About this podcast
Learn Cloud Security in Public Cloud and for AI systems, the unbiased way from CyberSecurity Experts solving challenges at Cloud Scale. We are honest because we are not owned by Cloud Service Provider like AWS, Azure or Google Cloud.
We aim to make the community learn Cloud Security through community stories from small - Large organisations solving multi-cloud challenges to diving into specific topics of Cloud Security.
We STREAM interviews on Cloud Security Topics every week on Linkedin, YouTube and Twitter with over 150K people tuning in.
Episodes
The newest 50 of 365 episodes
- Pentesting AWS Security Agent · 39 min · Season 7 Episode 30When cloud providers introduce autonomous AI agents to conduct penetration testing on customer environments, who is responsible when the AI breaks out of scope? In this episode…
- Using LLMs for Enterprise Threat Modeling · 36 min · Season 7 Episode 29Creating an application threat model was a resource-intensive process that took weeks or months, resulting in static documents that were abandoned 80% of the time after their…
- Mythos Hype vs. Reality: Why You Need an Agentic Harness · 48 min · Season 7 Episode 28Is the fear surrounding Anthropic’s Mythos model justified? In this episode, Ashish sits down with Johnny Hand, Global CISO at Trend AI and host of The AI Security Brief. Johnny…
- How Block Solved DNS Vulnerabilities · 55 min · Season 7 Episode 27When companies rapidly migrate to the cloud without strict registrar policies, users often spin up unsanctioned subdomains pointed at third-party services like Vercel or Hugging…
- Why AI Security is Actually a Data Security Problem · 40 min · Season 7 Episode 26When an AI coding agent hallucinates a software package name, attackers can simply create malicious packages with that exact name, tricking the AI into downloading malware…
- Securing Millions of AI-built Apps: How Lovable Defends Against Insider Threats · 1 h 10 min · Season 7 Episode 25Empowering non-technical users to build production-grade applications requires a proactive, secure-by-design architecture. In this episode, Ashish sits down with Marcus Hallberg…
- Why AI Won't Replace Your SOC: Federated Data & APEX Framework · 38 min · Season 7 Episode 24Hash values, IP addresses, and domains are virtually useless as primary detection mechanisms in the era of AI-driven polymorphic malware and short-lived phishing kits. If your…
- The "Hunt First" AI Security Strategy · 46 min · Season 7 Episode 23Did you know that 82% of all intrusions don't involve any sort of malware, and AI-augmented attacks are up 89% year over year? If your security operations team is solely focused…
- Shadow AI & Sandbox Escapes: Why You Need an Agentic Control Plane? · 32 min · Season 7 Episode 22When Claude Cowork hits a roadblock, it doesn't give up, it writes a custom Python script and downloads an untrusted NPM package just to bypass its restrictions and finish its…
- How Adobe Uses AI Agents for building a WAF Pipeline? · 47 min · Season 7 Episode 21When vulnerability disclosures shrink the wild exploit window down to less than 24 hours (or even minutes), traditional manual patching and WAF rule creation simply cannot keep…
- Why Runtime Agents Are Replacing Static Posture Checks · 45 min · Season 7 Episode 20The attack window from the discovery of a vulnerability to its exploitation has shrunk to less than 24 hours and sometimes down to just 25 minutes. Is your security team prepared…
- The Hidden Cost of BlackBox AI: Bridging Cloud and Code Security · 43 min · Season 7 Episode 19Traditional SCA and SAST tools are notorious for drowning security teams in false positives, historically flagging nine out of ten alerts incorrectly. But while generative AI…
- Who Governs Your AI Agents? Identity, Offboarding & Open Standards · 35 min · Season 7 Episode 18Are overprivileged AI agents the biggest emerging threat in cybersecurity? In a recent high-profile attack, a vibe-coding company had its entire source code stolen because an…
- AI-Powered Forensics: How Attackers Automate Breaches · 39 min · Season 7 Episode 17AI isn't necessarily creating impossible new attacks, but it is drastically lowering the technical barrier to entry for cybercriminals. In this episode, Ashish Rajan speaks with…
- The 4 Pillars of AI SOC:From Threat Hunting to Vibe Hunting · 47 min · Season 7 Episode 20Threat hunting has officially evolved into "vibe hunting". However, if your AI security tools lack the right semantic context, they might be doing more harm than good. In this…
- Native Cloud Firewalls Falling Short in a Multicloud World · 37 min · Season 7 Episode 15As enterprises expand across multiple cloud environments, on-premise data centers, and dynamic AI workloads, traditional perimeter defenses and siloed cloud-native tools are no…
- How AI Agents Will Negotiate Your Vendor Contracts · 38 min · Season 7 Episode 14Third-Party Risk Management (TPRM) has historically been a tedious, 200-page paper exercise that felt like being catapulted back to 1979. But AI is changing that. In this…
- How Claude Mythos Changes Vulnerability Management: From CVSS to Exploitability · 45 min · Season 7 Episode 13Is your vulnerability management program ready for something like Claude Mythos? The old days of treating vulnerabilities as temporal events (like Heartbleed or Log4J) and…
- AISPM Isn't Enough: How to Apply Zero Trust to AI Agents · 54 min · Season 7 Episode 12We are officially entering the "Multi-AI Era." Much like the multi-cloud times, organizations are no longer just using a single AI tool like Microsoft Copilot, they are building…
- The Rise of Agentic Cloud Security: Code-to-Cloud Shrinks to 3 Days · 27 min · Season 7 Episode 11Is your cloud security strategy ready for the "messy middle" of AI adoption? With developers pushing code from inception to production in under three days using "vibe coding,"…
- Why EDR Fails at AI Security & The Rise of Endpoint Behavior Modeling · 31 min · Season 7 Episode 10Is your EDR blinding you to insider threats? In this episode, Ashish is joined by Brandon Dixon (Co-Founder & CTO of Ent AI, and former Microsoft Security Copilot leader) to…
- Solving Prompt Injection & Shadow AI for AI Malware · 37 min · Season 7 Episode 9Are AI agents functioning like adversarial malware inside your network? In this episode of the Cloud Security Podcast, Ashish sits down with Jasson Casey, Co-founder and CEO of…
- Browser Security Explained: Consent Phishing, "Click Fix" Attacks & The Limits of EDR · 46 min · Season 7 Episode 8Is your security team treating your Identity Provider (IDP) like a firewall? In this episode, Adam Bateman (CEO & Co-founder of Push Security) explains why that's a dangerous…
- Is AI Hallucinations a Myth and the Real Threat from AI · 40 min · Season 7 Episode 7Are attackers really using AI to run end-to-end cyber campaigns? In this episode, Edward Wu (Founder and CEO, DropzoneAI) joins Ashish to separate the hype from reality when it…
- Why AI Infrastructure is Harder to Secure Than Cloud · 34 min · Season 7 Episode 11Is AI security just "Cloud Security 2.0"? Toni De La Fuente, creator of the open-source tool Prowler, joins Ashish to explain why securing AI workloads requires a fundamentally…
- How Attackers Bypass AI Guardrails with Natural Language · 47 min · Season 7In the world of Generative AI, natural language has become the new executable. Attackers no longer need complex code to breach your systems, sometimes, asking for a "poem" is…
- Vulnerability Management vs. Exposure Management · 40 min · Season 7 Episode 4In this episode, Brad Hibbert (COO & Chief Strategy Officer at Brinqa) joins Ashish to explain why traditional risk-based vulnerability management (RBVM) is no longer enough in a…
- Is Developer Friendly AI Security Possible with MCP & Shadow AI · 1 h 3 min · Season 7 Episode 3Is "developer-friendly" AI security actually possible? In this episode, Bryan Woolgar-O'Neil (CTO & Co-founder of Harmonic Security) joins Ashish to dismantle the traditional…
- Why AI Can't Replace Detection Engineers: Build vs. Buy & The Future of SOC · 52 min · Season 7 Episode 2Is the AI SOC a reality, or just vendor hype? In this episode, Antoinette Stevens (Principal Security Engineer at Ramp) joins Ashish to dissect the true state of AI in detection…
- AI Vulnerability Management: Why You Can't Patch a Neural Network · 41 min · Season 7 Episode 1Traditional vulnerability management is simple: find the flaw, patch it, and verify the fix. But what happens when the "asset" is a neural network that has learned something…
- Why Backups Aren't Enough & Identity Recovery is Key against Ransomware · 37 min · Season 6 Episode 55Think your cloud backups will save you from a ransomware attack? Think again. In this episode, Matt Castriotta (Field CTO at Rubrik) explains why the traditional "I have backups"…
- How to secure your AI Agents: A CISOs Journey · 55 min · Season 6 Episode 49Transitioning a mature organization from an API-first model to an AI-first model is no small feat. In this episode, Yash Kosaraju, CISO of Sendbird, shares the story of how they…
- AI-First Vulnerability Management: Should CISOs Build or Buy? · 1 h 1 min · Season 6 Episode 48Thinking of building your own AI security tool? In this episode, Santiago Castiñeira, CTO of Maze, breaks down the realities of the "Build vs. Buy" debate for AI-first…
- SIEM vs. Data Lake: Why We Ditched Traditional Logging? · 47 min · Season 6 Episode 46In this episode, Cliff Crosland, CEO & co-founder of Scanner.dev, shares his candid journey of trying (and initially failing) to build an in-house security data lake to replace…
- How to Build Trust in an AI SOC for Regulated Environments · 42 min · Season 6 Episode 45How do you establish trust in an AI SOC, especially in a regulated environment? Grant Oviatt, Head of SOC at Prophet Security and a former SOC leader at Mandiant and Red Canary…
- Threat Modeling the AI Agent: Architecture, Threats & Monitoring · 47 min · Season 6 Episode 44Are we underestimating how the agentic world is impacting cybersecurity? We spoke to Mohan Kumar, who did production security at Box for a deep dive into the threats of true…
- AI is already breaking the Silos Between AppSec & CloudSec · 1 h 11 min · Season 6 Episode 48The silos between Application Security and Cloud Security are officially breaking down, and AI is the primary catalyst. In this episode, Tejas Dakve, Senior Manager, Application…
- AI Agents for SOC: Hype Curve vs. Measurable ROI · 36 min · Season 6 Episode 42Is the AI SOC analyst just hype, or is there measurable ROI? We spoke to Edward Wu, founder of Dropzone AI about this and he shared insights from a recent Cloud Security Alliance…
- Can You Build an AI SOC with Claude Code? The Reality vs. Hype · 48 min · Season 6 Episode 41Can you just use Claude Code or another LLM to "vibe code" your way into building an AI SOC? In this episode, Ariful Huq, Co-Founder and Head of Product at Exaforce spoke about…
- Incident Response of Kubernetes and how to Automate Containment · 52 min · Season 6 Episode 40How do you perform incident response on a Kubernetes cluster when you're not even on the same network? In this episode, Damien Burks, Senior Security engineer breaks down the…
- The Truth About AI in the SOC: From Alert Fatigue to Detection Engineering · 46 min · Season 6 Episode 39"The next five years are gonna be wild." That's the verdict from Forrester Principal Analyst Allie Mellen on the state of Security Operations. This episode dives into the…
- The Security Gaps in AWS Bedrock & Azure AI You Need to Know · 55 min · Season 6 Episode 38The race to deploy AI is on, but are the cloud platforms we rely on secure by default? This episode features a practical, in-the-weeds discussion with Kyler Middleton, Principal…
- The Evolution of Email Security: From Pre-Breach to Post-Breach Protection · 30 min · Season 6 Episode 37For the last 30 years, email security has been stuck in the past, focusing almost entirely on stopping bad things from getting into the inbox. In this episode, Rajan Kapoor…
- Using AI to Fix Your Cloud Security Backlog beyond Visibility · 49 min · Season 6 Episode 36You have the visibility, you see the alerts, but your security backlog is still growing faster than your team can fix it. So, are you actually getting more secure? In this…
- Your SecOps Team Can't Save Your Cloud: A New Blueprint for Security. · 47 min · Season 6 Episode 35The conversation around cloud security is maturing beyond simple threat detection. As the industry grapples with alert fatigue, we explore the necessary shift from a reactive to…
- New Identity Blueprint for a Future with Cloud & AI · 50 min · Season 6 Episode 34Identity is the root cause of over 70% of all security incidents, yet many organizations still rely on fundamentally flawed authentication methods. In this episode, Jasson Casey…
- AI for SOC Automation: A Blueprint for the New world of Incident Response · 53 min · Season 6 Episode 33The nature of Security Operations is changing. As cloud environments grow in complexity and data volumes explode, traditional approaches to detection and response are proving…
- The Truth About Agentic AI in the SOC: Reality vs. Hype · 53 min · Season 6 Episode 32What does the integration of AI into a Security Operations Center (SOC) practically look like? This episode explores the concept of the "Agentic SOC," moving beyond marketing…
- Understanding a $10B Fraud Vector in Cloud-Native Workflows · 45 min · Season 6 Episode 31A $10 billion fraud vector is currently exploiting a common feature in many cloud-native applications: the SMS verification flow. This isn't a traditional breach. Instead of…
- How BT Tackled 180 Years of Legacy to Build a Passwordless Future · 20 min · Season 6 Episode 32How do you modernize security in a 180-year-old company that operates critical national infrastructure? What does it look like when you discover tens or even hundreds of…
