Shows / Cloud Security Podcast
Cloud Security Podcast
Learn Cloud Security in Public Cloud and for AI systems, the unbiased way from CyberSecurity Experts solving challenges at Cloud Scale. We are honest because we are not owned by Cloud Service Provider like AWS, Azure or Google Cloud. We aim to make the community learn Cloud Security through community stories from small - Large organisations solving multi-cloud challenges to diving into specific topics of Cloud Security. We STREAM interviews on Cloud Security Topics every week on Linkedin…
Episodes
- Cloud Security Podcast
Pentesting AWS Security Agent
When cloud providers introduce autonomous AI agents to conduct penetration testing on customer environments, who is responsible when the AI breaks out of…
- Cloud Security Podcast
Using LLMs for Enterprise Threat Modeling
Creating an application threat model was a resource-intensive process that took weeks or months, resulting in static documents that were abandoned 80% of the…
- Cloud Security Podcast
Mythos Hype vs. Reality: Why You Need an Agentic Harness
Is the fear surrounding Anthropic’s Mythos model justified? In this episode, Ashish sits down with Johnny Hand, Global CISO at Trend AI and host of The AI…
- Cloud Security Podcast
How Block Solved DNS Vulnerabilities
When companies rapidly migrate to the cloud without strict registrar policies, users often spin up unsanctioned subdomains pointed at third-party services like…
- Cloud Security Podcast
Why AI Security is Actually a Data Security Problem
When an AI coding agent hallucinates a software package name, attackers can simply create malicious packages with that exact name, tricking the AI into…
- Cloud Security Podcast
Securing Millions of AI-built Apps: How Lovable Defends Against Insider Threats
Empowering non-technical users to build production-grade applications requires a proactive, secure-by-design architecture. In this episode, Ashish sits down…
- Cloud Security Podcast
Why AI Won't Replace Your SOC: Federated Data & APEX Framework
Hash values, IP addresses, and domains are virtually useless as primary detection mechanisms in the era of AI-driven polymorphic malware and short-lived…
- Cloud Security Podcast
The "Hunt First" AI Security Strategy
Did you know that 82% of all intrusions don't involve any sort of malware, and AI-augmented attacks are up 89% year over year? If your security operations team…
- Cloud Security Podcast
Shadow AI & Sandbox Escapes: Why You Need an Agentic Control Plane?
When Claude Cowork hits a roadblock, it doesn't give up, it writes a custom Python script and downloads an untrusted NPM package just to bypass its…
- Cloud Security Podcast
How Adobe Uses AI Agents for building a WAF Pipeline?
When vulnerability disclosures shrink the wild exploit window down to less than 24 hours (or even minutes), traditional manual patching and WAF rule creation…
- Cloud Security Podcast
Why Runtime Agents Are Replacing Static Posture Checks
The attack window from the discovery of a vulnerability to its exploitation has shrunk to less than 24 hours and sometimes down to just 25 minutes. Is your…
- Cloud Security Podcast
The Hidden Cost of BlackBox AI: Bridging Cloud and Code Security
Traditional SCA and SAST tools are notorious for drowning security teams in false positives, historically flagging nine out of ten alerts incorrectly. But…
- Cloud Security Podcast
Who Governs Your AI Agents? Identity, Offboarding & Open Standards
Are overprivileged AI agents the biggest emerging threat in cybersecurity? In a recent high-profile attack, a vibe-coding company had its entire source code…
- Cloud Security Podcast
AI-Powered Forensics: How Attackers Automate Breaches
AI isn't necessarily creating impossible new attacks, but it is drastically lowering the technical barrier to entry for cybercriminals. In this episode, Ashish…
- Cloud Security Podcast
The 4 Pillars of AI SOC:From Threat Hunting to Vibe Hunting
Threat hunting has officially evolved into "vibe hunting". However, if your AI security tools lack the right semantic context, they might be doing more harm…
- Cloud Security Podcast
Native Cloud Firewalls Falling Short in a Multicloud World
As enterprises expand across multiple cloud environments, on-premise data centers, and dynamic AI workloads, traditional perimeter defenses and siloed…
- Cloud Security Podcast
How AI Agents Will Negotiate Your Vendor Contracts
Third-Party Risk Management (TPRM) has historically been a tedious, 200-page paper exercise that felt like being catapulted back to 1979. But AI is changing…
- Cloud Security Podcast
How Claude Mythos Changes Vulnerability Management: From CVSS to Exploitability
Is your vulnerability management program ready for something like Claude Mythos? The old days of treating vulnerabilities as temporal events (like Heartbleed…
- Cloud Security Podcast
AISPM Isn't Enough: How to Apply Zero Trust to AI Agents
We are officially entering the "Multi-AI Era." Much like the multi-cloud times, organizations are no longer just using a single AI tool like Microsoft Copilot…
- Cloud Security Podcast
The Rise of Agentic Cloud Security: Code-to-Cloud Shrinks to 3 Days
Is your cloud security strategy ready for the "messy middle" of AI adoption? With developers pushing code from inception to production in under three days…
- Cloud Security Podcast
Why EDR Fails at AI Security & The Rise of Endpoint Behavior Modeling
Is your EDR blinding you to insider threats? In this episode, Ashish is joined by Brandon Dixon (Co-Founder & CTO of Ent AI, and former Microsoft Security…
- Cloud Security Podcast
Solving Prompt Injection & Shadow AI for AI Malware
Are AI agents functioning like adversarial malware inside your network? In this episode of the Cloud Security Podcast, Ashish sits down with Jasson Casey…
- Cloud Security Podcast
Browser Security Explained: Consent Phishing, "Click Fix" Attacks & The Limits of EDR
Is your security team treating your Identity Provider (IDP) like a firewall? In this episode, Adam Bateman (CEO & Co-founder of Push Security) explains why…
- Cloud Security Podcast
Is AI Hallucinations a Myth and the Real Threat from AI
Are attackers really using AI to run end-to-end cyber campaigns? In this episode, Edward Wu (Founder and CEO, DropzoneAI) joins Ashish to separate the hype…
- Cloud Security Podcast
Why AI Infrastructure is Harder to Secure Than Cloud
Is AI security just "Cloud Security 2.0"? Toni De La Fuente, creator of the open-source tool Prowler, joins Ashish to explain why securing AI workloads…
- Cloud Security Podcast
How Attackers Bypass AI Guardrails with Natural Language
In the world of Generative AI, natural language has become the new executable. Attackers no longer need complex code to breach your systems, sometimes, asking…
- Cloud Security Podcast
Vulnerability Management vs. Exposure Management
In this episode, Brad Hibbert (COO & Chief Strategy Officer at Brinqa) joins Ashish to explain why traditional risk-based vulnerability management (RBVM) is no…
- Cloud Security Podcast
Is Developer Friendly AI Security Possible with MCP & Shadow AI
Is "developer-friendly" AI security actually possible? In this episode, Bryan Woolgar-O'Neil (CTO & Co-founder of Harmonic Security) joins Ashish to dismantle…
- Cloud Security Podcast
Why AI Can't Replace Detection Engineers: Build vs. Buy & The Future of SOC
Is the AI SOC a reality, or just vendor hype? In this episode, Antoinette Stevens (Principal Security Engineer at Ramp) joins Ashish to dissect the true state…
- Cloud Security Podcast
AI Vulnerability Management: Why You Can't Patch a Neural Network
Traditional vulnerability management is simple: find the flaw, patch it, and verify the fix. But what happens when the "asset" is a neural network that has…
- Cloud Security Podcast
Why Backups Aren't Enough & Identity Recovery is Key against Ransomware
Think your cloud backups will save you from a ransomware attack? Think again. In this episode, Matt Castriotta (Field CTO at Rubrik) explains why the…
- Cloud Security Podcast
How to secure your AI Agents: A CISOs Journey
Transitioning a mature organization from an API-first model to an AI-first model is no small feat. In this episode, Yash Kosaraju, CISO of Sendbird, shares the…
- Cloud Security Podcast
AI-First Vulnerability Management: Should CISOs Build or Buy?
Thinking of building your own AI security tool? In this episode, Santiago Castiñeira, CTO of Maze, breaks down the realities of the "Build vs. Buy" debate for…
- Cloud Security Podcast
SIEM vs. Data Lake: Why We Ditched Traditional Logging?
In this episode, Cliff Crosland, CEO & co-founder of Scanner.dev, shares his candid journey of trying (and initially failing) to build an in-house security…
- Cloud Security Podcast
How to Build Trust in an AI SOC for Regulated Environments
How do you establish trust in an AI SOC, especially in a regulated environment? Grant Oviatt, Head of SOC at Prophet Security and a former SOC leader at…
- Cloud Security Podcast
Threat Modeling the AI Agent: Architecture, Threats & Monitoring
Are we underestimating how the agentic world is impacting cybersecurity? We spoke to Mohan Kumar, who did production security at Box for a deep dive into the…
- Cloud Security Podcast
AI is already breaking the Silos Between AppSec & CloudSec
The silos between Application Security and Cloud Security are officially breaking down, and AI is the primary catalyst. In this episode, Tejas Dakve, Senior…
- Cloud Security Podcast
AI Agents for SOC: Hype Curve vs. Measurable ROI
Is the AI SOC analyst just hype, or is there measurable ROI? We spoke to Edward Wu, founder of Dropzone AI about this and he shared insights from a recent…
- Cloud Security Podcast
Can You Build an AI SOC with Claude Code? The Reality vs. Hype
Can you just use Claude Code or another LLM to "vibe code" your way into building an AI SOC? In this episode, Ariful Huq, Co-Founder and Head of Product at…
- Cloud Security Podcast
Incident Response of Kubernetes and how to Automate Containment
How do you perform incident response on a Kubernetes cluster when you're not even on the same network? In this episode, Damien Burks, Senior Security engineer…
- Cloud Security Podcast
The Truth About AI in the SOC: From Alert Fatigue to Detection Engineering
"The next five years are gonna be wild." That's the verdict from Forrester Principal Analyst Allie Mellen on the state of Security Operations. This episode…
- Cloud Security Podcast
The Security Gaps in AWS Bedrock & Azure AI You Need to Know
The race to deploy AI is on, but are the cloud platforms we rely on secure by default? This episode features a practical, in-the-weeds discussion with Kyler…
- Cloud Security Podcast
The Evolution of Email Security: From Pre-Breach to Post-Breach Protection
For the last 30 years, email security has been stuck in the past, focusing almost entirely on stopping bad things from getting into the inbox. In this episode…
- Cloud Security Podcast
Using AI to Fix Your Cloud Security Backlog beyond Visibility
You have the visibility, you see the alerts, but your security backlog is still growing faster than your team can fix it. So, are you actually getting more…
- Cloud Security Podcast
Your SecOps Team Can't Save Your Cloud: A New Blueprint for Security.
The conversation around cloud security is maturing beyond simple threat detection. As the industry grapples with alert fatigue, we explore the necessary shift…
- Cloud Security Podcast
New Identity Blueprint for a Future with Cloud & AI
Identity is the root cause of over 70% of all security incidents, yet many organizations still rely on fundamentally flawed authentication methods. In this…
- Cloud Security Podcast
AI for SOC Automation: A Blueprint for the New world of Incident Response
The nature of Security Operations is changing. As cloud environments grow in complexity and data volumes explode, traditional approaches to detection and…
- Cloud Security Podcast
The Truth About Agentic AI in the SOC: Reality vs. Hype
What does the integration of AI into a Security Operations Center (SOC) practically look like? This episode explores the concept of the "Agentic SOC," moving…
- Cloud Security Podcast
Understanding a $10B Fraud Vector in Cloud-Native Workflows
A $10 billion fraud vector is currently exploiting a common feature in many cloud-native applications: the SMS verification flow. This isn't a traditional…
- Cloud Security Podcast
How BT Tackled 180 Years of Legacy to Build a Passwordless Future
How do you modernize security in a 180-year-old company that operates critical national infrastructure? What does it look like when you discover tens or even…
- Cloud Security Podcast
Why Security Can Be Stricter: A Zero Trust Approach to AppSec with AI
Is AI making application security easier or harder? We spoke to Amit Chita, Field CTO at Mend.io, the rise of AI agents in the Software Development Lifecycle…
- Cloud Security Podcast
Guide to Hybrid Cloud & Bare Metal Secret Management
Is your organization struggling with secret management across bare metal, hybrid, and multi-cloud environments? Standard cloud-native tools often fall short…
- Cloud Security Podcast
"Escape-Proof" Cloud: How Block built an Automated Approach to Egress Control
Many organizations focus on keeping attackers out, but what happens when one gets in? We spoke to Ramesh Ramani, Staff Security Engineer at Block about the…
- Cloud Security Podcast
Prioritizing Cloud Security: How to Decide What to Protect First
When you can't protect everything at once, how do you decide what matters most? This episode tackles the core challenge of security prioritization. Geet…
- Cloud Security Podcast
Migrating from “Tick Box" Compliance to Automating GRC in a Multi-Cloud World
In many organizations, security exception management is a manual process, often treated as a simple compliance checkbox. While necessary, this approach can…
- Cloud Security Podcast
Using AI Agents to Solve Cloud Vulnerability Overload
In this episode, Ashish Rajan talks with Harry Wetherald, Co-Founder & CEO of Maze, about the reality of modern vulnerability management. They explore why…
- Cloud Security Podcast
Adapting to New Threats, Copilot Risks & The Future of Data (Feat. Matthew Radolec, Varonis)
AI is reshaping cybersecurity as we know it. From sophisticated AI-driven phishing attacks to the amplified risk of insider threats using tools like Copilot…
- Cloud Security Podcast
Securing AI: Threat Modeling & Detection
Is Artificial Intelligence the ultimate security dragon, we need to slay, or a powerful ally we must train? Recorded LIVE at BSidesSF, this special episode…
- Cloud Security Podcast
CYBERSECURITY for AI: The New Threat Landscape & How Do We Secure It?
As Artificial Intelligence reshapes our world, understanding the new threat landscape and how to secure AI-driven systems is more crucial than ever. We spoke…
- Cloud Security Podcast
Cloud Security Evolved: From CNAPP to AI Threats
The world of cloud security is evolving at breakneck speed. Are traditional tools and strategies enough to combat the sophisticated threats of tomorrow? In…