Trust in an AI SOC for Regulated Environments · 42 min · Řada 6 Epizoda 45How do you establish trust in an AI SOC, especially in a regulated environment? Grant Oviatt, Head of SOC at Prophet Security and a former SOC leader at Mandiant and Red Canary…
- Threat Modeling the AI Agent: Architecture, Threats & Monitoring · 47 min · Řada 6 Epizoda 44Are we underestimating how the agentic world is impacting cybersecurity? We spoke to Mohan Kumar, who did production security at Box for a deep dive into the threats of true…
- AI is already breaking the Silos Between AppSec & CloudSec · 1 h 11 min · Řada 6 Epizoda 48The silos between Application Security and Cloud Security are officially breaking down, and AI is the primary catalyst. In this episode, Tejas Dakve, Senior Manager, Application…
- AI Agents for SOC: Hype Curve vs. Measurable ROI · 36 min · Řada 6 Epizoda 42Is the AI SOC analyst just hype, or is there measurable ROI? We spoke to Edward Wu, founder of Dropzone AI about this and he shared insights from a recent Cloud Security Alliance…
- Can You Build an AI SOC with Claude Code? The Reality vs. Hype · 48 min · Řada 6 Epizoda 41Can you just use Claude Code or another LLM to "vibe code" your way into building an AI SOC? In this episode, Ariful Huq, Co-Founder and Head of Product at Exaforce spoke about…
- Incident Response of Kubernetes and how to Automate Containment · 52 min · Řada 6 Epizoda 40How do you perform incident response on a Kubernetes cluster when you're not even on the same network? In this episode, Damien Burks, Senior Security engineer breaks down the…
- The Truth About AI in the SOC: From Alert Fatigue to Detection Engineering · 46 min · Řada 6 Epizoda 39"The next five years are gonna be wild." That's the verdict from Forrester Principal Analyst Allie Mellen on the state of Security Operations. This episode dives into the…
- The Security Gaps in AWS Bedrock & Azure AI You Need to Know · 55 min · Řada 6 Epizoda 38The race to deploy AI is on, but are the cloud platforms we rely on secure by default? This episode features a practical, in-the-weeds discussion with Kyler Middleton, Principal…
- The Evolution of Email Security: From Pre-Breach to Post-Breach Protection · 30 min · Řada 6 Epizoda 37For the last 30 years, email security has been stuck in the past, focusing almost entirely on stopping bad things from getting into the inbox. In this episode, Rajan Kapoor…
- Using AI to Fix Your Cloud Security Backlog beyond Visibility · 49 min · Řada 6 Epizoda 36You have the visibility, you see the alerts, but your security backlog is still growing faster than your team can fix it. So, are you actually getting more secure? In this…
- Your SecOps Team Can't Save Your Cloud: A New Blueprint for Security. · 47 min · Řada 6 Epizoda 35The conversation around cloud security is maturing beyond simple threat detection. As the industry grapples with alert fatigue, we explore the necessary shift from a reactive to…
- New Identity Blueprint for a Future with Cloud & AI · 50 min · Řada 6 Epizoda 34Identity is the root cause of over 70% of all security incidents, yet many organizations still rely on fundamentally flawed authentication methods. In this episode, Jasson Casey…
- AI for SOC Automation: A Blueprint for the New world of Incident Response · 53 min · Řada 6 Epizoda 33The nature of Security Operations is changing. As cloud environments grow in complexity and data volumes explode, traditional approaches to detection and response are proving…
- The Truth About Agentic AI in the SOC: Reality vs. Hype · 53 min · Řada 6 Epizoda 32What does the integration of AI into a Security Operations Center (SOC) practically look like? This episode explores the concept of the "Agentic SOC," moving beyond marketing…
- Understanding a $10B Fraud Vector in Cloud-Native Workflows · 45 min · Řada 6 Epizoda 31A $10 billion fraud vector is currently exploiting a common feature in many cloud-native applications: the SMS verification flow. This isn't a traditional breach. Instead of…
