Cloud Security Podcast

Cloud Security News this week 15 December 2021 This week, the world of cybersecurity has been consumed by the Log4Shell vulnerability. So whats it all about.  Log4j is a  Java library for logging error messages in applications. It was  developed by the open-source Apache Software Foundation and is a key Java-logging framework. The critical zero day security vulnerability has been na...

Cloud Security News this week 8 December 2021 If you use AWS, you may have noticed some issues with your services this week. AWS reported on Tuesday morning that they were seeing impacts to multiple APIs in the US-East 1 region. The issues were impacting their monitoring and incident response tooling impacting their ability to provide timely updates. A bit later they reported that they had identif...

Cloud Security News this week 2 December 2021 AWS has launched some improvements to a few of their existing services and no new Security service has been announced yet. With Google Cloud announcing their CyberSecurity Action team earlier this year , we were hoping for a similar response or better from AWS but nothing so far. Updates to AWS Shield , Amazon Cloud Guru and Amazon Inspector.  For...

Cloud Security News this week 24 November 2021 CSA recently announced that they have now had 1500 Cloud services evaluated across to the STAR registry principles. According to CSA, by publishing to the registry organizations can show current and potential customers their security and compliance posture which may prevent the need for them to complete multiple security questionnaires. You can find m...

In this episode of the Virtual Coffee with Ashish edition, we spoke with Andrew Krug  ( @andrewkrug ) is a AWS Re:invent speaker and Cloud Security Evangelist at DataDog ( @DataDogHQ ). Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hashishrajan ) Guest Twitter: Andrew Krug  ( @andrewkrug ) Podcast Twitter - Cl...

Cloud Security News this week 17 November 2021 According to a research by Trend Micro, Elastic Computing Service (ECS) instances for Alibab Cloud are becoming an increasingly common target for financially motivated hackers with cryptomining goals. This increased targeting may be due to a few unique features of Alibaba Cloud. Alibaba ECS instances come with a preinstalled security agent and provide...

In this episode of the Virtual Coffee with Ashish edition, we spoke with Ran Ribenzaft ( @ranrib ) is an AWS Serverless Hero, Forbes under 30 and the  co-Founder of Epsagon ( @Epsagon ). Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hashishrajan ) Guest Twitter:   Ran Ribenzaft ( @ranrib ) Podcast Twitter - Cl...

Cloud Security News this week 10 November 2021 Microsoft is extending its native cloud security posture management (CSPM) and workload protection capabilities to Amazon Web Services (AWS) - yes you heard that right! within a suite called Microsoft Defender for Cloud. This was previously know as Azure Security Center and Azure Defender At their annual conference Ignite 2021, their focus was enterpr...

In this episode of the Virtual Coffee with Ashish edition, we spoke with Jon Zeolla ( @jonzeolla ) is a Cloud Native Contributor, co-founder CTO of Seiso. Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hashishrajan ) Guest Twitter:   Jon Zeolla ( @jonzeolla ) Podcast Twitter - Cloud Security Podcast ( @CloudSecPod )...

Cloud Security News this week 27 October 2021 In case you missed the quarterly earnings updates from last episode, I do encourage you to check it out to see how Google Cloud and Azure faired last Quarter. AWS came out still leading the pack $16.11 billion in the quarter, up almost 39% from a year ago. You can view the report here  Industry Tech giants including Google, Salesforce, Okta and Sl...

In this episode of the Virtual Coffee with Ashish edition, we spoke with Maximilian Burkhardt  ( @maxb ) is a Staff Security Engineer at Figma ( @Figma ) Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hashishrajan ) Guest Twitter:   Maximilian Burkhardt  ( @maxb ) Podcast Twitter - Cloud Security Podcast (...

In this episode of the Virtual Coffee with Ashish edition, we spoke with Chris Hughes ( @Linkedin-Profile ) is a host of the Resilient Cyber Podcast. Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hashishrajan ) Guest Twitter:   Chris Hughes ( @Linkedin-Profile ) Podcast Twitter - Cloud Security Podcast ( @CloudSecP...

Cloud Security News this week 27 October 2021 UK’s spy agencies have given a contract to AWS to host classified material. Their intention is to boost use of data analytics and artificial intelligence for espionage. The agreement, estimated by industry experts to be worth £500m to £1bn over the next decade. The Guardian has reported that “the contract with Amazon is likely to ignite concerns over s...

In this episode of the Virtual Coffee with Ashish edition, we spoke with Nathan Case  ( Linkedin Profile ) is a Senior Director, Security Operations at Resilience . Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hashishrajan ) Guest Twitter:   Nathan Case  ( Linkedin Profile ) Podcast Twitter - Cloud Secur...

Cloud Security News this week 22 October 2021 Hope you have been enjoying your Cloud Security News this week and in our special third instalment for this week we bring you our best bits from Hashiconf Global 2021, conference held by Hashicorp. Hashicorp is a software company who provide open source tools and products - some of their popular products Vagrant, Terraform, Vault and boundary - You can...

Cloud Security News this week 21 October 2021 It's a month full of conferences and as promised we are back with our 2nd episode this week to bring you the cloud security highlights from KubeCon. In this episode we will share some of our team’s favourite from Kubecon 2021 North America If you aren't quite familiar with the wonderful world of Kubernetes, there are a few weird and wonderful open sour...

Cloud Security News this week 20 October 2021 Google Cloud is adding new features to their zero trust access solution, BeyondCorp Enterprise which will enable identity and context-aware access to non-web applications running in Google Cloud and non-Google Cloud environments. They also claim to be making it easier for admins to diagnose access failure, triage events, and unblock users with the new...

In this episode of the Virtual Coffee with Ashish edition, we spoke with Om Moolchandani ( @omaitrika ) is a CISO and CTO at Accurics ( @AccuricsSec ).. Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hashishrajan ) Guest Twitter:   Om Moolchandani ( @omaitrika ) Podcast Twitter - Cloud Security Podcast ( @CloudSecPo...

Cloud Security News this week 14 October 2021 It's an eventful month for all things cloud as Google Cloud Next 21 and Kubecon are happening this week. Ashish from Cloud Security Podcast was co-hosting the Capture the Flag today with Magno Logan from Trend Micro, you can check it out here . In next week’s episode we will be bringing to you the best bits from Kubecon and Google Cloud Next 21. You ca...

In this episode of the Virtual Coffee with Ashish edition, we spoke with Gaurav Kumar ( @gauravphoenix ) is the Founder of Dassana ( @DassanaSecurity) . Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hashishrajan ) Guest Twitter:   Gaurav Kumar ( @gauravphoenix ) Podcast Twitter - Cloud Security Podcast ( @CloudSecP...

Cloud Security News this week 06 October 2021 AWS has announced the availability of AWS Cloud Control API - a set of common application programming interfaces (APIs) that are designed to make it easy for developers to manage their AWS and third-party services. AWS Cloud Control API can be used to create, read, update, delete, and list (CRUD-L) your cloud resources that belong to a wide range of se...

In this episode of the Virtual Coffee with Ashish edition, we spoke with David McCaw ( Linkedin - David McCaw ) is a Co-Founder of Dasera ( @DaseraInc ). Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hashishrajan ) Guest Twitter:   David McCaw ( Linkedin - David McCaw ) Podcast Twitter - Cloud Security Podcast ( @C...

Cloud Security News this week - 29 September 2021 Amazon Web Services, Google Cloud, IBM, and Microsoft have joined forces this week  with the Enterprise Data Management (EDM) Council to publish a framework for managing data in the cloud. The new cloud data management capabilities (CDMC) framework was developed over the last 18 months with participation from more than 100 leading companies. T...

In this episode of the Virtual Coffee with Ashish edition, we spoke with Tanya Janca  ( @shehackspurple ) is an Author,  Security Trainer and Founder of We Hack Purple ( @WeHackPurple ). Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hashishrajan ) Guest Twitter:   Tanya Janca  ( @shehackspurple ) Pod...

In this episode of the Virtual Coffee with Ashish edition, we spoke with Abisola Dayspring Johnson aka Day ( @CyberwoxAcademy ) is a Threat Analyst at Optiv ( @Optiv ) and the Founder of Cyberwox Academy helping aspiring CyberSecurity students to get into CyberSecurity. Episode ShowNotes, Links and Transcript on Cloud Security Podcast: www.cloudsecuritypodcast.tv Host Twitter: Ashish Rajan ( @hash...