Welcoem to posts!!
in the future - u will be able to do some more stuff here,,,!! like pat catgirl- i mean um yeah... for now u can only see others's posts :c
All the Cloud Security experts i spoke to at Hacker Summer camp @BlackHatEvents CISO Summit, Defcon etc had these things they were taking back home to implemnet.
A thread of 4 Cloud Security areas for your Cloud Security Planning meeting next week - (even if you are not in a mature cloud environment)
1️⃣ - Cloud Native not Cloud Naive Identity management
Human and Non-Human Users, especially the ones from 3rd parties (SaaS, cloud providers, open source tools etc) in your critical system environments.
2️⃣ - Leaky Data environments
Network zones in data centres was well understood but seems like we are still defining this in cloud environments e.g is the data being requested by a known user from a known AWS environment?
3️⃣ - Unified Security across Multi-Cloud
Most enterprise are multi-cloud by choice or through M&A. This means your team needs training in new cloud and perhaps so does your Security Program which was not ready for a hybrid world
4️⃣ - Securing AI integration of AI applications in Cloud
AI is here to stay with so many heavy hitters behind it, we are seeing use of cloud native systems for hosting AI, data to be used for LLM etc. As security teams we are now looking at what kind of security is required for these AI integrations in our cloud environments which are now breeding ground for 100s of AI based applications.
Did I miss anything else people should include in their
cloud security program?
Source: This week's Cloud Security Newsletter issue & @cloudsecuritybootcamp
Link to Cloud Security Newsletter - www.cloudsecuritynewsletter.com/
#cloudsecurity #CISO
3 - 0
3 Tools that give me peace of mind about my Cloud Environment during the Labour Day long weekend! 🏖
Many of us in the Cloud Security industry are facing the challenges of complex environments e.g large cloud footprint, multi cloud, multi-compute, hybrid and more. 🏭
At the moment, all Practitioners are swearing by 3 tools that are essentials for their Cloud Security arsenal in their organizations.
1️⃣- CSPM - Cloud Security Posture Management
2️⃣- CNAPP - Cloud Native Application Protection Platform
3️⃣- AI-SPM - AI Security Posture Management
Don't worry i have the video explain what these are. Now there are open source versions to most of these if you are blessed with a technical team that can
🫣 - implement and keep the controls updated
😅- continue to provide visibility across newer services being added by each Cloud Provider you deal with
You could also be like my organization where we use a CNAPP and considering the CNAPP++ option considering our scale.
There are challenges with both paid and open source version but that's for another video. Don't forget to follow Cloud Security Podcast on your favourite audio and video platform to know when that episode comes out.
PS - Shoutout to Dan Benjamin from @PaloAltoNtwks who spend time with me at AWS re:inforce to talk about AI-SPMs.
Should we have a number 4 or 5 Tool that you would swear by for your cloud environment?
#cspm #cnapp #aispm
6 - 0
Where are you from?
If it’s not an option comment below ⬇️
1 - 3
Thank you to our Japan community for helping @CloudSecurityPodcast scale the Apple Podcast Top 100 in Japan. Arigatō (ありがとう)! 🙇🏾
Always blessed with news like this & support shown by the community! 🙏🏾 We rose up ranks in Europe last month and this month Japan. Super grateful for the love we get from the community in how many times we are shared, over 160 positive reviews on Apple & Spotify Podcast. These reviews and ranking just validate what we believe in works, which is to provide value in every episode we release that is new or helpful for majority practitioners in cloud & cloud native security.
What is Cloud Security Podcast?
If you reading about Cloud Security Podcast for the first time, welcome, I'm the CISO who is now host of Cloud Security Podcast, where every week we bring Cloud Security insights and conversations with CyberSecurity Leaders and Practitioners so others can learn from their peers and perhaps learn something that can get that promotion or new job that they have been eyeing for a while.
Cloud Security Podcast - Mission!
We have always made it our mission to only share conversations that provide value and that is still the only reason even after 5yrs of running, we keep climbing Apple Top 100 rankings across US,UK,Australia, France, Switzerland, Japan and many more.
If you want to learn about Cloud Security - i don't think you will find anything better than Cloud Security Podcast, you don't have to trust me just look at our ranking in most countries. If you like to know more - you can find Cloud Security Podcast on all your audio and video platforms. Thank you if you end up following any of our social media accounts.
#top100 #japan #podcast
6 - 0
2024 CyberSecurity Trending Topics for 2025 from RSA Conference which is potentially the largest Cybersecurity conference. Premiering Monday - https://youtu.be/iX_J8me0VfY
8 - 0
Thank you Sweden 🇸🇪! 🙏🏾 Cloud Security Podcast is now on Apple Top 50 Tech Podcast chart in Sweden!
🇸🇪 ❤️ Thank you to the CyberSecurity community in Sweden that have supported my work and made me feel welcome at all the Security conferences in Europe that I attended. I look forward to seeing a lot of you folks in the second half of 2024 with our European tour 🧀 🍷 post BlackHat USA.
🇦🇺 📈 We climbed up Australian chart few weeks ago to Top 50 and now the ripple is happening in Europe too. Australia is where this podcast started and now the love and care shown by it's global community that recommends new topics, new guests and what we can do better makes me really grateful to be part of a supportive community like this. Thank you! 🙏🏾
If you haven't heard of Cloud Security Podcast?
🙇🏾♂️ In case you are reading this and not sure what Cloud Security is about - Welcome! Cloud Security Podcast is an audio video podcast created by Cybersecurity Practitioners where we bring Leaders and Practitioners of CyberSecurity to share on how they solve and address Cloud Security and Cloud Native security challenges. If that is of interest you can search for "Cloud Security Podcast" on your popular audio and video platform and check out episodes on any Cloud Security or Cloud Native Security topic that is top of mind for you. If you don't find your topic, i would love to hear from you to include that in one of our future episodes.
9 - 0
If you are in London 🇬🇧 🐟 🍟 next week or Philadelphia 🇺🇸 🥩 week after - this is where you will find me, if you would like to connect and say hello to the Cloud Security Podcast team!
🕵🏾♂️ Where I will be next week?
- @HashiCorp HashiDays London - Sold Out event
- @Infosecurityeurope - still has Free visitor Pass
👩🏾🚀 What will I be doing?
- Interviewing Cloud & AI Practitioners and Partners for Press Media Interview
- Saying hello to a lot of you attending
- Hopefully catch few talks on Pro-Active Security, Edge Protection and why Europe still loves Private Cloud so much. (just kidding - they love Azure more than AWS or GCP 😅 )
🛫 Week after, where will I be?
Also, week after in Amazon Web Services (AWS @amazonwebservices) Re:inforce (@AWSEventsChannel ) in Philadelphia where Shilpi and I will be there to interview Practitioners and Sponsors.
If you are attending - definitely say hi and if you have any recommendations for things to eat when in Philadelphia, i'm open for recommendations
Is there a questions that is top of mind for your about Cloud Security or AI Cyber Security that I should ask to guests about? (comment below)
11 - 2
"There is no Automation for experience" 🍻 - heard it while waiting at Dublin Airport! 🙏🏾 😮
In a recent episode of Cloud Security Podcast with Rich & Chris which was bonus extension to their RSA 2024 talk that Chris and Rich from couple of weeks ago. They spoke about their "Universal Threat Actor framework" for what happens when you drop someone into a brown field cloud environment i.e there are wheels in motion either with or without security and your job is to get your head around it. This was a good episode to hear as we get closer to AWS re:inforce 2024 next month, even if you are not heading to the event. (link towards the end)
PS - I'm writing this post while waiting for boarding to start for my flight to Dublin,Ireland - if you are into Cloud Security or AI - i would love to connect. Feel free to tag someone I should connect with while here.
PPS - Yes, i also re-visit podcast episodes & yes you will see more of these insights from the past and future episodes from me. 😎
Link to the episode - https://www.youtube.com/watch?v=jFjxh...
#cloudsecurity
4 - 0
We are looking for a new YouTube channel to binge on - Drop your favorite YouTube channel that i can add to my list? (even if it is not CyberSecurity)
2 - 0
@RSAConference (Un-Official) Fashion Week - Final Day!
Thank you to everyone who said yes to be on our RSA fashion week! 🙏🏾
Thank you to all the 500+ people who followed me over the last 3 days! I look forward to connecting and sharing information that is valuable in Cloud Security and AI Security 🙏🏾 with sprinkle of Men’s Fashion. ❤️
I’m on my way back to London - see you folks at the next cybersecurity conference near you!
Hope you get to rest up - signing off for next 48hrs
#rsac #mensfashion
14 - 0
Cloud Security Podcast is a community first WEEKLY VIDEO PODCAST, where each week we interview CyberSecurity Leaders and Cloud Security Practitioners from around the world to help you learn How to and What's HOT in Cloud Security.
Video Host:
Ashish is a Chief Information Security Officer (CISO) who is passionate about helping people get Cloud Security jobs and help CyberSecurity professionals do their job better in Public Cloud. Before being a CISO, Ashish has been a Security Architect, SOC Manager, Cloud Security Engineer, Identity and Access Management Consultant, Pentester(for 1 month).
Cloud Security Meetup
We also hold global meetup events and conferences for Cloud Security enthusiast & practitioners.
Cloud Security BootCamp
Academy to learn unbiased multi-cloud disciplinary Cloud Security practices to help you succeed as a Cloud Security Practitioner. www.cloudsecuritybootcamp.com
All the information is on www.cloudsecuritypodcast.tv