Alle afleveringen
365 afleveringen, van nieuw naar oud
-
HashiConf Global 2021 - Our Cloud Security Picks - Cloud Security News
22 oktober 2021 · 3 min
Cloud Security News this week 22 October 2021 Lees meer
Hope you have been enjoying your Cloud Security News this week and in our special third instalment for this week we bring you our best bits from Hashiconf Global 2021, conference held by Hashicorp. Hashicorp is a software company who provide open source tools and products - some of their popular products Vagrant, Terraform, Vault and boundary - You can view the conference and the talks here
The opening keynote was delivered by their Co-Founders Mitchell Hashimoto, Armon Dadgar, and CEO Dave McJannet - with key themes around Zero Trust, Hybrid and MultiCloud - looking to make Zero Trust more accessible for users. Mitchell Hashimoto spoke about the challenges Developers face when deploying applications with Kubernetes and how Waypoint assists with this.
They also spoke about the Hashicorp Cloud Platform (HCP) and the packer service which is now in public Beta, available free to use. Some of the features highlighted included remediation, enforcing security checks and maintaining images
Shane Petrich from Target in his talk “Managing Target's Secrets Platform” spoke about how Target manages and maintains its enterprise deployment of HashiCorp Vault (Hashicorp’s secret management and data protection product) -- everything from unattended builds, automated maintenance activities, and client onboardings.
Identity and account access is one of the first things you set up in the cloud and Austin Burdine, Mike Saraf and Yates Spearman share how Red Ventures implemented a custom Terraform solution to automate access management, meeting the requirements of various compliance frameworks
Last year Hashicorp announced Boundary, their secure remote access solution. This year at Hashiconf 2021, Susmitha Girumala and Mike Gaffney from HashiCorp showcased what is new in Boundary with a demo of key capabilities of identity-based access, integrated secrets management with Vault and dynamic host catalogs.
Mark Guan and Ruoran Wang from…
-
Talks not to be missed at Kubecon North America 2021 - Cloud Security News
21 oktober 2021 · 3 min
Cloud Security News this week 21 October 2021 Lees meer
It's a month full of conferences and as promised we are back with our 2nd episode this week to bring you the cloud security highlights from KubeCon. In this episode we will share some of our team’s favourite from Kubecon 2021 North America
If you aren't quite familiar with the wonderful world of Kubernetes, there are a few weird and wonderful open source acronyms in today’s episode. TUF refers to The Update Framework, SPIFFE refers to Secure Production Identity Framework for Everyone SPIFFE, SPIRE is the SPIFFE’s Runtime Environment). Now that we are all across cool Kube words - lets into the talks
Starting off with the talk from Andrew Martin, Co-Founder of Control Plane and Author of Hacking Kubernetes and Kubernetes Threat Modelling. He spoke about Kubernetes Supply Chain Security - he showcased work to build a Kubernetes Software Factory with Tekton and Deep dived on signing and verification approaches to securely build software with (TUF) SPIFFE, SPIRE and sigstore
Ian Coldwater from Twilio; Brad Geesaman & Rory McCune from Aqua Security Duffie Cooley from Isovalent combined forces to share with the community how they do security research or hacking Kubenetes clusters using a recently discovered Kubernetes CVE (Common Vulnerability and exposure) - Their talk was called Exploiting a Slightly Peculiar Volume Configuration with SIG-Honk
Matt Jarvis from Synk shared what to do if your container has a huge number of Vulnerabilities - how to prioritise them and remediate them in his talk My Container Image has 500 Vulnerabilities, Now What?
Talking about containers and Vulnerability scanning If you want to know about how vulnerability scanners work, their blind spots and how to implement a practical risk based approach to remedy vulnerabilities that really matter to your organisation - check out Pushkar Joglekar’s Keeping Up with the CVEs: How to Find a Needle in a Haystack?
If you find yourself asking “How do I a…
-
All the Security Updates - Google Cloud Next 21 - Cloud Security News
20 oktober 2021 · 6 min
Cloud Security News this week 20 October 2021 Lees meer
Google Cloud is adding new features to their zero trust access solution, BeyondCorp Enterprise which will enable identity and context-aware access to non-web applications running in Google Cloud and non-Google Cloud environments. They also claim to be making it easier for admins to diagnose access failure, triage events, and unblock users with the new Policy Troubleshooter feature.
If you are familiar with XDR - which allows for Extended Detection and Response (XDR) across endpoints, networks, cloud and workspaces. Google also announced a new collaboration with Cybereason to deliver a cloud-native XDR solution . The intent is to automate prevention for common attacks, guide analysts through security operations and incident response, and enables arguably faster threat hunting.
They are also enhancing the integration between Chronicle (a SaaS SIEM built on core Google infrastructure that provides security analytics at the speed) and Security Command Center (SCC) on GCP to allow for centralized alerts and investigative workflows across the two platforms, and enables threat-specific pivots by enriching SCC alerts with intelligence on associated threat actors and entities.
Google is also strengthening their protection of sensitive data through Automatic DLP (data loss prevention) which is in preview and ensuring encryption of data in transit using Ubiquitous Data Encryption, External Key Management, and Cloud Storage products.
Google launched a new Build Integrity feature for Cloud Build which allows to automatically generates a verifiable build manifest that includes a signed certificate describing the sources that went into the build, the hashes of artifacts used, and other parameters.
For Google Workspaces they have also introduced new security features.
Episode Show Notes on Cloud Security Podcast Website.
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
Instagram - Cloud Security News
If you want to wat…
-
What is Cloud Native Application Protection Platform - CNAPP Explained!
17 oktober 2021 · 49 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Om Moolchandani (@omaitrika) is a CISO and CTO at Accurics (@AccuricsSec).. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Om Moolchandani (@omaitrika)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast
- Cloud Security News
- Cloud Security Academy
-
Google Cloud Next 21, Kubecon and VMworld - Cloud Security News
13 oktober 2021 · 5 min
Cloud Security News this week 14 October 2021 Lees meer
It's an eventful month for all things cloud as Google Cloud Next 21 and Kubecon are happening this week. Ashish from Cloud Security Podcast was co-hosting the Capture the Flag today with Magno Logan from Trend Micro, you can check it out here.
In next week’s episode we will be bringing to you the best bits from Kubecon and Google Cloud Next 21.
You can view these events virtually at the links below
Google Cloud Next 21
Kubecon
Google Cloud announced the launch of Google Cybersecurity Action Team, a group of experts from across Google that will form what they believe is the world’s premier security advisory team. The role of this team would be to shape security transformation — from roadmap and implementation, through to responding to a major incident, to engineering new solutions.
VMware also hosted their annual conference VMworld last week with a big focus on multicloud. They announced their strategy to help customers navigate the multi-cloud era with the launch of VMware Cross-Cloud services. VMware shared that the Cross-Cloud services will deliver three key advantages: an accelerated journey to the cloud, cost efficiency, flexibility and control across any cloud. You can find out more about this here and view VMworld on demand here
Amazon owned gaming service Twitch has suffered a huge data leak late last week, with more than 100 gigabytes of data, reportedly taken from 6000 internal Twitch GitHub repositories.The leak has exposed list of Twitch creator payments showing several top earners on the site earned close to $10 million. Some gamers caught up in the leak have verified that the payouts are accurate.
Wiz has become the fourth-most-valuable venture-backed cybersecurity company in the world, raising $250 million on a $6 billion valuation
Huawei Cloud has become 2nd largest in China and 5th largest in the world according to Gartner
Episode Show Notes on Cloud Security Podcast Website.
Podcast Twitter …
-
Implementing Cloud Security Tools the Right way - Stay Alert Not Fatigue!
10 oktober 2021 · 36 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Gaurav Kumar (@gauravphoenix) is the Founder of Dassana (@DassanaSecurity). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Gaurav Kumar (@gauravphoenix)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast
- Cloud Security News
- Cloud Security Academy
-
AWS Launches Cloud Control API - Cloud Security News
6 oktober 2021 · 3 min
Cloud Security News this week 06 October 2021 Lees meer
AWS has announced the availability of AWS Cloud Control API - a set of common application programming interfaces (APIs) that are designed to make it easy for developers to manage their AWS and third-party services. AWS Cloud Control API can be used to create, read, update, delete, and list (CRUD-L) your cloud resources that belong to a wide range of services—both AWS and third-party. You won't have to generate code or scripts specific to each individual service responsible for those resources.We have linked in the podcast notes a informative video from AWS that explains more about this
The inaugural HashiCorp State of Cloud Strategy Survey with about 3200 responses has shared that multi-cloud is no longer aspirational goal but an everyday reality - with ¾ of the respondents noting that they were using 2 clouds or more, top drivers for multicloud adoption are digital transformation, avoid vendor lock in, cost reduction and scaling, many enterprises are yet to realise substantial value from their cloud investment and Cloud skills shortage still remains a major challenge
Amazon, Google, Microsoft, Atlassian, CISCO, IBM, Salesforce, Slack and SAP have joined forces to establish the Trusted Cloud Principles as a commitment to protect the rights of their customers. AWS tweeted that this is to “help safeguard the interests of organizations and the basic rights of individuals using cloud services” You can view the Trusted Cloud Principles here.
Orca Security has secured $550 million in Series C funding to raise their valuation to $1.8 Billion, investment was led by Temasek, an investment company he adquartered in Singapore. Orca Security has a patent-pending SideScanning™ technology that collects data directly from cloud provider APIs/ cloud configuration and the workload’s runtime block storage out-of-band to detect vulnerabilities, malware, misconfigurations, lateral movement risk, weak and leaked passwords, and unsecured…
-
Data Security in Cloud with David McCaw, Dasera
3 oktober 2021 · 49 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with David McCaw (Linkedin - David McCaw) is a Co-Founder of Dasera (@DaseraInc). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: David McCaw (Linkedin - David McCaw)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
- Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
Cloud Security ranks in 2021 OWASP Top 10 - Cloud Security News
29 september 2021 · 4 min
Cloud Security News this week - 29 September 2021 Lees meer
Amazon Web Services, Google Cloud, IBM, and Microsoft have joined forces this week with the Enterprise Data Management (EDM) Council to publish a framework for managing data in the cloud. The new cloud data management capabilities (CDMC) framework was developed over the last 18 months with participation from more than 100 leading companies. The framework can be found here
Microsoft has published information this week on a new malware it calls FoggyWeb which has been deployed by Russia-linked threat actors Nobelium who are said to be behind the devastating SolarWinds supply chain attack. Microsoft’s published document can be found here
For those of you familiar with OWASP (Open Web Application Security Project), OWASP celebrated its 20th anniversary last week with a 24-hour webinar + launched their top 10 web security vulnerabilities for 2021 updated from 2017. It worth noting that there are a few updates relevant to cloud security - broken access control has moved from #5 to #1, insecure design and server side request forgery have now been added while security misconfiguration has made it to top 5. You can read more about it here
Trufflehog, a git repository scanner from Truffle Security was originally released in 2017. Recently an open source extension for chrome was released for Trufflehog that will help identify API Keys for SaaS and cloud providers that are often making their way into Javascript.
Cloud Security Alliance released their The State of Cloud Security Risk, Compliance, and Misconfigurations report this month. Based on over 1000 responses from IT and security professionals.
Episode Show Notes on Cloud Security Podcast Website.
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes, check out:
- Cloud Security Podcast:
- Cloud Security Academy:
-
Cloud Security Careers: Application Security Engineer Skills with Tanya Janca
26 september 2021 · 44 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Tanya Janca (@shehackspurple) is an Author, Security Trainer and Founder of We Hack Purple (@WeHackPurple). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Tanya Janca (@shehackspurple)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
- Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
Cloud Security Careers: Threat Analyst Skills
24 september 2021 · 42 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Abisola Dayspring Johnson aka Day (@CyberwoxAcademy) is a Threat Analyst at Optiv (@Optiv) and the Founder of Cyberwox Academy helping aspiring CyberSecurity students to get into CyberSecurity. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Abisola Dayspring Johnson aka Day (@CyberwoxAcademy)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
- Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
Vulnerabilities in AWS, GCP and Azure - Cloud Security News
22 september 2021 · 2 min
Cloud Security News this week - 22 September 2021 Lees meer
AWS, Google Cloud and Azure have all been busy last few weeks fixing and patching Vulnerabilities. In addition to Azure's OMIGOD flaws which we covered in last week’s episode, Google Cloud reported that some of their load balancers were routing to an Identity-Aware Proxy (IAP) enabled Backend Service which could have been vulnerable to an untrusted party. Google Cloud have confirmed that this issue has been resolved.
Rhino Security Labs have discovered a vulnerability in AWS WorkSpaces, amazon’s virtual desktop. Exploiting this vulnerability allows commands to be executed if a victim opens a malicious WorkSpaces URI from their browser. Rhino reported the vulnerability to Amazon and it was promptly patched.
Attackers have begun to exploit critical Microsoft Azure vulnerabilities that were reported in last week’s episode. The OMIGOD flaws, discovered by the Wiz Research Team have since been patched by microsoft. New data indicates that attackers are scanning the Web for Azure Linux virtual machines that are vulnerable. If successful, an attacker could become root on a remote machine.
For organisations and enterprises cloud is about improved flexibility, scalability, and cost-effectiveness. For cybercriminals, Cloud is an environment filled with poorly secured enterprise data, applications, and online assets. IBM in their recently released Security X-Force Cloud Threat Landscape Report highlight increased attacker interest in the thriving black market for stolen credentials used to access enterprise accounts and resources on public cloud platforms. IBM X-Force discovered about 30,000 cloud credentials potentially available for sale on Dark Web and Prices for these credentials ranged from a few dollars to more than $15,000 per credential, based on the level of access and the amount of credit associated with an account. Report available here
Episode Show Notes on Cloud Security Podcast Website.
Podcast Twitter - Cl…
-
Cloud Security Careers: From University to Security Engineer at Atlassian
19 september 2021 · 46 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Kaif Ahsan (@KaifAhsan1) is a Security Engineer at Atlassian (@Atlassian). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Kaif Ahsan (@KaifAhsan1)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
- Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
Cloud Security Careers: Getting an Entry Level GRC Role
15 september 2021 · 45 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Gerald Auger (@Linkedin- Gerald Auger) is a CyberSecurity PhD holder, Content Creator at Simply Cyber(@SimplyCyber) and a CyberSecurity Practitioner for over 15yrs . Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Gerald Auger (@Linkedin- Gerald Auger)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
- Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
fwd:cloudsec conference this week, Vulnerabilities discovered in AWS - Cloud Security News
15 september 2021 · 3 min
Cloud Security News this week - 15 September 2021 Lees meer
Oracle Chief Technology Officer and co-founder Larry Ellison told their investors this week that Oracle Cloud is superior to AWS when it comes to security and cost. He shared that they don't think an application should talk to five or six separate databases referencing AWS’ database offerings and calling it a very, very risky security architecture. If you are keen to learn more about how the cloud providers rank, Gartner released a report in July 2021 noting that over 90% of the worldwide cloud market was concentrated in just four cloud providers. Amazon Web Services and Microsoft lead the market with Alibaba and Google as the next closest competitors.
The research team at Wiz has recently discovered four vulnerabilities in the little-known software agent called Open Management Infrastructure (OMI) that is embedded in many popular Azure services.When customers sets up a Linux virtual machine in their cloud, the OMI agent is deployed automatically when they enable certain Azure services. Without a patch, attackers can easily exploit these four vulnerabilities to escalate root or highest privileges and remotely execute malicious code. Microsoft has issued a patch to address this during their Patch Tuesday release on 14 September 2021
Last year at the Reinvent Conference Amazon unveiled Amazon Elastic Kubernetes Service (Amazon EKS) Anywhere. Last week they announced the general availability of Amazon EKS Anywhere. It's a deployment option for Amazon EKS that enables you to easily create and operate Kubernetes clusters on premises using VMware sphere. Fully supported by AWS, Amazon EKS will enable users to automate cluster management, reduce support costs and provide the ability to view all their Kubernetes clusters, running anywhere.
Tenable, best known for their IT vulnerability management, has agreed to acquire cloud-native security startup Accurics Inc. for $160 million. Accurics, founded in 2019, states that t…
-
Cloud Security Careers: From Executive Assistant to Head of Security
12 september 2021 · 45 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Lisa Hall (@Lisa_H_), the Head of Security, PagerDuty(@PagerDuty). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Lisa Hall (@Lisa_H_)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
- Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
IBM Launches Servers for Hybrid Cloud, Microsoft and Verizon bring 5G Edge Cloud Computing - Cloud Security News
8 september 2021 · 2 min
Cloud Security News this week - 8 September 2021 Lees meer
Verizon, a multinational telecommunications giant and Microsoft have teamed up to bring on-prem, private 5G edge cloud computing to business. Their offer is a cloud platform that puts compute and storage services at the edge of the network at the customer premises. This has the potential to offer lower lag time and high bandwidth for demanding applications such as virtual and augmented reality and machine learning.
In Australia, as part of Macquarie bank path to be 100% cloud for IT infrastructure by 2022, they are embedding a 'secure by design' ethos. Secure by design is an approach to software engineering that is about creating code that is foundationally secure. Read more about Macquarie Bank Cloud Strategy here + here
The FBI sent out a notice warning companies in the food and agriculture sector to watch out for ransomware attacks aiming to disrupt supply chains.. Cyber criminal threat actors exploit network vulnerabilities to exfiltrate data and encrypt systems in a sector that is increasingly reliant on smart technologies, industrial control systems, and internet-based automation systems. Acces the full document on our website www.cloudsecuritypodcast.tv - FBI Document here
Lenovo has launched Global Everything-as-a-Service Strategy, bringing all of its as-a-Service offerings under one umbrella that makes everything from the pocket to the cloud available via a single contract framework. Read more about it here
IBM has launched new generation of IBM Power servers for frictionless, scalable hybrid cloud. The new IBM Power10 processors are designed specifically for hybrid cloud environments. In a statement IBM has stated that the servers come with security enhancements and Red Hat hybrid cloud capabilities. The servers are meant to respond faster to business demands, protect data from core to cloud, streamline insights and automation and maximize availability and reliability.
-
Cloud Security Careers: Skills Required for an Associate Cloud Security Engineer
5 september 2021 · 47 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Zinet Kemal (Linkedin - Zinet-Kemal) is an Associate Cloud Security Engineer at Best Buy (@BestBuy) Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Linkedin: Zinet Kemal (Linkedin - Zinet-Kemal)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
- Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
Is your Microsoft Azure Cosmos Database Keys Secure? - Cloud Security News
1 september 2021 · 2 min
Cloud Security News this week - 1 Sep, 2021 Lees meer
Last Thursday, on the 26th of August 2021 - Microsoft warned thousands of its cloud computing customers, including some of the world's largest companies. that hackers could have the ability to read, change or even delete their main databases. This is due to a vulnerability in the Jupyter Notebook Feature in Microsoft Azure's flagship Cosmos database. Microsoft cannot change those keys by itself, it emailed the customers Thursday telling them to create new ones.
AWS has announced the release of AWS Backup Audit Manager a new feature that allows you to audit and report on the compliance of your data protection policies. AWS claims that it provides built-in compliance controls and allows you to customize those controls to define your data protection policies.
Google Cloud has recently released on demand vulnerability scanning. Google claims that this will allow checking for vulnerabilities earlier in development. This new feature checks for vulnerabilities both in locally stored container images and images stored within GCP registries.
A $2000 bug bounty has been claimed by researcher Robert Heaton, who was able to find a vulnerability in Bumble, a dating app which has more than 100 million users worldwide.
By learning how Bumble's application programming interface (API) works the researchers found a way to pinpoint users' exact location, bypassing the safeguards in the app designed to prevent this.
Lacework, a data driven security platform has released their quarterly cloud threat report. The report stated that Last year alone, cybercrime and ransomware attacks cost companies $4 billion in damages. They identified a rising demand for access to cloud accounts along with continued increases in scanning and probing of storage buckets, databases, orchestration systems, and interactive logins.
Follow us on @CloudSecPod
You may also like Cloud Security Podcast
-
Cloud Hacking eSports | Ultimate Hacking Championship
29 augustus 2021 · 5 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Igor Rincon (@igor.rincon) creator of Ultimate Hacking Championship (@HackingEsports) & one of the host of UHC - Magno Logan (@magnologan). Lees meer
Link to Magno's Kubernetes Security Challenge walkthrough
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Twitter: Igor Rincon (@igor.rincon), Magno Logan (@magnologan)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast
- Cloud Security Academy
-
Network Security in a Cloud Native World
26 augustus 2021 · 52 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Karthik Prabhakar (@worldhopper) is an Advisor to AccuKnox (@AccuKnox). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Linkedin: Karthik Prabhakar (@worldhopper)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
AWS Re:inforce goes Virtual - Cloud Security News
25 augustus 2021 · 2 min
Cloud Security News this week - 25 Aug, 2021 Lees meer
AWS is launching a new partner competency for managed security service providers (MSSPs) which will make their cloud software solutions and services available in the AWS Marketplace. AWS are coining this an industry first + designed to help partners differentiate themselves in a crowded security market
Default Permissions on Microsoft Power Apps, a cloud-hosted suite of services that allows organizations to create business intelligence applications has exposed 38 million records. This was discovered by an upguard analyst that Open data protocol API is enabled by default
AWS Cancelled re:Inforce Security Conference In Houston Due To COVID-19 and held, A scaled-down, free version of the event was held virtually on Aug. 24
Microsoft has protested a $10B NSA Cloud Contract Awarded To AWS.
A google cloud news a bit closer to home, Google's newest cloud region, in Melbourne, Australia, which launched just a month ago on 25 July. went down for 1 hour and 30 minutes due to 'transient voltage' issues that rebooted network hardware.
Follow us on @CloudSecPod
You may also like Cloud Security Podcast
-
THINKING OF MOVING A MONOLITH TO CLOUD NATIVE?
22 augustus 2021 · 52 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with John Kinsella (@johnlkinsella) is a Cloud Native Contributor, co-host of Security Weekly and CTO of CySense. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Linkedin: John Kinsella (@johnlkinsella)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
DO WE NEED LOGGING? - Building Observability Platform for Scale - Atlassian
15 augustus 2021 · 40 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Colby Funnel (Linkedin - @Colby) is a Development Manager at Atlassian(@Atlassian). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Linkedin: Colby Funnel (Linkedin - @Colby)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
What is a SECURITY DATA LAKE?
8 augustus 2021 · 49 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Omer Singer (Linkedin-Omer Singer) is the Head of Cyber Security Strategy at Snowflake - The Data Cloud (@SnowflakeDB). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Linkedin: Omer Singer (Linkedin-Omer Singer)
Podcast Twitter - Cloud Security Podcast (@CloudSecPod)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
-
Security Logging is Changing | Observability & Tracing Explained
1 augustus 2021 · 49 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Ted Young (@tedsuo) is a contributor along with AWS, Google Cloud, Microsoft Azure in the Observability eco-system. He is also the Director of Developer Education at LightStep (@LightStepHQ) Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: @hashishrajan
Guest Linkedin: Ted Young (@tedsuo)
Podcast Twitter - @CloudSecPod
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
WHAT IS CYBER RESILIENCY IN CLOUD?
25 juli 2021 · 39 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Chris Hughes (Linkedin - Chris Hughes) & Dr. Nikki Robinson (Linkedin @dr-nikki-robinson) are the host of Resilient Cyber Podcast (@Resilient Cyber Podcast). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: @hashishrajan
Guest Linkedin: Chris Hughes (Linkedin - Chris Hughes) & Dr. Nikki Robinson (Linkedin @dr-nikki-robinson)
Podcast Twitter - @CloudSecPod
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
AWS Security - Managing Threat Detection and Response
21 juli 2021 · 46 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Ely Khan (@elykahn) is the Principal Product Manager at AWS (@AWS). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: @hashishrajan
Guest Linkedin: @elykahn
Podcast Twitter - @CloudSecPod
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Cloud Security RoadMap - Scott Piper
18 juli 2021 · 1 uur 4 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Scott Piper (@0xdabbad00) is a AWS Security Legend who has written AWS Security tools for the community and among other things is a Consultant and Trainer at Summit Route.. Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: @hashishrajan
Guest Linkedin: @0xdabbad00
Podcast Twitter - @CloudSecPod
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Comparing Cloud Security Tools - CWPP, CSPM, CASB & CNAPP
11 juli 2021 · 49 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Patrick Pushor (@CloudChronicle) is the Technical Evangelist at Orca Security (@OrcaSec). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: @hashishrajan
Guest Linkedin: @CloudChronicle
Podcast Twitter - @kaizenteq
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Cloud Infrastructure Security at Scale - Netflix
4 juli 2021 · 49 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Srinath Kuruvadi (@Srinath Kuruvadi) is the Head of Cloud Infrastructure Security at Netflix (@Netflix). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: @hashishrajan
Guest Linkedin: @Srinath Kuruvadi
Podcast Twitter - @kaizenteq
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Hacker Valley Studio - ExIST Framework to reach Peak Performance in CyberSecurity
27 juni 2021 · 37 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Chris Cochran (@chriscochrcyber) and Ronald Eddings (@ronaldeddings) are the host of a CyberSecurity Podcast called Hacker Valley Studio (@TheHackerValley). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: @hashishrajan
Guest Twitter: @TheHackerValley
Podcast Twitter - @kaizenteq
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Finding Security Bugs in Google Cloud - Kat Traxler
20 juni 2021 · 37 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Kat Traxler (@nightmarejs) is the Cloud Security Engineering Lead, Best Buy(@BestBuy). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: @hashishrajan
Guest Twitter: @nightmarejs
Podcast Twitter - @kaizenteq
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Hacker stories from the Internet - Darknet Diaries
13 juni 2021 · 58 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Jack Rhysider (@jackrhysider) is the host of Award Winning CyberSecurity Podcast Darknet Diaries (@DarknetDiaries). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Guest Twitter: twitter.com/JackRhysider
Podcast Twitter - @kaizenteq
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
CSO Hall of Fame - 21 yrs in Cybersecurity: Challenges THEN & NOW
10 juni 2021 · 42 min
In this Mid Week special episode of the CISO Perspective edition, we spoke with Andy Ellis (@csoandy) is the Operating Partner at YL Ventures (@YLVentures) and the ex-CISO of Akamai (@Akamai). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Guest Twitter: twitter.com/csoandy
Podcast Twitter - @kaizenteq
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Finding and Fixing SECURITY BUGS IN GOOGLE CLOUD - Dylan Ayrey
6 juni 2021 · 1 uur 1 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Dylan Ayrey (@insecurenature) is a Professional Hacker and Co-Founder of Truffle Security (@TruffleSecurity-Linkedin) Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Guest Twitter: twitter.com/insecurenature
Podcast Twitter - @kaizenteq
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our YouTube Channel:
- Cloud Security Podcast: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Attacking and Defending Managed Kubernetes Clusters - Brad Geesaman
30 mei 2021 · 59 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Brad Geesaman (@bradgeesaman) is a Senior Cloud Native and Kubernetes Security Professional and the Co- Founder of Darkbit (@Darkbit). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Guest Twitter: @bradgeesaman
Podcast Twitter - @kaizenteq
If you want to watch videos of this episode and past CSP episodes:
- Youtube Channel: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Kubernetes Runtime Threat Detection and Response - Falco, Sysdig
23 mei 2021 · 53 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Dan “POP“ Papandrea (@danpopnyc) is the CNCF Ambassador, Director of Open Source Community and Ecosystem (@sysdig) and Podcast Host for @PopcastPop Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Guest Twitter: twitter.com/danpopnyc
Podcast Twitter - @kaizenteq
If you want to watch videos of this episode and past CSP episodes:
- Youtube Channel: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Study Hall - Attacking K8S Cluster Defaults!
20 mei 2021 · 26 min
In this Study Hall - Ashish goes through Kubernetes Components to start understanding the Kubernetes Architecture Lees meer
READ the Multi-part Medium Article here - Ultimate Guide to Kubernetes Security
For Similar Topics covered in other episode of Cloud Security Podcast visit: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Podcast Twitter - @kaizenteq
To ASK questions from our Guest SUBSCRIBE TO OUR YOUTUBE LINK HERE to JOIN our next LIVE STREAM - : https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Start here for Kubernetes Security - Magno Logan
16 mei 2021 · 58 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Magno Logan (@MagnoLogan) is the Security Researcher, Trend Micro(@TrendMicro) Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Guest Twitter: twitter.com/magnologan
Podcast Twitter - @kaizenteq
If you want to watch videos of this episode and past CSP episodes:
- Youtube Channel: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Study Hall - Kubernetes Concepts and Architecture Explained!
12 mei 2021 · 20 min
In this Study Hall - Ashish goes through Kubernetes Components to start understanding the Kubernetes Architecture Lees meer
READ the Multi-part Medium Article here - Ultimate Guide to Kubernetes Security
For Similar Topics covered in other episode of Cloud Security Podcast visit: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Podcast Twitter - @kaizenteq
To ASK questions from our Guest SUBSCRIBE TO OUR YOUTUBE LINK HERE to JOIN our next LIVE STREAM - : https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Risk Analysis of Kubernetes Security - Mark Manning, Snowflake
9 mei 2021 · 50 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Mark Manning (@antitree) is the Principal Security Architect at Snowflake(@SnowflakeDB). Before this he used to run Kubernetes Risk Analysis at NCC Group (@NCCSECURITYUS) Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Guest Twitter: twitter.com/antitree
Podcast Twitter - @kaizenteq
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Study Hall - What is Kubernetes & Why do you NEED TO know about it?
5 mei 2021 · 11 min
In this Study Hall - Ashish goes through WHAT IS Kubernetes? What Kubernetes is NOT? & Should you start refactoring or building infrastructure in Kubernetes today? Lees meer
For Similar Topics covered in other episode of Cloud Security Podcast visit: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Guest Twitter: twitter.com/itascode
Podcast Twitter - @kaizenteq
To ASK questions from our Guest SUBSCRIBE TO OUR YOUTUBE LINK HERE to JOIN our next LIVE STREAM - : https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Kubernetes (Goat) Vulnerable by Design - Madhu Akula
2 mei 2021 · 50 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Madhu Akula (@madhuakula) is an international Kubernetes Security Public Speaker, Black Hat Trainer, Creator of open source repo Kubernetes Goat, Security Researcher and Security Engineering at Miro (Miro). Lees meer
Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Guest Twitter: twitter.com/madhuakula
Podcast Twitter - @kaizenteq
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
CISO PERSPECTIVE SERIES: LINKEDIN CISO - Geoff Belknap
27 april 2021 · 53 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Geoff Belknap (@geoffbelknap) is the Chief Security Officer of Linkedin (@LinkedIn). Lees meer
In this episode, Geoff & Ashish spoke about
What was your path into your current role
What does Cloud Security mean for you?
What it’s like to be a CISO?
What do you see as a change in the CyberSecurity industry that has bought through COVID
"Talking to the board is the easy part. Adding value to their thinking is hard." - could you expand on this experience for others who still consider board conversations and showing value hard for their board.
How to decide what metrics are best to present to your board?
Difference between CISO for a B2B vs B2C
For a CISO listening what are some of the future roles that you and some of your peers have moved which other CISOs listening can take into consideration - CISO Advisory, Product etc?
Are there certain trend which have gotten trendier in your opinion as CISOs are building their 5yrs road map
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://lnkd.in/gUHqSai
-
Study Hall: Honest truth behind learning Kubernetes
27 april 2021 · 5 min
In this Study Hall - Kelsey Hightower explains is it really complex to learn Kubernetes and whether it's really complex. Nothing but the Honest Trust from Kelsey on this episode. Lees meer
Full Episode on Cloud Security Podcast: www.cloudsecuritypodcast.tv
Cloud Security Academy: www.cloudsecuritypodcast.tv/cloud-security-academy
Host Twitter: twitter.com/hashishrajan
Guest Twitter: twitter.com/kelseyhightower
Podcast Twitter - @kaizenteq
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://www.youtube.com/c/cloudsecuritypodcast?sub_confirmation=1
-
Building Threat Detection for your Cloud Environment
18 april 2021 · 50 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Ashwin Patil (@ashwinpatil) who is a returning guest from Season 1 of the Cloud Security Podcast. Ashwin is a Senior Program Manager at Microsoft (@Microsoft). Lees meer
Last time Ashwin came to speak about Threat Intelligence in Azure - Click here to checkout the Season 1 Episode here.
In this episode, Ashwin & Ashish spoke about
Threat Detection Pre- Cloud and In Cloud
Who should be doing threat hunting?
TTP - Tactics Tool and Procedures
What is cloud detection research ?
Things to consider in Threat Hunting Planning Phase
When do yo need a Threat Hunting Team?
Azure Sentinel and Threat Hunting
Threat Detection Playbooks
How to get hands on experience with Azure Sentinel
The MITRE Attack Framework
KQL - Kusto Query Language
Threat Hunting in Azure vs AWS
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://lnkd.in/gUHqSai
-
Cloud Governance using Infrastructure as Code (IaC)
11 april 2021 · 41 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Ohad Maishlish is the CEO & Co-Founder of env0. Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Ohad Maislish - Linkedin
In this episode, Ohad & Ashish spoke about
Three Stages DataCentre Evolution
Governance in Cloud using IaC
Challenges with IaC in companies of different scale - Startup vs Enterprise?
How to get started in IaC for Governance in Cloud?
Would IaC become a standard for anyone doing cloud deployment?
Challenges for organisations looking to implement IaC
How to get started on the governance pieces of IaC
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://lnkd.in/gUHqSai
-
Kubernetes Security Explained for those starting today! - Kelsey Hightower
5 april 2021 · 55 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Kelsey Hightower (@kelseyhightower) is the Staff Advocate at Google Cloud (@GoogleCloud) and co-author of “Kubernetes: Up and Running: Dive Into the Future of Infrastructure.” Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Kelsey Hightower (@kelseyhightower)
In this episode, Kelsey & Ashish spoke about
What is Kubernetes and Why is it so popular ?
Should Senior Leadership within organisations consider Kubernetes?
What are the different stages of Kubernetes complexities for organisation as it grows from Startup to an Enterprise?
Kubernetes Security at Application vs Platform Level
Kubernetes for a Multi-Cloud Deployment management
Does Hybrid Kubernetes exist?
How to manage secrets in Cloud and Kubernetes?
What is a Kubernetes Control Plane?
Serverless, Kubernetes, Dockers and Containers - where are we headed?
How can one encourage organisations to use Kubernetes?
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://lnkd.in/gUHqSai
-
Getting Infrastructure as Code (IaC) Security Culture right! - Yoni Leitersdorf
28 maart 2021 · 44 min
In this episode of the Virtual Coffee with Ashish edition, we spoke with Yoni Leitersdorf (@yonadavl) who is the CEO & Co-Founder of Indeni Lees meer
Host: Ashish Rajan - Twitter @hashishrajan
Guest: Yoni Leitersdorf (@yonadavl)
In this episode, Yoni & Ashish spoke about
What is digital transformation and why do we need it?
Infrastructure as Code and Infrastructure as Code Security
What drives digital transformation?
Who owns infrastructure as code in organisations?
Do security folks need to know how to code?
How to do configuration hardening well?
How to sell or drive infrastructure as code security to your organisation?
How to measure if IAC is being properly implemented in your organisation?
The future of Infrastructure as Code
And much more…
ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv
Twitter - @kaizenteq @hashishrajan
If you want to watch videos of this and previous episodes:
- Youtube Channel: https://lnkd.in/gUHqSai