Cloud Security Podcast
TechRiot.io
Learn Cloud Security in Public Cloud and for AI systems, the unbiased way from CyberSecurity Experts solving challenges at Cloud Scale. We are honest because we are not owned by Cloud Service Provider like AWS, Azure or Google Cloud. We aim to make the community learn Cloud Security through community stories from small - Large organisations solving multi-cloud challenges to diving into specific topics of Cloud Security. We STREAM interviews on Cloud Security Topics every week on Linkedin,…
Recent Episodes
Securing Millions of AI-built Apps: How Lovable Defends Against Insider Threats
Sep 11, 2026Marcus Hallberg and Samuel Kelemen, security engineers at Lovable (an AI software creation platform), discuss how they detect and defend against insider threats and supply chain attacks targeting AI-generated applications. The episode covers a sophisticated attack where malicious contractors mimicked AI agent commits to inject code into customer projects, along with Lovable's multi-layered defense strategy including predefined tech stacks, integrated security scanners, and tuned coding agents with strict guardrails. They explore the evolution of shared responsibility in the AI era, the importance of Git commit signing and secure sandboxed environments, and how platforms can empower users through AI-assisted security tools like "CISO agents."
Why AI Won't Replace Your SOC: Federated Data & APEX Framework
Sep 1, 2026Nicole Beckwith, Senior Director of Security Engineering & Operations at Cribl, discusses how AI is transforming detection engineering and security operations. She breaks down Cribl's open APEX framework, which uses behavioral chaining, time-boxing, and clustering to build high-fidelity detections without requiring thousands of individual rules. The conversation covers the shift from IOC-based detections to behavior-based detection, federated data architecture, and practical approaches to securing AI agents in SOC environments.
The "Hunt First" AI Security Strategy
Aug 25, 2026Damien Lewke, Founder and CEO of Nebulock, discusses the "Hunt First" mindset in security operations—a proactive approach that prioritizes threat hunting over reactive alert management. He explains how AI is democratizing threat hunting capabilities for organizations of all sizes, enabling even small teams to surface unknown intrusions by analyzing raw telemetry across endpoint, identity, and cloud data. The conversation covers shadow AI detection, the role of AI against AI threats, and why threat hunters' skills are becoming more valuable rather than obsolete in an increasingly sophisticated threat landscape.
Shadow AI & Sandbox Escapes: Why You Need an Agentic Control Plane?
Aug 18, 2026Michael Leland, VP Field CTO at Island, discusses the critical need for an Agentic Control Plane to secure AI agent activities across the enterprise. He explains why traditional security tools (EDR, DLP, CASB) fail to provide visibility into autonomous AI agents, the risks of Shadow AI and well-intentioned employees exposing sensitive data to public LLMs, and practical strategies including token brokering, model fit steering, and managing the "two-hop problem" when agents call other agents.
How Adobe Uses AI Agents for building a WAF Pipeline?
Aug 4, 2026Ammar Alim, Product Security Engineering Lead at Adobe, discusses how to build an automated, agentic WAF pipeline to respond to vulnerabilities within 24-hour exploit windows. He explains Adobe's approach to managing seven different commercial and open-source WAFs using AI agents, multi-model architectures, and reinforcement learning to generate, test, and deploy virtual patches at scale.
Why Runtime Agents Are Replacing Static Posture Checks
Jul 28, 2026Siddharta Tiger, Senior Director of Product Management for Cortex Cloud at Palo Alto Networks, discusses how AI agents and LLMs are fundamentally changing cloud and application security. The conversation covers the convergence of AppSec and cloud security driven by shortened attack windows (as little as 24 hours or less), the shift from static posture checks to runtime agent protection, and why organizations must adopt a unified product security approach that combines infrastructure, identity, data, and application insights rather than maintaining siloed security programs.
The Hidden Cost of BlackBox AI: Bridging Cloud and Code Security
Jul 9, 2026Who Governs Your AI Agents? Identity, Offboarding & Open Standards
Jul 2, 2026AI-Powered Forensics: How Attackers Automate Breaches
Jun 23, 2026The 4 Pillars of AI SOC:From Threat Hunting to Vibe Hunting
Jun 16, 2026
Show artwork and metadata belong to the publisher and are shown here editorially, as part of documenting the corpus behind our analyses. Inclusion does not imply any endorsement of, or by, Parsed Analytics.