- wöchentlichErscheinungsrhythmus
- 45 mintypische Länge
- vor 4 Tagenletzte Folge
Learn Cloud Security in Public Cloud and for AI systems, the unbiased way from CyberSecurity Experts solving challenges at Cloud Scale. We are honest because we are not owned by Cloud Service Provider like AWS, Azure or Google Cloud.
We aim to make the community learn Cloud Security through community stories from small - Large organisations solving multi-cloud challenges to diving into specific topics of Cloud Security.
We STREAM interviews on Cloud Security Topics every week on Linkedin, YouTube and Twitter with over 150K people tuning in.
Folgen
Using LLMs for Enterprise Threat Modeling
Creating an application threat model was a resource-intensive process that took weeks or months, resulting in static documents that were abandoned 80% of the time after their initial creation. However, with development speeds accelerating t
Mythos Hype vs. Reality: Why You Need an Agentic Harness
Is the fear surrounding Anthropic’s Mythos model justified? In this episode, Ashish sits down with Johnny Hand (https://www.linkedin.com/in/johnny-hand-mba-74781855/), Global CISO at Trend AI (https://www.trendaisecurity.com/en-gb/) and hos
How Block Solved DNS Vulnerabilities
When companies rapidly migrate to the cloud without strict registrar policies, users often spin up unsanctioned subdomains pointed at third-party services like Vercel or Hugging Face. When those services are spun down but the DNS records re
Why AI Security is Actually a Data Security Problem
When an AI coding agent hallucinates a software package name, attackers can simply create malicious packages with that exact name, tricking the AI into downloading malware directly into your environment. In this episode, Ashish sits down wi
Securing Millions of AI-built Apps: How Lovable Defends Against Insider Threats
Empowering non-technical users to build production-grade applications requires a proactive, secure-by-design architecture. In this episode, Ashish sits down with Marcus Hallberg and Samuel Kelemen, security engineers at the AI software crea
Why AI Won't Replace Your SOC: Federated Data & APEX Framework
Hash values, IP addresses, and domains are virtually useless as primary detection mechanisms in the era of AI-driven polymorphic malware and short-lived phishing kits. If your detection strategy is still stuck at the bottom of the Pyramid o
The "Hunt First" AI Security Strategy
Did you know that 82% of all intrusions don't involve any sort of malware, and AI-augmented attacks are up 89% year over year? If your security operations team is solely focused on reacting to known-bad SIEM alerts, you may be missing the s
Shadow AI & Sandbox Escapes: Why You Need an Agentic Control Plane?
When Claude Cowork hits a roadblock, it doesn't give up, it writes a custom Python script and downloads an untrusted NPM package just to bypass its restrictions and finish its goal. Are your security tools close enough to stop it? In this e
How Adobe Uses AI Agents for building a WAF Pipeline?
When vulnerability disclosures shrink the wild exploit window down to less than 24 hours (or even minutes), traditional manual patching and WAF rule creation simply cannot keep up. In this episode, Ashish sits down with Ammar Alim (https://
Why Runtime Agents Are Replacing Static Posture Checks
The attack window from the discovery of a vulnerability to its exploitation has shrunk to less than 24 hours and sometimes down to just 25 minutes. Is your security team prepared for the speed of AI-driven attacks? In this episode, Ashish s
The Hidden Cost of BlackBox AI: Bridging Cloud and Code Security
Traditional SCA and SAST tools are notorious for drowning security teams in false positives, historically flagging nine out of ten alerts incorrectly. But while generative AI seems like a magic bullet, simply wrapping an out-of-the-box LLM
Who Governs Your AI Agents? Identity, Offboarding & Open Standards
Are overprivileged AI agents the biggest emerging threat in cybersecurity? In a recent high-profile attack, a vibe-coding company had its entire source code stolen because an attacker exploited a long-lived, overprivileged token tied to a t
AI-Powered Forensics: How Attackers Automate Breaches
AI isn't necessarily creating impossible new attacks, but it is drastically lowering the technical barrier to entry for cybercriminals. In this episode, Ashish Rajan speaks with Simon Biggs, Cyber Incident Response Specialist at Varonis, ab
The 4 Pillars of AI SOC:From Threat Hunting to Vibe Hunting
Threat hunting has officially evolved into "vibe hunting". However, if your AI security tools lack the right semantic context, they might be doing more harm than good. In this episode, Ashish sits down with Aqsa Taylor (https://www.linkedin
Native Cloud Firewalls Falling Short in a Multicloud World
As enterprises expand across multiple cloud environments, on-premise data centers, and dynamic AI workloads, traditional perimeter defenses and siloed cloud-native tools are no longer enough to secure the modern network. In this episode, As
How AI Agents Will Negotiate Your Vendor Contracts
Third-Party Risk Management (TPRM) has historically been a tedious, 200-page paper exercise that felt like being catapulted back to 1979. But AI is changing that. In this episode, Ashish sits down with Igor Andriushchenko (CISO at Lovable)
How Claude Mythos Changes Vulnerability Management: From CVSS to Exploitability
Is your vulnerability management program ready for something like Claude Mythos? The old days of treating vulnerabilities as temporal events (like Heartbleed or Log4J) and patching them on a leisurely 30, 60, or 90-day cycle are officially
AISPM Isn't Enough: How to Apply Zero Trust to AI Agents
We are officially entering the "Multi-AI Era." Much like the multi-cloud times, organizations are no longer just using a single AI tool like Microsoft Copilot, they are building custom, agentic workflows using diverse third-party models and
The Rise of Agentic Cloud Security: Code-to-Cloud Shrinks to 3 Days
Is your cloud security strategy ready for the "messy middle" of AI adoption? With developers pushing code from inception to production in under three days using "vibe coding," and adversaries capable of exfiltrating data in just 25 minutes,
Why EDR Fails at AI Security & The Rise of Endpoint Behavior Modeling
Is your EDR blinding you to insider threats? In this episode, Ashish is joined by Brandon Dixon (https://www.linkedin.com/in/brandonsdixon/) (Co-Founder & CTO of Ent AI (https://ent.ai/), and former Microsoft Security Copilot leader) to dis
Solving Prompt Injection & Shadow AI for AI Malware
Are AI agents functioning like adversarial malware inside your network? In this episode of the Cloud Security Podcast, Ashish sits down with Jasson Casey (https://www.linkedin.com/in/jassoncasey/), Co-founder and CEO of Beyond Identity (htt
Browser Security Explained: Consent Phishing, "Click Fix" Attacks & The Limits of EDR
Is your security team treating your Identity Provider (IDP) like a firewall? In this episode, Adam Bateman (https://www.linkedin.com/in/a-bateman/) (CEO & Co-founder of Push Security (https://hubs.li/Q0451zr20)) explains why that's a danger
Is AI Hallucinations a Myth and the Real Threat from AI
Are attackers really using AI to run end-to-end cyber campaigns? In this episode, Edward Wu (https://www.linkedin.com/in/edwardxwu/) (Founder and CEO, DropzoneAI (https://www.dropzone.ai/)) joins Ashish to separate the hype from reality whe
Why AI Infrastructure is Harder to Secure Than Cloud
Is AI security just "Cloud Security 2.0"? Toni De La Fuente (https://www.linkedin.com/in/toniblyx/), creator of the open-source tool Prowler (https://prowler.com/), joins Ashish to explain why securing AI workloads requires a fundamentally
How Attackers Bypass AI Guardrails with Natural Language
In the world of Generative AI, natural language has become the new executable. Attackers no longer need complex code to breach your systems, sometimes, asking for a "poem" is enough to steal your passwords . In this episode, Eduardo Garcia
Vulnerability Management vs. Exposure Management
In this episode, Brad Hibbert (https://www.linkedin.com/in/bradhibbert/)(COO & Chief Strategy Officer at Brinqa (https://www.brinqa.com/)) joins Ashish to explain why traditional risk-based vulnerability management (RBVM) is no longer enoug
Is Developer Friendly AI Security Possible with MCP & Shadow AI
Is "developer-friendly" AI security actually possible? In this episode, Bryan Woolgar-O'Neil (https://www.linkedin.com/in/bwoolgaroneil/) (CTO & Co-founder of Harmonic Security (https://www.harmonic.security/)) joins Ashish to dismantle the
Why AI Can't Replace Detection Engineers: Build vs. Buy & The Future of SOC
Is the AI SOC a reality, or just vendor hype? In this episode, Antoinette Stevens (Principal Security Engineer at Ramp) joins Ashish to dissect the true state of AI in detection engineering. Antoinette shares her experience building detecti
AI Vulnerability Management: Why You Can't Patch a Neural Network
Traditional vulnerability management is simple: find the flaw, patch it, and verify the fix. But what happens when the "asset" is a neural network that has learned something ethically wrong? In this episode, Sapna Paul (https://www.linkedin
Why Backups Aren't Enough & Identity Recovery is Key against Ransomware
Think your cloud backups will save you from a ransomware attack? Think again. In this episode, Matt Castriotta (https://www.linkedin.com/in/mattcastriotta/) (Field CTO at Rubrik (https://www.rubrik.com/)) explains why the traditional "I hav
