Cloud Security Podcast by Google

View Top 200 Chart

Back to Rankings Page

Technology
**Cloud Security Podcast by Google**

Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users’ data safe and workloads secure.

We’re going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject’s benefit or just for organizational benefit.

We hope you’ll join us if you’re interested in where technology overlaps with process and bumps up against organizational design. We’re hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can’t keep as the world moves from on-premises computing to cloud computing.

Latest Episodes:

EP213 From Promise to Practice: LLMs for Anomaly Detection and Real-World Cloud Security Mar 03, 2025

Show notes

Guest:

Yigael Berger, Head of AI, Sweet Security

Topic:

Where do you see a gap between the "promise" of LLMs for security and how they are actually used in the field to solve customer pains?
I know you use LLMs for anomaly detection. Explain how that "trick" works? What is it good for? How effective do you think it will be?
Can you compare this to other anomaly detection methods? Also, won't this be costly - how do you manage to keep inference costs under control at scale?
SOC teams often grapple with the tradeoff between "seeing everything" so that they never miss any attack, and handling too much noise. What are you seeing emerge in cloud D&R to address this challenge?
We hear from folks who developed an automated approach to handle a reviews queue previously handled by people. Inevitably even if precision and recall can be shown to be superior, executive or customer backlash comes hard with a false negative (or a flood of false positives). Have you seen this phenomenon, and if so, what have you learned about handling it?
What are other barriers that need to be overcome so that LLMs can push the envelope further for improving security?
So from your perspective, LLMs are going to tip the scale in whose favor - cybercriminals or defenders?

Resource:

EP212 Securing the Cloud at Scale: Modern Bank CISO on Metrics, Challenges, and SecOps Feb 24, 2025

Show notes

Guest:

Dave Hannigan, CISO at Nu Bank

Topics:

Tell us about the challenges you're facing as CISO at NuBank and how are they different from your past life at Spotify?
You're a big cloud based operation - what are the key challenges you're tracking in your cloud environments?
What lessons do you wish you knew back in your previous CISO run [at Spotify]?
What metrics do your team report for you to understand the security posture of your cloud environments?
How do you know "your" cloud use is as secure as you want it to be?
You're a former Googler, and I'm sure that's not why, so why did you choose to go with Google SecOps for your organization?

Resources:

EP211 Decoding the Underground: Google's Dual-Lens Threat Intelligence Magic Feb 17, 2025

Show notes

Guest:

Kimberly Goody, Head of Intel Analysis and Production, Google Cloud

Topics:

Google's Threat Intelligence Group (GTIG) has a unique position, accessing both underground forum data and incident response information. How does this dual perspective enhance your ability to identify and attribute cybercriminal campaigns?
Attributing cyberattacks with high confidence is important. Can you walk us through the process GTIG uses to connect an incident to specific threat actors, given the complexities of the threat landscape and the challenges of linking tools and actors?
There is a difficulty of correlating publicly known tool names with the aliases used by threat actors in underground forums. How does GTIG overcome this challenge to track the evolution and usage of malware and other tools? Can you give a specific example of how this "decoding" process works?
How does GTIG collaborate with other teams within Google, such as incident response or product security, to share threat intelligence and improve Google's overall security posture? How does this work make Google more secure?
What does Google (and specifically GTIG) do differently than other organizations focused on collecting and analyzing threat-intelligence? Is there AI involved?

Resources:

EP210 Cloud Security Surprises: Real Stories, Real Lessons, Real "Oh No!" Moments Feb 10, 2025

Show notes

Guest:

Or Brokman, Strategic Google Cloud Engineer, Security and Compliance, Google Cloud

Topics:

Can you tell us about one particular cloud consulting engagement that really sticks out in your memory? Maybe a time when you lifted the hood, so to speak, and were absolutely floored by what you found – good or bad!
In your experience, what's that one thing – that common mistake – that just keeps popping up? That thing that makes you say 'Oh no, not this again!'
'Tools over process' mistake is one of the 'oldies.' What do you still think drives people to it, and how to fix it?
If you could give just one piece of cloud security advice to every company out there, regardless of their size or industry, what would it be?

Resources:

EP209 vCISO in the Cloud: Navigating the New Security Landscape (and Don't Forget Resilience!) Feb 03, 2025

Show notes

Guests:

Beth Cartier, former CISO, vCISO, founder of Initiative Security

Guest host of the CISO mini-series:

Marina Kaganovich, Executive Trust Lead, Office of the CISO @ Google Cloud

Topics:

How is that vCISO'ing going? What is special about vCISO and cloud? Is it easier or harder?
AI, cyber, resilience - all are hot topics these days. In the context of cloud security, how are you seeing organizations realistically address these trends? Are they being managed effectively (finally?) or is security always playing catch up?
Recent events reminded us that cybersecurity may sometimes interfere with resilience. How have you looked to build resilience into your security program?
The topic is perhaps 30+ years old, but security needs to have a seat at the table, and often still doesn't - why do you think this is the case?
What approaches or tips have you found to work well in elevating security within organizations?
Any tips for how cyber professionals can stay up to date to keep up with the current threat landscape vs the threats that are around the corner?

Resources:

EP208 The Modern CISO: Balancing Risk, Innovation, and Business Strategy (And Where is Cloud?) Jan 27, 2025

Show notes

Guest host:

Marina Kaganovich, Executive Trust Lead, Office of the CISO @ Google Cloud

Guest:

John Rogers, CISO @ MSCI

Topics:

Can you briefly walk us through your CISO career path?
What are some of the key (cloud or otherwise) trends that CISOs should be keeping an eye on? What is the time frame for them?
What are the biggest cloud security challenges CISOs are facing today, and how are those evolving?
Given the rapid change of pace in emerging tech, such as what we've seen in the last year or so with gen AI, how do you balance the need to address short-term or imminent issues vs those that are long-term or emergent risks?
What advice do you have for how CISOs can communicate the importance of anticipating threats to their boards and executives?
So, how to be a forward looking and strategic yet not veer into dreaming, paranoia and imaginary risks? How to be futuristic yet realistic?
The CISO role as an official title is a relatively new one, what steps have you taken to build credibility and position yourself for having a seat at the table?

Resources:

EP207 Slaying the Ransomware Dragon: Can a Startup Succeed? Jan 20, 2025

Show notes

Guest:

Bob Blakley, Co-founder and Chief Product Officer of Mimic

Topics:

Tell us about the ransomware problem - isn't this a bit of old news? Circa 2015, right?
What makes ransomware a unique security problem?
What's different about ransomware versus other kinds of malware? What do you make of the "RansomOps" take (aka "ransomware is not malware")?
Are there new ways to solve it?
Is this really a problem that a startup is positioned to solve? Aren't large infrastructure owners better positioned for this? In fact, why haven't existing solutions solved this?
Is this really a symptom of a bigger problem? What is that problem?
What made you personally want to get into this space, other than the potential upside of solving the problem?

Resources:

EP206 Paying the Price: Ransomware's Rising Stakes in the Cloud Jan 13, 2025

Show notes

Guest:

Allan Liska, CSIRT at Recorded Future, now part of Mastercard

Topics:

Ransomware has become a pervasive threat. Could you provide us with a brief overview of the current ransomware landscape?
It's often said that ransomware is driven by pure profit. Can you remind us of the business model of ransomware gangs, including how they operate, their organizational structures, and their financial motivations?
Ransomware gangs are becoming increasingly aggressive in their extortion tactics. Can you shed some light on these new tactics, such as data leaks, DDoS attacks, and threats to contact victims' customers or partners?
What specific challenges and considerations arise when dealing with ransomware in cloud environments, and how can organizations adapt their security strategies to mitigate these risks?
What are the key factors to consider when deciding whether or not to pay the ransom?
What is the single most important piece of advice you would give to organizations looking to bolster their defenses against ransomware?

Resources:

EP205 Cybersecurity Forecast 2025: Beyond the Hype and into the Reality Jan 06, 2025

Show notes

Guest:

Andrew Kopcienski, Principal Intelligence Analyst, Google Threat Intelligence Group

Questions:

You have this new Cybersecurity Forecast 2025 report, what's up with that?
We are getting a bit annoyed about the fear-mongering on "oh, but attackers will use AI." You are a threat analyst, realistically, how afraid are you of this?
The report discusses the threat of compromised identities in hybrid environments (aka "no matter what you do, and where, you are hacked via AD"). What steps can organizations take to mitigate the risk of a single compromised identity leading to a significant security breach? Is this expected to continue?
Is zero-day actually growing? The report seems to imply that, but aren't "oh-days" getting more expensive every day?
Many organizations still lag with detection, in your expertise, what approaches to detection actually work today? It is OK to say "hire Managed Defense", BTW :-)
We read the risk posed by the "Big Four" sections and they (to us) read like "hackers hack" and "APTs APT." What is genuinely new and interesting here?

Resources:

EP204 Beyond PCAST: Phil Venables on the Future of Resilience and Leading Indicators Dec 23, 2024

Show notes

Guest:

Phil Venables, Vice President, Chief Information Security Officer (CISO) @ Google Cloud

Topics

Why is our industry suddenly obsessed with resilience? Is this ransomware's doing?
How did the PCAST report come to be? Can you share the backstory and how it was created?
The PCAST report emphasizes the importance of leading indicators for security and resilience. How can organizations effectively shift their focus from lagging indicators to these leading indicators?
The report also emphasizes the importance of "Cyber-Physical Modularity" - this sounds mysterious to us, and probably our listeners! What is it and how does this concept contribute to enhancing the resilience of critical infrastructure?
The report advocates for regular and rigorous stress testing. How can organizations effectively implement such stress testing to identify vulnerabilities and improve their resilience?
In your opinion, what are the most critical takeaways from our PCAST-related paper for organizations looking to improve their security and resilience posture today?
What are some of the challenges organizations might face when implementing the PCAST recommendations, and how can they overcome these challenges?
Do organizations get resilience benefits "for free" by using Google Cloud?

Resources:

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cloud Security Podcast by Google

Related Podcasts

Links

Stay Connected