Alle afleveringen
365 afleveringen, van nieuw naar oud
-
AWS INCIDENT RESPONSE - Automate Containment
5 juli 2023 · 37 min
Cloud Security Podcast - NIST Incident response framework has 4 steps including one for Containment. AWS Incident Response being API enabled allows for automating a lot of incident response activity especially containment. In this episode with Damien Burks (Damien - Linkedin) spoke about his @fwdcloudsec talk where he shared how he automated Incident Response in AWS environments of Citi. There were lot more gems dropped so def check out the episode. Lees meer
Episode YouTube Video - https://youtu.be/IrLuHMLQs_w
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Damien Burks (Damien - Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
A word from our sponsors - you can visit them on snyk.io/csp
(00:00) Introduction
(00:13) A word from our sponsors - Snyk.io/csp
(01:16) A bit about Damien Burks
(02:24) Incident Response in the cloud context
(03:50) Is incident response different in the cloud?
(05:22) Average time for an incident response
(07:33) AWS services for incident response automation
(08:55) AWS Eventbridge
(11:56) The phases of incident response
(13:42) Containment Phase: Starting point and challenges
(17:54) Organisation with Multiple Accounts
(20:09) How to structure the process
(21:04) Containment for EC2 instance
(23:54) Enjoying this cloud security topic so far?(25:17) Containment for S3 Bucket
(27:57) Where to start with incident response
(30:18) Preparing for Incidents
(32:08) Fun QuestionsSee you at the next episode!
-
Cloud Security Baseline For Scale
1 juli 2023 · 46 min
Cloud Security Podcast - Automating a Security Baseline in Cloud with Olivia Siow (Olivia's Linkedin) and David Levitsky (David's Linkedin). In this episode Olivia and David shared their experience of how they were able to empower developers to always do the right thing through positive reinforcements like making default libraries as part of the AWS Account build to scale security across their organisation. There were lot more gems dropped so def check out the episode. Lees meer
Episode YouTube Video - https://www.youtube.com/watch?v=8kpiDcowl2A
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Olivia Siow (Olivia's Linkedin) and David Levitsky (David's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
A word from our sponsors - you can visit them on snyk.io/csp
(00:00) Introduction
(04:16) A bit about Olivia Siow
(04:31) A bit about David Levitsky
(04:54) Cloud Security Baseline
(06:38) Do all organisations need a cloud security baseline?
(07:16) Does cloud security baseline help with scaling?
(07:34) Success Metrics for establishing cloud security baseline
(10:41) The cultural side of building a baseline
(11:40) Anatomy of AWS Cloud Account at Scale
(12:58) Building Blocks of Cloud Security Baseline
(16:54) Non Technical Challenges
(19:24) Organisation Challenges
(21:41) Would larger organisations have multiple baselines?
(23:34) Baseline for Multicloud or hybridcloud
(26:10) Use case with terraform cloud and route 53
(30:26) What telemetry is important
(32:36) Segregating Logs in a cloud context
(33:58) Can be done with any cloud and tool of choice
(34:43) Baseline vs CNAPP + CSPM
(37:56) Team skill requirement
(39:16) The fun section
(45:13) Where can you connect with Olivia…
-
AWS ReInforce 2023 Recap & Highlights
24 juni 2023 · 55 min
Cloud Security Podcast - AWS ReInforce 2023 or AWS Re:inforce 2023 highlights in a recap from the 2 Day affair for all things AWS Cloud Security! We were lucky enough to be there. This is a recap of the major announcements and highlights from major themes around the event. Lees meer
Episode YouTube Video - https://www.youtube.com/watch?v=UhVBvnmmfnQ
Cloud Security Podcast Website - www.cloudsecuritypodcast.tv
FREE CLOUD Security BOOTCAMP - www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Timeline
(00:00) Introduction
(02:20) What is AWS re:inforce?
(04:33) Neha Rungta explains Verified Access
(05:38) Neha Rungta explains Verified Permissions
(07:53) What verified permissions means for you!
(09:35) Amazon EC2 Connect Endpoint
(11:08) Amazon GuardDuty Updates
(12:42) Amazon Inspector Code Scan for Lambda function
(14:26) Amazon Inspector SBOM Export
(17:35) Amazon Code Whisperer
(18:00) Amazon Code Guru
(20:15) Finding groups in Amazon Detective
(22:25) Dual Layer Encryption for AWS S3
(23:18) AWS Global Partner Security Initiative
(26:12) Key Themes from AWS re:inforce
(26:45) Shared Responsibility Model
(27:56) Cloud Security Newsletter
(30:04) Generative AI
(31:29) Amazon Bedrock
(34:04) Shift from ransomware to wiperware
(35:29) Nancy Wang explains AWS Backup Vault Lock
(37:18) Nancy explains double encryption with S3 Bucket
(38:41) Nancy explains how vault helps with data loss.
(40:20) AWS Backup Vault Lock
(41:55) Zero Trust and Identity
(45:03) DevSecOps
(46:47) How GenAI will impact cloud security roles?
(49:32) Amazon Se…
-
Will Application Security Eat Cloud Security for Lunch!
2 juni 2023 · 27 min
Cloud Security Podcast - Tanya Janca and Caroline Wong were on a panel with @AshishRajan at @RSAConference 2023. The Topic for the panel discussed what's the space of application security with cloud security or is it more they need to be separate camps. Lees meer
Episode YouTube Video - https://www.youtube.com/watch?v=WSIykXAy6Z4
Cloud Security Podcast Website - www.cloudsecuritypodcast.tv
FREE CLOUD Security BOOTCAMP - www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Tanya Janca (@shehackspurple)
Guest Twitter: Caroline Wong (@CarolineWMWong)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
See you at the next episode!
-
AI Security - Can LLM be Attacked?
30 mei 2023 · 14 min
AI Security Podcast - ChatGPT and other Generative AI use Large Language Model (LLM) but can these AI systems be attacked? ☠ 🤔 . In this 3 part AI Security series from Cloud Security Podcast Original episode, we're going to talk about the importance of AI security and how to protect your Language Model aka llm program from attack. How can LLMs be attacked by malicious threat actors - beyond the phishing email that everyone has been talking about. Lees meer
Who is this episode for?
If you work with LLMs used by AI system or working on securing of internal LLM being built; then you would this video helpful in understanding the types of attacks that be used against a LLM.Useful Resources are listed here:
- NIST AI Risk Management Framework - https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf
- Attack Mitre for LLM - Atlas https://atlas.mitre.org/
- OWASP Top 10 LLM - https://owasp.org/www-project-top-10-for-large-language-model-applications/descriptions/
- The AI Attack Surface Map v1.0 - Daniel Miessler, Unsupervised Learning - https://danielmiessler.com/blog/the-ai-attack-surface-map-v1-0/YouTube Link to the Episode - https://youtu.be/Yl9qqt9C5lE
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Episode
(00:00) Intro
(00:49) LLM Explained
(01:40) LLM Application Input Prompts
(03:01) Data used by LLM Applications
(04:58) LLM Applications Themselves
(08:15) Infrastructure use… -
What is DevSecOps? DevSecOps with Cloud & AI explained for 2023
23 mei 2023 · 14 min
Cloud Security Podcast - What is DevSecOps in 2023 especially in a world of Cloud and AI which is top of mind for both application security, developers, cybersecurity professionals. In this episode we will share how the updated definition of DevSecOps in 2023 has been redefined with Cloud and AI, also how does one measure success for DevSecOps. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Episode
(00:00) Intro
(02:01) Did Cloud enable DevSecOps
(03:43) Speed of Security in DevSecOps built on Cloud
(05:05) What is DevSecOps explained for 2023
(05:51) DevSecOps RoadMap
(08:25) DevSecOps Program Components in 2023
(10:55) Chatgpt Joke on Developers and DevSecOps
(11:43) How do you measure DevSecOps success?
(12:21) Generative AI impact on DevSecOps
(14:02) Thank you for watching & Subscribing
See you at the next episode!
-
Evolution of Kubernetes Security | KubeCon EU 2023
14 mei 2023 · 55 min
Cloud Security Podcast - we are continuing with our "Kubernetes Security & KubeCon EU 2023" and for the final episode in this series Kubernetes Security Panel from KubeCon EU 2023. Kubernetes Security has evolved since it's inception with many defaults being more secure and some still insecure or has it not evolved at all. Andrew Martin (Control Plane), Matt Jarvis (Snyk), Kerim Satirli (Hashicorp) were on the Kubernetes Security Panel organized by Cloud Security Podcast. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Andrew Martin (Control Plane), Matt Jarvis (Snyk), Kerim Satirli (Hashicorp)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(04:28) A bit about Kerim, Andy and Matt
(05:13) What is Kubernetes?
(06:49) How do you describe Cloud Native Security?
(10:21) How Kubecon and Kubernetes has changed over the years?
(15:56) The growing presence of security in Kubecon
(22:10) Cloud Security and Cloud Native Security
(23:00) Maintenance of Kubernetes
(24:17) Shared Responsibility Model
(27:37) Single Cluster vs Multi Cluster
(34:34) Failure of Workload Identity
(36:11) Recommendations for learning
(42:06) Disaster Recovery for Kubernetes
(47:51) ChatGPT - Problem, Solution or Fad?
See you at the next episode!
-
A DEV FRIENDLY CLOUD NATIVE SECURITY PIPELINE!
11 mei 2023 · 32 min
Cloud Security Podcast - we are continuing with our "Kubernetes Security & KubeCon EU 2023" and for the fiveth episode in this series Eve Ben Ezra from The New York Times. GitOps, OPA Conftest, ArgoCD are some of the components to add security to a Cloud Native Security Pipeline! - Eve Ben Ezra from The New York Times shared how we can use these tools to create a Dev Friendly Security Pipeline. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Eve Ben Ezra (Eve Ben Ezra's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(03:10) A bit about Eve
(04:05) Eve's 2nd Kubecon
(04:43) About Eve's talk at Kubecon
(05:29) What is GitOps?
(06:28) What is Argo CD?
(07:19) What is OPA?
(07:34) Why NYTimes has a development platform?
(09:14) Challenges with implementing a shared infrastructure
(11:17) Feedback is one of the challenges
(12:19) Using OPA gatekeeper
(13:30) When should developers get feedback in GitOps operational framework?
(14:52) What does local feedback to developers look like?
(15:54) What is Conftest?
(16:24) How do people get started with OPA?
(18:32) Making security more accessible for developers
(23:02) Managed or self hosted Kubernetes deployment
(24:09) How to get started with this?
(25:08) Starting with OPA vs Starting with CICD
(25:35) Where can you start learning about Kubernetes?
(28:10) The difference between CI and CD
See you at the next episode!
-
THEY SCANNED ENTIRE GITHUB FOR SECRETS AND FOUND THIS!
9 mei 2023 · 32 min
Cloud Security Podcast - we are continuing with our "Kubernetes Security & KubeCon EU 2023" and for the fourth episode in this series Mackenzie Jackson from GitGuardian. Mackenzie Jackson from GitGuardian was part of a report that found 10 Million secrets stored across the entire Github space on the internet. In this interview we go into how secrets have evolved from just being username/password to API Tokens, AWS Access Keys and whole lot more. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Shane Lawrence (Shane's Linkedin) and Daniele Santos (Dani's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(03:42) A bit about Mackenzie Jackson
(04:16) What are secrets?
(05:28) How are we dealing with secrets?
(07:35) Mackezie talks about GitGuardian's Secret Sprawl Report
(11:43) Managing history in Github
(12:37) Mackenzie talks about ggcanary
(14:09) Common types of secrets found in scans
(15:42) Responsibility of Github and CSP providers
(17:12) Are people ready to respond to honey token alarms?
(20:33) Breaches causes by leaked secrets
(23:34) Fun facts found in Secrets Sprawl Report
(24:25) Secret sprawl is going to happen
(25:09) Where do people start?
(26:06) Implementing Git Hook as a security measure
(28:08) How to get people to care about secrets
(30:06) Where can people learn about secrets protection?
(31:25) Where you can reach Mackenzie for more questions on secrets?See you at the next episode!
-
Kubernetes Cluster Security Audit Explained
3 mei 2023 · 41 min
Cloud Security Podcast - we are continuing with our "Kubernetes Security & KubeCon EU 2023" and for the fourth episode in this series Shane Lawrence and Daniele Santos from Shopify explained how kube-audit an open source tool from Shopify. They spoke about how they have used the audit tool to improve security with a developer security lens. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Shane Lawrence (Shane's Linkedin) and Daniele Santos (Dani's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(02:52) A bit about Shane
(03:45) A bit about Dani
(04:23) Which kubecons have Shane and Dani attended?
(05:03) A bit about Dani and Shane's talk at Kubecon EU
(06:42) Misconfigurations in Kubernetes
(09:48) Dani talks about the Kubernetes Security Report
(10:13) Use case for Kubernetes Misconfiguration
(11:45) What is Azure Escape?
(12:51) What is container escape?
(15:26) What is kubeaudit?
(15:49) Contributing to kubeaudit
(16:40) The maturity of kubeaudit
(19:04) How would kubeaudit help with an azure escape?
(19:41) The developer experience
(21:34) How shopify uses kubeaudit
(24:59) Getting started with kubeaudit
(25:53) Challenges with implementing kubeaudit
(27:19) Maturity of kubernetes security and kubecon
(30:02) Learning about kubernetes
(34:07) Areas of security not being spoken about enough
(36:16) Open Source and Software supply chain risks
See you at the next episode!
-
Network Security for Kubernetes
16 april 2023 · 40 min
Cloud Security Podcast - This month we are talking about "Kubernetes Security & KubeCon EU 2023" and for the third episode in this series, we spoke to Liz Rice ( Liz's Linkedin). Liz Rice from Isovalent speaks about how Network Security can be done in Kubernetes. Kubernetes network security with eBPF, Cilium can be raised to be better than selinux seccomp tcpdump - yes the linux networking security tools. Yes you read that right. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Andrew Martin (Andrew's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(00:15) A word from our sponsor snyk.io/csp
(03:36) A bit about Liz Rice
(04:36) Liz's path into Cloud Native
(06:22) What is EBPF?
(08:12) Use case for EBPF in on premise
(10:37) SC Linux and EBPF
(11:28) Why we are solving this now with Kubernetes?
(13:22) EBPF in managed vs unmanaged Kubernetes?
(15:37) Implementation of EBPF
(17:38) Access Management and Network Security
(21:02) Challenges with multi cluster Kubernetes deployment
(24:03) Key management in multi cluster
(25:11) Current gaps in Kubernetes security
(27:41) Developer first in the cloud native space
(32:47) The future of EBPF
(34:36) Where can you learn more about EBPF
(36:25) The fun questions
See you at the next episode!
-
CONTINUOUS KUBERNETES SECURITY IN 2023
14 april 2023 · 58 min
Cloud Security Podcast - This month we are talking about "Kubernetes Security & KubeCon EU 2023" and for the second episode in this series, we spoke to Andrew Martin (Andrew's Linkedin). Kubernetes Security Best practices built using the OWASP Top 10 for Kubernetes is not enough to deal with new and unknown attack vectors for your Kubernetes deployment. In this episode we have Andrew Martin on how you can deal with Kubernetes attack vectors including supply chain issues. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Andrew Martin (Andrew's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(00:15) A word from our sponsors - head over to snyk.io/csp to find out more
(02:50) A bit about Andrew Martin
(03:33) What is cloud native security?
(06:31) What is Kubernetes Security?
(10:23) Kubernetes Security vs Cloud Native Security
(11:52) Why is Kubernetes so popular?
(16:20) What are the components of Kubernetes security?
(21:43) Container security in Kubernetes landscape
(26:34) Common attack vectors for Kubernetes
(32:16) Impact of cloud in attack vectors
(35:38) Managed Kubernetes
(38:13) Rationale for using multi cluster
(41:11) Should everyone use Kubernetes?
(44:18) Is Serverless still relevant ?
(47:38) Where can people learn about Kubernetes security?
(53:01) The fun questions
See you at the next episode!
-
2023 What Kubernetes Security Looks Like Today Series- DevSecOps
13 april 2023 · 48 min
Cloud Security Podcast - This month we are talking about "Kubernetes Security & KubeCon EU 2023" and for the first episode in this series, we spoke to Kirsten Newcomer (Kirsten's Linkedin). Kirsten Newcomer from Red Hat has been championing Kubernetes security and the role DevSecOps will play in helping improve security for Kubernetes implementations. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Kirsten Newcomer (Kirsten's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(02:42) Word from our sponsors about Snyk Launch - find out more at snyk.io/events/snyklaunch
(03:08) A bit about Kristen Newcomer
(04:13) How has Kubernetes security evolved ?
(06:57) Is Kubernetes still popular?
(07:45) Why is Kubernetes still popular?
(0:58) Challenges with security Kubernetes
(15:35) How to work effectively with Kubernetes
(18:50) Adoption of IaC for security
(24:30) Maturity of Kubernetes Security
(29:24) Challenges with auditing Kubernetes
(31:55) How to approach Kubernetes security?
(35:08) Zero Trust and Kubernetes
(39:01) Is SBOM bringing more attention to Kubernetes?
(42:51) Where do people start with Kubernetes?
(45:41) Managed vs unmanaged Kubernetes?
(47:05) How you can reach out to Kristen!
See you at the next episode!
-
IS THERE DEVSECOPS IN CLOUD? 🤔
28 maart 2023 · 51 min
Cloud Security Podcast - This month we are talking about "Cloud Security - the Leadership View" and for the final episode in this series, we spoke to Guy Podjarny ( GuyPo's Linkedin). If you are working on building or securing Cloud resources, can you truly imagine solving the next log4j or AWS/Azure/GCP vulnerability without including the help of Platform Engineers or IT engineers? This is the bigger picture of what we CyberSecurity people have to do day in day out. We work with wider team members Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Guy Podjarny ( GuyPo's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
A word from our sponsors - you can visit them on snyk.io/csp
(00:00) Introduction
(03:49) A bit about Guy Podjarny
(04:51) What is DevSecOps today?
(07:15) 3 Phases of DevSecOps
(07:44) DevSecOps vs ShiftLeft
(09:15) The maturity of DevSecOps
(11:52) The notion of start left
(13:36) Threat modelling and developers
(14:38) What is Cloud Security?
(16:03) The notion of App Cloud
(17:43) Gartner acronyms and cloud security
(22:21) Security champion program in cloud
(28:33) Future of IaaS, PaaS and SaaS
(32:22) Challenges with Security Championship Program
(42:19) Generative AI and DevSecOps in Cloud
(47:45) Fun Questions
See you at the next episode!
-
How to Build a Modern Cyber Security Program in 2023
11 maart 2023 · 59 min
Cloud Security Podcast - This month we are talking about "Cloud Security - the Leadership View" and this week in this series, we spoke to Larry Whiteside Jr ( Larry's Linkedin ) If you are working on building a CyberSecurity Program in 2023 with Cloud in mind then this episode with Larry who shared his approach to building a CyberSecurity program along with war stories of implementing CyberSecurity in an on-premise world is the episode you need to hear. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
FREE CLOUD BOOTCAMPs on www.cloudsecuritybootcamp.com
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Larry Whiteside Jr ( Larry's Linkedin )
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(02:50) A word from our sponsors - you can visit them on snyk.io/csp
(04:05) Larry talks about his 1st CISO role
(06:01) Cybersecurity Programs in a Pre Cloud World
(09:07) What were the challenges for CISOs in the past?
(11:05) Cybersecurity Program in 2023
(14:01) There was no NIST CFA
(14:59) Why frameworks are important
(16:59) What is a cybersecurity program?
(21:32) Components of cybersecurity program
(23:02) Has cloud changed things?
(30:01) The value of certifications
(33:14) GRC Automation and Shift Left
(42:53) The auditor's perspective
(44:50) Does GRC need to know coding?
(49:07) Cloud Security Program Playbook
(52:52) The Fun Section
See you at the next episode!
-
HOW TO BUILD A CLOUD SECURITY PROGRAM - MEDIA INDUSTRY
4 maart 2023 · 35 min
Cloud Security Podcast - This month we are talking about "Cloud Security - the Leadership View" and first up on this series, we spoke to Bianca Lankford (Bianca's Linkedin) about what does it take to build a Cloud Security program that runs behind your favourite TV Show on an OTT Media Platform like Warner Brother Discovery Cloud . In this episode Bianca Lankford, from Warner Brother Discovery, share her experience on building Cloud Security Program and the importance of developers in the solving the Cloud Security challenge. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Bianca Lankford (Bianca's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(03:06) snyk.io/csp
(03:45) A bit about Bianca
(04:27) Challenge of Scale in Media Industry
(06:38) Cloud based security program vs on prem
(08:04) How cloud security can enable businesses
(11:11) Cloud Security Program in Media Industry
(13:45) Getting leadership buy in for cloud security program
(17:05) Explaining cloud security as a business risk
(18:33) Pillars of cloud security program at scale
(20:12) Multi Cloud Security Program
(20:52) Skills required for multi cloud security team
(22:25) The future of application security and cloud security
(24:01) Metrics of operationalising cloud security program at scale
(25:32) Time to detection in Cloud
(26:32) Navigating cloud security program through changing compute
(28:09) Security guardrails vs security gate
(30:53) Stages for a cloud security program
(32:35) The Fun Section
See you at the next episode!
-
How to Accelerate your AWS Security Maturity in 2023
25 februari 2023 · 57 min
Cloud Security Podcast - This month we are talking about "Building on the AWS Cloud" and next up on this series, we spoke to Chad Lorenc (Chad's Linkedin) about AWS Security Reference Architecture, Cloud Adoption Framework & Security Maturity Model are 3 ways to level up the maturity you have in Cloud . In this episode Chad Lorenc, from AWS shared lessons and talk about How AWS Customers can prepare to use 3 models to Crawl, Walk & Run their security practice. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Chad Lorenc (Chad's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(03:35) A word from our sponsors - check them out at snyk.io/csp
(03:51) A bit about Chad
(05:38) How things are different in the Cloud
(07:59) The Maturity framework of AWS
(11:20) How maturity scales in AWS
(13:17) Anti-Patterns when building maturity in Cloud
(15:35) Framework examples on how to build maturity models
(19:27) Mapping maturity models to business objectives
(20:19) The role of cloud native tools
(26:23) Patterns in AWS to watch out for
(28:38) Challenges for security leaders trying to get into cloud
(35:07) Foundational pieces for building maturity in AWS
(37:50) How to implement AWS Control tower?
(43:09) Give developers more freedom in cloud
(47:34) Benchmark scales for security maturity
(51:27) Resources to help you build your own maturity roadmap
See you at the next episode!
-
How to Build AWS Multi-Account Infrastructure with Security and Speed
21 februari 2023 · 55 min
Cloud Security Podcast - This month we are talking about "Building on the AWS Cloud" and next up on this series, we spoke to Patrick Sanders (Patrick's Linkedin) & Jospeh Kjar (Joseph's Linkedin), Snr Cloud Security Engineer at Netflix on what does it take to reimagine multi-account deployments gave them both security and speed. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Patrick Sanders (Patrick's Linkedin) & Jospeh Kjar (Joseph's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(03:06) snyk.io/csp
(03:41) A bit about how Patrick and Joseph got into the Cloud Space
(06:00) Building blocks of scalable AWS infrastructure
(09:14) Should there be a seperate account for forensics
(12:44) Diff AWS Org for dev and prod?
(13:45) How to ensure dedicated IR account is secure?
(15:10) 1st step to building a new startup in AWS
(17:39) Should non prod and prod accounts be seperate?
(21:29) How do you ensure visibility into your AWS organisation?
(25:04) Integrate FIM into AWS
(26:29) Layers for a multi account strategy
(28:23) Challenges from going from one account to multi account
(34:03) Bringing identity to the application
(38:25) The importance of IMDS
(42:07) The security benefit of using IMDS
(45:34) Managed identity in AWS
(46:40) Why developer experience is important?
(49:49) What do cloud security engineers do ?
(53:05) Where you can find Joseph and Patrick?
See you at the next episode!
-
HOW TO GET FEDRAMP CERTIFIED IN AWS CLOUD
14 februari 2023 · 58 min
Cloud Security Podcast - This month we are talking about "Building on the AWS Cloud" and next up on this series, we spoke to Alexis Robinson (Alexis's Linkeidn), Senior Manager, Regulatory Compliance at AWS. FEDRAMP AWS environment can be made easy with the right security assessment framework for your organization. Alexis shared lessons and talk about How AWS Customers can prepare to increase their chances of getting FedRamp certified. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Alexis Robinson (Alexis's Linkeidn)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(05:35) A bit about Alexis
(08:20) What is FedRAMP and why people care about it?
(11:05) Scope of companies included in FedRAMP?
(13:12) Zero Trust Architecture and FedRAMP
(14:07) The concept of Controlled Inheritance
(15:43) Working with Authorising Officials
(16:44) Working with Security Control Officers
(17:46) AO Checklist to full compliance
(20:42) Conflicts in FedRAMP
(25:59) Common pitfalls to avoid on FedRAMP Journey
(31:38) The anti-patterns in getting FedRAMP Compliant
(35:34) FedRAMP is not just GovCloud
(38:12) Requirements with FedRAMP
(39:48) Where do people fall short with FedRAMP?
(41:26) How to make FedRAMP more developer friendly?
(44:17) How is FedRAMP different for Govcloud?
(47:21) What skillsets do you require in a team for FedRAMP?
(49:07) How to learn about FedRAMP
(53:09) Fun Questions
See you at the next episode!
-
HOW TO BUILD A CLOUD SECURITY PROGRAM WITH CONTAINERS
5 februari 2023 · 45 min
Cloud Security Podcast - This month we are talking about "Building on the AWS Cloud" and next up on this series, we spoke to Mrunal Shah (Mrunal's Linkedin), Head of Container Security at Warner Bros. Discovery. We talk about how to build a Container or K8s security program while best practices are maintained and team have the right capability and tools. 4 Cs - Cloud, Container & Cluster, Code can be foundational to this Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Mrunal Shah (Mrunal's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Intro
(02:01) https://snyk.io/csp
(02:30) Mrunal's Professional Background
(03:04) Why containers are popular (technical reasons)
(04:05) Why containers are popular (leadership reasons)
(05:39) Challenges with running a Container Security Program (Leadership)
(06:34) Team skill challenge in a Container Security Program
(08:57) When to pick AWS ECS vs AWS EKS?
(10:53) ECS or EKS for building Banking Applications?
(13:12) Would Kubernetes/ Containers be preferred for security reasons?
(15:04) What would Amazon's responsibility be for security with ECS/EKS?
(16:13) What is bad about working with Containers in AWS?
(19:40) Is there a need for anti-virus in a container world?
(20:36) Balance of security when working with containers?
(22:08) Threat Detection and Prevention in a Container Security Program
(22:57) Using AWS Services for Threat Detection with Containers?
(25:14) Runtime Threat Discovery vs Agentless Threat Discovery for containers in Cloud?
(29:11) Prevention on the left vs Detection on the right of SDLC
(29:22) Cluster Misconfig vs Service Misconfigurations?
(3…
-
AWS Cloud Penetration Testing Explained with Example
30 januari 2023 · 53 min
Cloud Security Podcast - This month we are talking about "Breaking the AWS Cloud" and next up on this series, we spoke to Seth Art (Seth's Linkedin) Cloud Penetration Testing Lead (Principal) at Bishop Fox. AWS cloud project to pentest AWS cloud architecture are not spoken about much - this stops today. We have Seth who works in the Cloud Penetration testing space to talk about open source tools and what Cloud pentesting is all about. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Seth Art (Seth's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(04:24) A bit about Seth
(06:10) Web App Pentesting vs Cloud Pentesting
(08:11) Working with scale of multiple AWS accounts
(10:20) What can you expect to find with Cloud Pentesting?
(12:14) Foundational pieces about approaching pentesting in Cloud
(15:19) How to start a Cloud Pentest?
(18:25) The importance of IAM
(23:43) Common services in AWS to look at
(25:58) Mistakes people make for scoping
(29:18) The role of shared responsibility in Cloud Pentesting
(32:38) Boundaries for AWS pentesting
(35:13) Nmap between 2 EC2 instances
(36:37) How do you explain the findings?
(40:26) Skillsets required to transition to Cloud Pentesting
(45:41) Transitioning from Kubernetes to Cloud Pentesting
(48:55) Resources for learning about Cloud Pentesting.
(49:47) The Fun Section
See you at the next episode!
-
AWS Goat - Cloud Penetration Testing
24 januari 2023 · 54 min
Cloud Security Podcast - This month we are talking about "Breaking the AWS Cloud" and next up on this series, we spoke to Nishant Sharma (Nishant's Linkedin), Director, Lab Platform, INE. If you have tried pentesting in AWS Cloud or want to start today with AWS Goat, then this episode with Nishant, behind AWS Goat will help you understand how you can upskill and maybe even show others how to be better at pentesting AWS Cloud. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Nishant Sharma (Nishant's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(03:51) snyk.io/csp
(04:51) What is Cloud Pentesting?
(06:19) Cloud pentesting vs Web App & Network
(08:37) What is AWS Goat?
(13:12) Do you need permission from AWS to do pentesting?
(14:03) Pentesting an application vs pentesting AWS S3
(15:40) What is AWS Goat testing?
(18:14) Cloud penetration testing tools
(19:59) How useful is a metadata of a cloud instance?
(22:24) AWS Pentesting and OWASP Top 10
(25:31) How to build internal training for Cloud Security?
(29:43) Keep building knowledge on AWS Goat
(30:33) Using CloudShell for AWS pentesting
(34:09) ChatGPT for cloud pentesting
(36:28) Vulnerable serverless application
(39:40) Pentesting Amazon ECS
(43:01) How do you protect against ECS misconfigurations?
(47:38) What is the future plan for AWS Goat?
(50:28) Fun Questions
See you at the next episode!
-
Getting Started with Hacking AWS ECS
12 januari 2023 · 33 min
Cloud Security Podcast - This month we are talking about "Breaking the AWS Cloud" and next up on this series, we spoke to Gafnit Amiga (Gafnit's Linkedin), VP of Security Research at Lightspin who recently discovered the AWS Elastic Container Registry Public (ECR Public) vulnerability. She spoke to us about how she goes about doing cloud security research and what AWS ECS and ECR is. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Gafnit Amiga (Gafnit's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(02:28) snyk.io/csp
(02:57) A bit about Gafnit
(05:15) What is AWS ECS and ECR?
(08:18) Why do people use ECS and ECR?
(09:58) The ECR vulnerability Gafnit discovered
(15:16) Vulnerability scanning for containers in AWS ECR
(16:42) How do you find undocumented APIs in AWS?
(17:58) Attack techniques in AWS
(22:43) How to protect your AWS accounts?
(25:14) Focus areas for Cloud Security Research in 2023
(25:48) Finding vulnerability through research
(29:00) Resources for Cloud Security Research
(31:04) The Fun Section
See you at the next episode!
-
GETTING STARTED WITH HACKING AWS CLOUD
8 januari 2023 · 46 min
Cloud Security Podcast - If Hacking the Cloud is on your mind for 2023 then in this "Breaking the AWS Cloud" month we are kicking things with Nick Frichette (Nick's Linkedin), a Senior Security Researcher from DataDog who is also maintains the site Hacking the Cloud linking offensive security research for AWS, Azure, GCP. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Nick Frichette (Nick's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Introduction
(02:38) snyk.io/csp
(03:26) A bit about Nick
(04:15) How is Security research different?
(05:55) How to approach cloud security research?
(07:24) How to pick the service you want to research?
(08:51) What is AWS AppSync?
(09:30) What is Confused Deputy Vulnerability?
(10:16) The AppSync Vulnerability
(12:09) Cross Account in AWS
(13:41) Blue Teaming Controls when doing research
(14:22) Framework for detective controls
(16:01) What to do if you find an AWS vulnerability?
(17:20) Legal constraints of security research
(20:13) Where to get started in Cloud Security Research?
(22:45) Are some misconfigurations becoming less common?
(24:59) What is IMDSv2 and how is it different to IMDSv1?
(27:00) Why is SSRF bad?
(28:52) Cloud Pentesting Platforms
(29:57) The story being hacking the cloud
(31:25) Who should think about breaking the cloud?
(34:02) Cloud Security Research Tools
(36:38) How to access AWS environment for research?
(39:12) Security Lab Resources
(40:04) The Fun Questions
See you at the next episode!
-
AWS Reinvent 2022 - RECAP for Cloud Security Professionals!
14 december 2022 · 43 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Shilpi Bhattacharjee (Cloud Security Podcast, Producer). We spoke about Announcements from AWS Reinvent for - new security products announced, updates to existing security products, security addition to existing products and products to lookout for. Lees meer
Podcast Link with favourite Talks, Product launch details and more: https://snyk.io/blog/cloud-security-updates-reinvent-2022/
--Announcing Cloud Security Villains Project--
We are always looking to find creative ways to educate folks in Cloud Security and the Cloud Security Villains is part of this education pieces. Cloud Security Villains are coming, you can learn how to defeat them in this YouTube Playlist link
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Shilpi Bhattacharjee (Cloud Security Podcast, Producer)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
-
AWS EKS EXPLAINED!
10 december 2022 · 58 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Justin Garrison (Personal Website) from AWS to talk about what scenarios make sense to choose AWS EKS vs AWS ECS vs AWS Fargate vs bare metal Kubernetes & everything you need to understand for implementing AWS EKS in your environment. Lees meer
--Announcing Cloud Security Villains Project--
We are always looking to find creative ways to educate folks in Cloud Security and the Cloud Security Villains is part of this education pieces. Cloud Security Villains are coming, you can learn how to defeat them in this YouTube Playlist link
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Justin Garrison (Personal Website)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00 introduction
(02:31 snyk.io/csp
(03:10 Justin's path into Tech
(08:14) What is AWS EKS?
(10:32) EKS vs ECS vs Fargate
(14:52) Why pick EKS vs ECS vs Fargate?
(23:05) Security Kubernetes API vs on-prem deployment?
(34:26) What's involved in deploying EKS?
(38:50) EKS clusters when scaling Kubernetes
(42:52) How clusters are structured?
(47:02) Cluster availability when upgrading
(49:00) Why people struggle with EKS?
(51:31) How can people learn more about EKS?
(52:57) The Fun Section
-
Story of a Cloud Architect & Blurry Lines of Control with AWS
25 november 2022 · 54 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Ashish Desai (Ashish Desai's Linkedin) about how much of the on-premise can work in Cloud, what the online world is saying versus the reality of what businesses are experiencing. Lees meer
--Announcing Cloud Security Villains Project--
We are always looking to find creative ways to educate folks in Cloud Security and the Cloud Security Villains is part of this education pieces. Cloud Security Villains are coming, you can learn how to defeat them in this YouTube Playlist link
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Ashish Desai (@ashishlogmaster)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Intro
(05:50) Ashish Desai's Professional Background
(06:21) Academic Freedom and no firewall
(07:12) What are the roles and responsibilities of an AWS cloud security architect?
(09:27) Difference between managing permissions between onpremise vs Cloud service provider
(13:02) Running Windows 2003 on AWS EC2 Bare Metal
(13:28) Running Old Virtual Servers on AWS
(14:13) Cloud is secure by default
(14:54) CI/CD with Github and Terraform is not common
(15:28) Do people use CI/CD?
(15:37) Traditional on-premise staff is your new cloud engineer
(16:50) Business are not fully advanced
(17:47) Failed Kubernetes Deployment in production example
(18:45) Managed and Bare Metal Kubernetes can only maintain 1 replica
(19:10) What is 1 replica in Kubernetes?
(20:36) Problem with stateful app running on Kubernetes
(21:35) Change Management in Cloud
(21:57) Deployment phases in Cloud
(22:34) Why was ServiceNow required?
(24:39) Why ServiceNow couldn't keep up?
(26:3…
-
BECOME A CLOUD SECURITY ARCHITECT IN 2023
13 november 2022 · 54 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Kat Traxler (Kat's Linkedin) about the skillset, certification and knowledge base required to become a cloud security architect in 2023. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Kat Traxler (Kat's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Ashish's Intro to the Episode
(02:28) https://snyk.io/csp
(02:46) A bit about Kat
(05:35) What does a security architect do?
(06:46 )The difference in the Cloud Security Architect role
(11:08) The building blocks of building an application in AWS
(13:41) Are there DMZs in Cloud Architecture?
(15:54) Cybercriminal and Cloud exploitation
(19:04) How to keep with rapid changes in cloud?
(20:08) AWS pre:invent update
(21:39) Why is IAM important in Cloud?
(25:03) Do cloud security architects need to know coding and automation?
(27:38) How important are certifications?
(31:49) Getting in cloud security with no experience
(33:41) What are important skills for architect?
(35:33) SANS certifications for Cloud Security Architects
(37:04) How important is ist to have multi cloud knowledge
(40:44) Frameworks to build cloud architecture
(42:59) Do you need to know software development?
(44:19) Roadmap to become a cloud security architect
(45:32) What is the most difficult thing related to architecture?
(49:32) The Fun Section
-
AWS Threat Detection for NOT SO COMMON AWS Services Explained
10 november 2022 · 47 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Rodrigo Montoro (Rodrigo's linkedin) about threat modelling and incident response involving the uncommon AWS services which still may be widely used in your organisation and increase your attack surface. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Rodrigo Montoro (Rodrigo's linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Ashish's Intro to the Episode
(02:10) https://snyk.io/csp
(03:19) A bit about Rodrigo
(04:37) Detection in On-Premise
(06:51) The role of API in Cloud
(08:06) Common Services in AWS
(15:22) Managing unused services
(17:38) Incident response for AWS Appstream ?
(20:57) integration of services with Cloudtrail
(27:14) AWS Pass role
(31:38) Incident Response for services
(34:00) Pre-signed URL
(36:23) How to get started in AWS threat detection?
(39:10) Where can people learn more about this?
(41:37) How to do AWS threat detection at Scale?
(43:30) The Fun Section
-
Ransomware attacks in AWS
6 november 2022 · 38 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Nandesh Guru (Nandesh's Linkedin) about ransomware and supply chain attack mechanisms in AWS and how the world of CSPM have evolved to address the increasing complexities of cloud security Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Nandesh Guru (Nandesh's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Ashish's Intro to the Episode
(02:09) https://snyk.io/csp
(03:11 )A bit about Nandesh
(05:01) 4 Components of Supply Chain Risks
(06:47)Example of AWS Supply Chain Attack
(10:08) Evaluating code scanning tools
(12:30) What is ransomware?
(13:06) Ransomware in AWS
(14:55) Attacks on encryption in AWS
(19:27) What is a CSPM?
(20:46) The role of CSPM and CNAPP in supply chain attacks
(22:56) Is CIS Benchmark still a good starting point?
(26:38) The evolution of CSPMs
(29:47) Complexity of Cloud Security
(32:59)Where can you learn more about supply chain risks?
(33:50) Fun Questions
-
How to become a Cloud Native Security Architect?
30 oktober 2022 · 51 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Christophe Parisel (Christophe's Linkedin) about what how to transition from being a technical architect on premise to a cloud security architect and then a cloud native security architect. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Christophe Parisel (Christophe's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Ashish's Intro to the Episode
(02:21) https://snyk.io/csp
(03:18) A little bit about Christophe
(05:08) What is Cloud Native?
(07:27) Why Cloud Native is important?
(09:34) Responsibilities of Cloud Native Architect
(13:15) Solution Architect vs Cloud Native Architect
(15:32) Culture to move into Cloud Native Environment
(18:09) Designing an application in Cloud
(21:41) Designing an application using Kubernetes Cluster
(24:39) Learning Kubernetes as an Architect
(28:09) Common services people should standardise
(31:50) Frameworks for Kubernetes Architecture
(34:06) Logging with Kubernetes at Scale
(38:24) Challenge with transitioning to Cloud Native Security Architect
(39:43)Should we trust the cloud?
(43:37) Bottlerocket in Kubernetes
(46:00) Certifications for Cloud Native Security Architect
-
Compliance as Code in Kubernetes
24 oktober 2022 · 47 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Jim Bugwadia (Jim's Twitter) about policy management and compliance as code for Kubernetes and how you can use open source tools like Kyverno and OPA for policy management Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Jim Bugwadia (Jim's Twitter)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Ashish's Intro to the Episode
(03:20) https://snyk.io/csp
(05:23) What is Kubernetes Control Plane?
(06:51) What is an admission controller?
(08:01) What do you need policy management in Kubernetes?
(10:13) Pod Security and Policy management
(11:57) Policy Management in Managed Kubernetes
(13:54) Scaling Policy Management for Kubernetes
(19:34) Common use cases for policy management
(25:30) Compliance in Kubernetes
(32:04) Levels of Maturity in Kubernetes Policy Management
(36:47) Future of policy as code
(38:46) Kyverno vs OPA
(43:39) Kyverno vs gatekeeper
(45:15) Where to start with policy management?
(46:11) Where you can find Jim
-
Software Signing for Kubernetes Supply Chain & Everybody Else
16 oktober 2022 · 50 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Luke Hinds (Luke's Twitter) the open source Sigstore project and how it is helping with software signing and protecting the software supply chain Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Luke Hinds (Luke's Twitter)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Ashish's Intro to the Episode
(01:39) https://snyk.io/csp
(05:21) What is the software supply chain and why is it important?
(08:20) Common supply chain attacks in Kubernetes
(09:53) Codecov attack
(11:14 )Kubernetes and API
(14:10) Vulnerability scanning tools
(16:38) Explaining the importance of supply chain security
(19:19) What is a signing service
(19:56 )The SLSA framework
(20:42) Importance of signing service
(23:35) What is Sigstore?
(27:57) What is Lets Encrypt
(31:48) The aim of sigstore
(34:39) What is Co-Sign
(36:40) Co-Signing and non-repudiation
(46:29) Where to start
-
KUBERNETES BEST PRACTICES 2022
10 oktober 2022 · 51 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Jimmy Mesta (Jimmy's Twitter) about OWASP Kubernetes Top 10 and best practices for securing Kubernetes Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Jimmy Mesta (Jimmy's Twitter)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Ashish's Intro to the Episode
(01:39) https://snyk.io/csp
(03:55) What is Kubernetes?
(05:15 )Kubernetes vs Containers
(06:38) Kubernetes and Docker
(09:08) Unmanaged Kubernetes
(11:14) Managed Kubernetes
(13:39) Security for Kubernetes Clusters
(15:42) OWASP top 10 Web Application
(17:59) Starting to build Kubernetes Cluster or Pod
(23:09) Security Misconfigurations in Kubernetes
(28:42) Supply Chain Vulnerabilities in Kubernetes
(32:06) RBAC and Policy Enforcement
(33:32) Logging and Monitoring in Kubernetes
(34:30) Broken Authentication
(35:17) Missing network segment approach
(36:07) Secrets Management Failure
(37:09) Misconfigured Cluster Components
(38:15) Outdated and vulnerable kubernetes component
(42:37) Asset Inventory for Kubernetes Cluster
(44:53) Threat Modelling in Kubernetes
(46:20)Cert management in Kubernetes
(48:02) Learn more about securing Kubernetes
-
Building Blocks of a Modern Cloud Security Program
29 september 2022 · 39 min
Modern Cloud Security Programs hire for builders who can develop tools that help developers walk down a Paved road where security is not a blocker but at the same time prevents developers from making security mistakes. In this episode we spoke with Travis McPeak who shared his experience from his time at Netflix to talk about Modern Cloud Security Teams look like and work on day to day at scale for a large development team and how others can take some insights from this for their own Cloud Security Programs. Lees meer
This episode is better on video - YouTube Link
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Travis McPeak
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
THIS IS MY Cloud SECURITY ARCHITECTURE - Azure Security Best Practices - Part 2
26 september 2022 · 1 uur 4 min
Azure Cloud Security Architecture (Day 0) ,Custom Azure Role definitions, Azure Privilege Access Management etc can be complex to build. Continuing from part 1 In the part 2 of our This is My Cloud Security Architecture Series Episode we have Sai, a Cloud Security Architect walking us through how to start with an Azure Security Architecture on Day 0 of your Cloud Security Architect role. Part -2 of the episode will go into Day 1+ of managing and scaling what we have created in Day 0. Lees meer
This episode is better on video - YouTube Link - Part 2
Part 1 of the This is My Cloud Security Architecture Series is here - YouTube Link - Part 1
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Sai Gunaranjan (Sai's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
SecDataOps Explained - Modern Security Stack
16 september 2022 · 47 min
Data Lakes as an asset to collect and build threat actors or hiring for Data Scientists/Analyst are not typical things in Cloud Security well unless the organisation is dealing with PetaBytes of data. At a large scale company these are data problem not a security problem at that point even if the problem is in security team. In this episode with Jonathan Rau, CISO of Lightspin we spoke about his previous experience of creating and growing a SecDataOps team with Cloud Security and Ops in IHSMarkit. We spoke about what is this SecDataOps, What is Security Data Lake and if Cloud Native tools are enough for these problems. Lees meer
This episode is better on video - YouTube Link
Cloud Security Meetup Amsterdam - Tech Fashion Theme - Sep,2022
Cloud Security Meetup NewYork - Tech Fashion Theme - Sep,2022
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Linkedin: Jonathan Rau
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
THIS IS MY Cloud SECURITY ARCHITECTURE - Azure Security Best Practices - Part 1
12 september 2022 · 56 min
Azure Cloud Security Architecture, Azure Policies can be complex to build. In the part 1 of our This is My Cloud Security Architecture Series Episode we have Sai, a Cloud Security Architect walking us through how to start with an Azure Security Architecture on Day 0 of your Cloud Security Architect role. Part -2 of the episode will go into Day 1+ of managing and scaling what we have created in Day 0. Lees meer
This episode is better on video - YouTube Link
Cloud Security Meetup NYC - Cloud Security Meetup NewYork - Tech Fashion Theme
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Sai Gunaranjan (Sai's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
Cloud Security Monitoring in a Modern Security Stack
8 september 2022 · 37 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Jack Naglieri (Jack's Twitter) about what Security Monitoring can look like for a Cloud Native Company Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Jack Naglieri (Jack's Twitter)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Ashish's Intro to the Episode
(02:40) https://snyk.io/csp
(02:51) Corey's professional background
(03:34) Jack's introduction
(06:15 )What is Cloud Native?
(07:41) What is a modern security stack?
(09:50) Why Cloud Native Security Monitoring?
(12:36) The current market for security monitoring
(15:45) Cloud Native monitoring for on-prem
(18:10) How to start with Cloud Native Security Monitoring?
(21:01) Security monitoring in cloud vs traditional
(22:51) Challenges with Cloud Native Security Monitoring
(25:25) How can SMBs tackle Cloud Native Security Monitoring?
(26:52) Are cloud native tools more cost effective than traditional ones?
(28:30) Heterogeneous log correlation
(30:09) What is a security data lake?
(35:25) Does the modern security team need data skills?
-
API SECURITY BEST PRACTICES 2022
5 september 2022 · 40 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Corey Ball (Corey's Twitter) about what does API in a modern software stack looks like and how these can be attacked and protected Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Corey Ball (Corey's Twitter)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Ashish's Intro to the Episode
(02:40) https://snyk.io/csp
(02:51) Corey's professional background
(03:11) Corey's journey to be cybersecurity author
(04:36) What is API and why its important in 2022?
(06:44) Is API is the backend or frontend pf applications?
(08:36) What are people doing wrong with APIs?
(12:16) Best Practice for API Security?
(13:20) Most surprising things being seen in API Security?
(14:35) How do you find API keys?
(16:07) API gateway as a security control point
(18:25) OWASP Top 10 API Security
(20:00) Monitoring and detecting for API Security
(20:57) How to approach pentesting APIs?
(22:35) Learn about API hacking
(25:22) API Security in the Cloud
(29:05) Rest API vs GraphQL
(34:27) Pentest by consuming application documentation
(36:10) Which APIs should be public?
-
BlackHat Defcon 2022 - The Cloud Security Edition
28 augustus 2022 · 1 uur 3 min
Special Episode by Shilpi and Ashish sharing their recap, highlights, big takeaways, Cloud Talks and Training from Hacker Summer Camp - Blackhat Defcon Diana Initiative BSides Vegas 2022. Lees meer
Blog with links:
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp
(00:00) Intro
(00:43) What is Hacker Summer Camp
(01:24) Who should attend Hacker Summer Camp
(02:00) Black Hat 2022 KeyNote Recap
(07:48) Cloud Themes at Black Hat 2022
(14:41) Buzzword Bingo at Black Hat 2022
(20:11) Black Hat 2022 Recap - CISO Perspective
(22:23) SBOM in Cloud at Black Hat 2022?
(23:31) Black Hat 2022 Recap - Cloud Perspective
(30:27) Zero Trust in Cloud at Black Hat 2022?
(33:15) Defcon 30 2022 Recap
(43:17) Defcon 30 Cloud Village Talks Recap
(45:49) Ashish reacts to 10yrs of people failing default best practice
(48:57) Defcon 30 Cloud Village Talks Recap Contd
(52:32) Cloud Talks from other Defcon 30 Villages - Red Team, Recon Village, AppSec Village
(55:11) BSides Vegas 2022 Recap
(58:26) Diana Initiative 2022
(58:58) Are things getting worse before they get better (comment below)
(1:00:24) Ashish Conclusion
-
HOW TO Threat Model Digital Applications in Cloud
21 augustus 2022 · 1 uur
In this episode of the Virtual Coffee with Ashish edition, we spoke with Jeevan Singh (Jeevan's Linkedin) about Threat Modelling STRIDE Threat Modelling can be used for self service Application running in Cloud and allowing Security Teams to go on holiday without worrying about Digital Supply Chain. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Jeevan Singh (Jeevan's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
Spotify TimeStamp for Interview Questions
(00:00) Ashish's Intro to the Episode
(02:15) https://snyk.io/csp
(02:40) Jeevan's Professional Background
(04:23) What is threat modelling
(05:35) Flicking the Threat Modelling switch
(06:47) Common AppSec Mistake
(09:58) What is Threat Modelling Important?
(11:46) Tainted Flow Analysis and Threat Modelling
(13:00) Where does this fit in CI/CD?
(14:25) Security Teams going on vacation made possible
(15:34) Impact of teaching developers how to run Threat Model
(16:33) First time running Observe Phase of Threat Modelling with Developers
(17:13) Developers are better at Threat Model than Security
(19:09) Level of programming expertise for Threat Modelling
(21:32) Fixing Threats vs Finding relevant controls for the threat
(22:00) Bad example of role of Threat Modelling in Business
(23:41) Should Threat Model be done in Dev?
(24:54) Example of Threat Model for an App hosted in Cloud?
(27:27) Threat Model Skeleton for Cloud Native Apps
(30:12) Does complexity increase with multi-cloud/hybrid environments?
(32:27) What’s involved in rolling a Threat model program in an organisation?
(36:26) Who is the minimum representation in Threat modelling session?
(38:30) Advice for folks who are starting threat …
-
HOW TO SECURE CONTAINER ENVIRONMENT FOR FINANCIAL SERVICES
7 augustus 2022 · 56 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Karthik Ramamoorthy (Karthik's Linkedin) about Container security with NIST Framework for financial services organizations. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Karthik Ramamoorthy (Karthik's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
AWS ReInforce 2022 Recap & Highlights
2 augustus 2022 · 53 min
Special Episode by Shilpi and Ashish sharing their recap, highlights, big takeaways, meh moments and in person experience from AWS ReInforce 2022. Lees meer
Twitter Space with Cloud Security Community about the AWS Re:Inforce 2022 Recap & Highlights
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
Fundamentals of AWS Cloud Security Assessment
30 juli 2022 · 49 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Cassandra Young (@muteki_rtw) Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Cassandra Young (@muteki_rtw)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
So Now You Know!
28 juli 2022 · 19 min
Special Episode by Shilpi and Ashish announcing the 1 year partnership with Snyk and what does this mean for the podcast community - you and also for Ashish and Shilpi. The new Architecture series we are announcing in the coming weeks and a lot more. We hope you continue to enjoy the vendor neutral content from Cloud Security Practitioners we bring to you. Lees meer
Here is an Interview with Guy Podjarny (Founder of Snyk) that we did as part of the announcement!
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest : Snyk
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
HOW TO SECURE AWS CLOUD ENVIRONMENT FOR HEALTHCARE
20 juli 2022 · 55 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Kyler Middleton (Kyler's Linkedin) Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Kyler Middleton (Kyler's Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
Zero Trust and the Triple Paradox
9 juli 2022 · 21 min
Zero Trust is top of mind but is it achievable? In this "What to LookOut for in 2022" series - we interviewed experts at RSA and BSidesSF about what Zero Trust is important today and the paradoxes in achieving it. Lees meer
Watch the video for this episode on You Tube - ZERO TRUST AND THE TRIPLE PARADOX
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guests Linkedin: Thank you to Anudeep Parhar, Daniel Tranner, Dylan Owen & Bill Malik for participating in this episode.
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
Building AWS Security Guardrails
4 juli 2022 · 45 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Kinnaird McQuade (Kinnaird's Twitter) Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Kinnaird McQuade (Kinnaird's Twitter)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy
-
Fix the Broken Digital Supply Chain
3 juli 2022 · 15 min
The Digital Supply Chain is broken and getting challenging to fix. In this "What to LookOut for in 2022" series - we interviewed experts at RSA and BSidesSF on the Broken Digital Supply Chain and ways in which we can fix it. Lees meer
Watch the video for this episode on You Tube - Fix the Broken Digital Supply Chain
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter + Linkedin: Ashish Rajan (@hashishrajan) + Shilpi Bhattacharjee (@shilpibhattacharjee)
Guests Linkedin: Thank you to Mikko Hypponen, Shamla Naidoo, Clint Gibler, Ryan F, Mike Ruth, Paul Calatayud, Shay Levi, Dylan Ayrey, Aaron Brown, Mackenzie Jackson & Dan Gordon for participating in this episode.
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security Academy