Cloud Security Podcast
Cloud Security Podcast Team
Learn Cloud Security in Public Cloud the unbiased way from CyberSecurity Experts solving challenges at Cloud Scale. We can be honest because we are not owned by Cloud Service Provider like AWS, Azure or Google Cloud.
We aim to make the community learn Cloud Security through community stories from small - Large organisations solving multi-cloud challenges to diving into specific topics of Cloud Security.
We LIVE STREAM interviews on Cloud Security Topics every weekend on Linkedin, YouTube, Facebook and Twitter with over 150 people watching and asking questions and interacting with the Guest.
We aim to make the community learn Cloud Security through community stories from small - Large organisations solving multi-cloud challenges to diving into specific topics of Cloud Security.
We LIVE STREAM interviews on Cloud Security Topics every weekend on Linkedin, YouTube, Facebook and Twitter with over 150 people watching and asking questions and interacting with the Guest.
Episodes
Mentioned books
Apr 9, 2024 • 49min
CISO's guide to embracing risk in business
Fredrick Lee, CISO at Reddit, delves into embracing risk in business for innovation. Topics cover cost-effective cybersecurity strategies, Reddit's S.P.A.C.E team, and challenges in the modern tech environment. The conversation explores the importance of risk-taking, driving success, and the evolving landscape of security priorities.
Apr 5, 2024 • 30min
Why Email Breaches Still Happen?
Abhishek Agrawal, Co-founder of Material Security, discusses the persistence of email security challenges and the importance of focusing on threat management and posture management in today's digital landscape. The podcast delves into the evolving tactics used in email breaches, emphasizing the need for enhanced identity protection measures and highlighting the critical aspects of securing productivity suites like Microsoft 365 and Google Workspace.
Apr 2, 2024 • 46min
Essential Strategies to master Incident Response in Cloud
Andrew Tabona, SVP of Cyber Threat Management, challenges traditional incident response plans in the cloud. They discuss mean time to detect, respond, and recover, strategies for building a detection framework, nuances of incident response in cloud vs. on-premise environments, balanced log ingestion, and the importance of mastering fundamentals for effective cloud security.
Mar 12, 2024 • 21min
From Code Suggestions to Security
Learn all about GitHub Copilot, an AI-powered coding assistant redefining how developers write code. From its impact on security professionals to the trustworthiness of AI-generated code, discover how GitHub Copilot enhances productivity and security in the coding world. Explore the versatility of this tool in various programming languages and its potential for revolutionizing software development. Plus, enjoy a fun chat about gaming, work-life balance, and favorite cuisines.
9 snips
Mar 8, 2024 • 36min
Cloud Security Operations for Modern Threats
The podcast delves into the concept of 'Assume Breach' for cloud incident preparedness, the effectiveness of CSPM, and the importance of logs in incident response. It also discusses gaining deep visibility in cloud environments, the need for a Security Data Lake, and demonstrating ROI for Security Operations.
Mar 1, 2024 • 50min
Understanding Threat Modeling in Cloud
Exploring the importance of threat modeling in cloud, the differences between cloud and on-prem threat modeling, practical examples, and challenges of scaling threat modeling. Discussions on incorporating threat modeling in security programs, various approaches to threat modeling, and personal insights on building effective threat models.
Feb 23, 2024 • 18min
Balancing Efficiency & Security: AI’s Transformation of Legal Data Analysis
Discover how GenAI and Custom LLM models are transforming legal data analysis at LexisNexis. Explore the intersection of cloud engineering, cybersecurity, and AI in the legal sector. Learn about the importance of data security in AI applications for legal research and document drafting.
Feb 16, 2024 • 16min
Sidecar Container Vulnerability in Kubernetes explained
Magno Logan, an expert in Kubernetes security, talks about the silent but deadly vulnerabilities of sidecar containers in Kubernetes. He discusses common attack paths, entry points for attackers, container escape, and ways to secure sidecars, shedding light on the threats beyond crypto mining attacks.
Feb 2, 2024 • 40min
Role of application security posture management in cybersecurity
Idan Plotnik, Co-Founder of Apiiro, with 24 years of cybersecurity experience, discusses the challenges of managing vast quantities of repositories and misconceptions about Application Security Posture Management. He highlights the relevance of ASPM in both large and small organizations. The podcast explores the differences between Cloud Security and Application Security Tools, and the growing need for Application Security Tools. It concludes with insights into managing cybersecurity, mean time to remediation, and importance of customer feedback.
Jan 26, 2024 • 30min
Cybersecurity Best Practices and Password Security in Cloud and AI
Troy Hunt and Scott Helme discuss best practices for decoding TLS, password security, and data breaches in cloud and AI. They emphasize the importance of early security training, strong passwords combined with multi-factor authentication, and proper password storage and encryption. The speakers also explore the risks and benefits of building LLMs, debunk TLS misconceptions, and highlight the relevance of security policies and cybersecurity training in improving security without expensive appliances.
