Cloud Security Podcast podcast artwork
Technology

Cloud Security Podcast

by TechRiot.io

Not on the United States charts we track today.

If you like Cloud Security Podcast, try…

Latest episodes

  • Using LLMs for Enterprise Threat Modeling

    October 27, 2026 · 36 min

    Creating an application threat model was a resource-intensive process that took weeks or months, resulting in static documents that were abandoned 80% of the time after their initial creation. However, with development speeds accelerating…

  • Mythos Hype vs. Reality: Why You Need an Agentic Harness

    October 21, 2026 · 48 min

    Is the fear surrounding Anthropic’s Mythos model justified? In this episode, Ashish sits down with Johnny Hand, Global CISO at Trend AI and host of The AI Security Brief. Johnny breaks down why turning on a model like Mythos without a…

  • How Block Solved DNS Vulnerabilities

    October 13, 2026 · 55 min

    When companies rapidly migrate to the cloud without strict registrar policies, users often spin up unsanctioned subdomains pointed at third-party services like Vercel or Hugging Face. When those services are spun down but the DNS records…

  • Why AI Security is Actually a Data Security Problem

    October 8, 2026 · 40 min

    When an AI coding agent hallucinates a software package name, attackers can simply create malicious packages with that exact name, tricking the AI into downloading malware directly into your environment. In this episode, Ashish sits down…

  • Securing Millions of AI-built Apps: How Lovable Defends Against Insider Threats

    September 11, 2026 · 1 hr 11 min

    Empowering non-technical users to build production-grade applications requires a proactive, secure-by-design architecture. In this episode, Ashish sits down with Marcus Hallberg and Samuel Kelemen, security engineers at the AI software…

Show 7 more episodesShow fewer episodes
  • Why AI Won't Replace Your SOC: Federated Data & APEX Framework

    September 1, 2026 · 38 min

    Hash values, IP addresses, and domains are virtually useless as primary detection mechanisms in the era of AI-driven polymorphic malware and short-lived phishing kits. If your detection strategy is still stuck at the bottom of the Pyramid…

  • The "Hunt First" AI Security Strategy

    August 25, 2026 · 46 min

    Did you know that 82% of all intrusions don't involve any sort of malware, and AI-augmented attacks are up 89% year over year? If your security operations team is solely focused on reacting to known-bad SIEM alerts, you may be missing the…

  • Shadow AI & Sandbox Escapes: Why You Need an Agentic Control Plane?

    August 18, 2026 · 32 min

    When Claude Cowork hits a roadblock, it doesn't give up, it writes a custom Python script and downloads an untrusted NPM package just to bypass its restrictions and finish its goal. Are your security tools close enough to stop it? In this…

  • How Adobe Uses AI Agents for building a WAF Pipeline?

    August 4, 2026 · 47 min

    When vulnerability disclosures shrink the wild exploit window down to less than 24 hours (or even minutes), traditional manual patching and WAF rule creation simply cannot keep up. In this episode, Ashish sits down with Ammar Alim (Product…

  • Why Runtime Agents Are Replacing Static Posture Checks

    July 28, 2026 · 45 min

    The attack window from the discovery of a vulnerability to its exploitation has shrunk to less than 24 hours and sometimes down to just 25 minutes. Is your security team prepared for the speed of AI-driven attacks? In this episode, Ashish…

  • The Hidden Cost of BlackBox AI: Bridging Cloud and Code Security

    July 9, 2026 · 43 min

    Traditional SCA and SAST tools are notorious for drowning security teams in false positives, historically flagging nine out of ten alerts incorrectly. But while generative AI seems like a magic bullet, simply wrapping an out-of-the-box LLM…

  • Who Governs Your AI Agents? Identity, Offboarding & Open Standards

    July 2, 2026 · 35 min

    Are overprivileged AI agents the biggest emerging threat in cybersecurity? In a recent high-profile attack, a vibe-coding company had its entire source code stolen because an attacker exploited a long-lived, overprivileged token tied to a…

Full episode archive on Apple Podcasts →

About the show

Learn Cloud Security in Public Cloud and for AI systems, the unbiased way from CyberSecurity Experts solving challenges at Cloud Scale. We are honest because we are not owned by Cloud Service Provider like AWS, Azure or Google Cloud. We aim to make the community learn Cloud Security through community stories from small - Large organisations solving multi-cloud challenges to diving into specific topics of Cloud Security. We STREAM interviews on Cloud Security Topics every week on Linkedin, YouTube and Twitter with over 150K people tuning in.