Cloud Security Podcast by Google
EP153 Kevin Mandia on Cloud Breaches: New Threat Actors, Old Mistakes, and Lessons for All
Dec 18, 2023
Kevin Mandia, CEO at Mandiant, discusses surprising cloud breaches in 2023 and the lessons learned from them. He explains the differences between cloud breaches and on-prem breaches. Mandia also highlights the mistakes and risks that led to cloud breaches and shares insights on how organizations can limit the impact. The episode emphasizes the importance of preparing for cloud breaches and detecting threats effectively. The hosts conclude by asking for advice on handling cloud breaches and recommend reading materials for CISOs.
28:41
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Improved credential management and identity security are crucial in detecting and responding to cloud-based attacks.
- Organizations need to prioritize strong governance and careful management of credentials to mitigate the primary focus on credential harvesting and commodity threats in cloud-based intrusions.
Deep dives
Cloud Breaches of 2023
Kevin Mandia discusses the most surprising cloud breaches of 2023, focusing on the case of Storm 558, a Microsoft attack that accessed consumer-grade keys for the enterprise email system. He highlights the importance of detecting and responding to cloud-based attacks, emphasizing the need for improved credential management and identity security in the cloud.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
