Podcasts · Technology

Cloud Security Podcast by Google

Anton Chuvakin

295 episodes

Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users' data safe and workloads secure.

More about the show

We're going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject's benefit or just for organizational benefit.

We hope you'll join us if you're interested in where technology overlaps with process and bumps up against organizational design. We're hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can't keep as the world moves from on-premises computing to cloud computing.

Episodes page 1 of 6

  1. EP293 Farewell (for now?)

    · 22 min · S1 E293

    EP293 Farewell (for now) Tim and Anton reflect on 5 years of podcasting and say farewell to their listeners in the final episode of Cloud Security Podcast by Google. What will the future bring? Resources: • VIdeo…

  2. EP292 Inside Chrome Security: AI Patching, Agents, Rust, and … Your Tabs

    · 36 min · S1 E292

    Guests: • Jasika Bawa, Group Product Manager, Chrome Security • Doug Turner, Engineering Director, Chrome Security Topics: • Gemini agent harness found a sandbox escape that survived in the codebase for 13 years!…

  3. EP291 Ruthless Prioritization: How CISOs Can Execute a Minimum Viable Security Program

    · 36 min

    Guest: • Mike Armistead, CEO, Pulse Security AI • Dan Lamorena, Chief Go-To-Market Officer, Pulse Security AI Topics: • You've described Pulse as an 'operational management platform for cybersecurity leaders.' What…

  4. EP290 Project Atlas: Wiz's AI Vulnerability Research

    · 31 min

    ZeroDay Cloud: How a hacking competition exposed the reality of AI-augmented offensive security. The Power of Multi-Agent AI: Why a single model is not enough, and how specialized agents (Threat Modeling, Hunting,…

  5. EP289 Software Engineering vs. Software Craft: How Google Scalably Eliminates Classes of Vulnerabilities

    · 34 min

    How do you build the foundations for a secure Google-scale enterprise that stays secure even if an AI is writing the code and nobody has time to review it? In this episode, hosts Timothy Peacock and Anton Chuvakin sit…

  6. EP288 CISO Tested, Board Approved: Cloud Resilience with General Mills CISO Noah Korba

    · 26 min

    How do you make sure your favorite cereal is always on the shelves when a cyber disaster strikes? In this episode, hosts Tim Peacock and Alicja Cade sit down with Noah Korba, VP of Digital Core, Cybersecurity, and…

  7. EP287: Creating Trust at Global Scale with Local AI: Reken-ing with Shuman Ghosemajumder

    · 38 min

    Cloud Security Podcast Episode 285: Defending Against the AI DDoS Is internet trust fundamentally broken? On this episode, former Google "Click Fraud Czar" and Reken CEO Shuman Ghosemajumder joins hosts Tim Peacock…

  8. EP286 Building an AI-pilled, solo vibe-coded, Clickhouse-based SIEM with Dan Lussier

    · 27 min

    Can you build a fully functional, high-scale SIEM in just two weeks for under $7,000? In this episode of the Cloud Security Podcast, hosts Tim Peacock and Kyle Champlin sit down with long-time collaborator Dan Lucier,…

  9. EP285 Scaling Lessons from Leading the NSA to Defending the World with Morgan Adamski

    · 20 min

  10. EP284 Closest Alligator to the Canoe: How Transforming SOC Became P0 for Lloyds Bank

    · 26 min

    https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-how-cisos-can-pursue-technical-and-cultural-resilience-q-a?e=48754805

  11. EP283: How Google Cloud CISO Chris Betz Uses LLMs to Defend Billions of Users from Vulnerablities

    · 29 min

  12. EP282: Debating Coupled or Decoupled SIEM with Alex Hurtado and Christopher Witter

    · 49 min

  13. EP281: Deceiving Adversaries at Scale with Kevin Conley

    · 27 min · S1 E282

  14. EP280 Hyperscaling Cloud Security: Wiz Joins the Cloud Security Podcast by Google

    · 30 min · S1 E280

  15. EP279 Native Cloud Security: Is 'Good Enough' Actually Winning?

    · 29 min · S1 E279

    Guests: • Gal Ordo, Co-founder & CPO @ Native Topics: • In Episode 186, we debated 'Native vs. Third-Party' as a binary choice. Native seems to be a third-party vendor whose entire existence depends on the belief…

  16. EP278 The Agentic SOC: Are We Measuring Time Saved or Risk Reduced?

    · 28 min · S1 E278

    Guest: • Matt Gregson, Principal - PwC Cyber Security Topics: • What is the state of the art of "agentic SOC" in 2026? Can you describe the most agentic SOC you've seen so far? • In your experience, what are the…

  17. EP277: CISO as CFO, From Citi to Celery, It's All about the Cabbage

    · 25 min · S1 E277

    Guest: • Arvin Bansal, CISO, C&S Wholesale Grocers Topics: • Most people do not associate grocery wholesale and retail with cutting edge technology and threat models. Can you produce the receipts for why this isn't…

  18. EP276 AI Governance vs. The Hyper-Velocity Agentic Future: A Lawyer's Take

    · 36 min · S1 E276

    Episode co-host: • Marina Kaganovich, Enterprise Trust Lead, Office of the CISO, Google Cloud Guest: • James Sherer, Partner at BakerHostetler Topics • Is AI just an emerging technology or something bigger, deeper…

  19. EP275 Google Cloud Next 2026: The AI Earthquake, "SOC-home" Syndrome, and the Ragged Edge of Reality

    · 20 min · S1 E275

    Guests: • No guests Topics: • So what have we seen at Google Cloud Next 2026? • Any closing loops for our 2023-2025 Cloud Next observations? • We are seeing that AI security is not an island ... what does that tell…

  20. EP274 AI, Zero Trust and Secure by Design Walk into a Bar...

    · 30 min · S1 E274

    Guest: • Grant Dasher, ex-CISA, ex-Google, Distinguished Engineer, Google (again) Topics: • Why is the "Secure-by-Design" movement gaining so much momentum now, and is it a response to the failure of "bolted-on"…

  21. EP273 From CISA to Cloud: AI Assurance, Concentration Risk, and the New Regulatory Frontier

    · 29 min · S1 E273

    Guest: • Jeanette Manfra, VP, Head of Risk and Compliance, Google Cloud Topics: • How does "outsourcing" security to the cloud change the intensity of the security vs. privacy struggle for a CISO? • Does the…

  22. EP272 More Than Just Packets: Is NDR a "First-Class" Cloud Security Control?

    · 34 min · S1 E272

    Guest: • Raja Mukerji, Co-Founder & Chief Scientist, Extrahop • Rafal Los, VP of Client Relations and Strategic Initiatives, Extrahop Topics: • Is Network Detection and Response (NDR) coming back after being shoved…

  23. EP271 Can AI-Native MDR Actually Fix Your Broken SOC Workflows or Just Automate the Mess?

    · 27 min · S1 E271

    Guests: • Eric Foster, CEO, Tenex.AI • Bashar Abouseido, President, Tenex.AI Topics: • "10X SOC" sounds great. But for an organization stuck in "SIEM 1.0" with poor data quality and manual workflows, is "AI-native…

  24. EP270 The Convenience Tax: Why We Keep Failing at Supply Chain Security

    · 27 min · S1 E270

    Guest: • Dan Lorenc, Founder / CEO, Chainguard Topics: • We just saw a security tool (Trivy) get used to pop an AI infrastructure tool (LiteLLM) to eventually pop end users. Have we reached the point where our…

  25. EP269 Reflections on RSA 2026 - Beyond AI AI AI AI AI AI AI

    · 33 min · S1 E269

    Guests: • No guests! Just Tim and Anton Topics: • Hard to believe we've been doing these since 2022, is that right? • What did we see this year at RSA, apart from AI? And more AI? And more AI? • What framework can…

  26. EP268 Weaponizing the Administrative Fabric: Cloud Identity and SaaS Compromise in M Trends 2026

    · 34 min · S1 E268

    Guests: • Kelli Vanderlee, Senior Manager, Threat Analysis, Mandiant, Google Cloud • Scott Runnels, Mandiant Incident Response, Google Cloud Topics: • Do we need to rethink "Mean Time to Respond" entirely, or are we…

  27. EP267 AI SOC or AI in a SOC? Cutting Through Hype, Pricing Models, and SIEM Detection Efficacy with Raffy Marty

    · 36 min · S1 E267

    Guest: • Raffael Marty, Operating Advisor, a SIEM legend since 1999 Topics: • You argue that declaring existing SIEM being obsolete is a "marketing slogan" rather than a true thesis. What is the real pain point and…

  28. EP266 Resetting the SOC for Code War: Allie Mellen on Detecting State Actors vs. Doing the Basics

    · 33 min · S1 E266

    Guest: • Allie Mellen, Principal Analyst @ Forrester, author of "Code War: How Nations Hack, Spy, and Shape the Digital Battlefield" Topics: • Your book focuses on the US, China, and Russia. When you were planning…

  29. EP265 Beyond Shadow IT: Unsanctioned AI Agents Don't Just Talk, They Act!

    · 29 min · S1 E265

    Guest: • Alastair Paterson, CEO and co-founder @ Harmonic Security Topics: • Harmonic Security focuses on securing generative AI in use. Can you walk us through a real, anonymized example of a data leak caused by…

  30. EP264 Measuring Your (Agentic) SOC: Two Security Leaders Walk into a Podcast

    · 34 min · S1 E264

    Guests: • Alexander Pabst, Global Deputy CISO, Allianz SE • Michael Sinno, Director of D&R, Google Topics: • We've spent decades obsessed with MTTD (Mean Time to Detect) and MTTR (Mean Time to Respond). As AI agents…

  31. EP263 SOC Refurbishing: Why New Tools Won't Fix Broken Processes (Even With AI)

    · 33 min · S1 E263

    Guest: • Daniel Lyman, VP of Threat Detection and Response, Fiserv Topics: • What is the right way for people to bridge the gap and translate executive dreams and board goals into the reality of life on the ground?…

  32. EP262 Freedom, Responsibility, and the Federated Guardrails: A New Model for Modern Security

    · 29 min · S1 E262

    Guest: • Alex Shulman-Peleg, Global CISO at Kraken Topics: • You mentioned that centralized security can't work anymore. Can you elaborate on the key changes—driven by cloud, SaaS, and AI—that have made this…

  33. EP261 No More Aspiration: Scaling a Modern SOC with Real AI Agents

    · 29 min · S1 E261

    Guest: • Dennis Chow, Director of Detection Engineering at UKG Topics: • We ended our season talking about the AI apocalypse. In your opinion, are we living in the world that the guests describe in their apocalypse…

  34. EP260 The Agentic IAM Trainwreck: Why Your Bots Need Better Permissions Than Your Admins

    · 30 min · S1 E260

    Guest: • Vishwas Manral, CEO at Precize.ai Topic: • Why is agent security so different from "just" LLM security? • Why now? Agents are coming, sure, but they are - to put it mildly - not in wide use. Why create a…

  35. EP259 Why DeepMind Built a Security LLM Sec-Gemini and How It Beats the Generalists

    · 34 min · S1 E259

    Guest: • Elie Burstein, Distinguished Scientist, Google Deepmind Topics: • What is Sec-Gemini, why are we building it? • How does DeepMind decide when to create something like Sec-Gemini? • What motivates a decision…

  36. EP258 Why Your Security Strategy Needs an Immune System, Not a Fortress with Royal Hansen

    · 32 min · S1 E258

    Guest: • Royal Hansen, VP of Engineering at Google, former CISO of Alphabet Topics: • The "God-Like Designer" Fallacy: You've argued that we need to move away from the "God-like designer" model of security—where we…

  37. EP257 Beyond the 'Kaboom': What Actually Breaks When OT Meets the Cloud?

    · 27 min · S1 E257

    Guest: • Chris Sistrunk, Technical Leader, OT Consulting, Mandiant Topics: • When we hear "attacks on Operational Technology (OT)" some think of Stuxnet targeting PLCs or even backdoored pipeline control software…

  38. EP256 Rewiring Democracy & Hacking Trust: Bruce Schneier on the AI Offense-Defense Balance

    · 33 min · S1 E256

    Guest: • Bruce Schneier Topics: • Do you believe that AI is going to end up being a net improvement for defenders or attackers? Is short term vs long term different? • We're excited about the new book you have…

  39. EP255 Separating Hype from Hazard: The Truth About Autonomous AI Hacking

    · 30 min · S1 E255

    Guest: • Heather Adkins, VP of Security Engineering, Google Topic: • The term "AI Hacking Singularity" sounds like pure sci-fi, yet you and some other very credible folks are using it to describe an imminent threat.…

  40. EP254 Escaping 1990s Vulnerability Management: From Unauthenticated Scans to AI-Driven Mitigation

    · 31 min · S1 E254

    Guest: • Caleb Hoch, Consulting Manager on Security Transformation Team, Mandiant, Google Cloud Topics: • How has vulnerability management (VM) evolved beyond basic scanning and reporting, and what are the biggest…

  41. EP253 The Craft of Cloud Bug Hunting: Writing Winning Reports and Secrets from a VRP Champion

    · 28 min

    Guests: • Sivanesh Ashok, bug bounty hunter • Sreeram KL, bug bounty hunter Topics: • We hear from the Cloud VRP team that you write excellent bugbounty reports - is there any advice you'd give to other researchers…

  42. EP252 The Agentic SOC Reality: Governing AI Agents, Data Fidelity, and Measuring Success

    · 36 min · S1 E252

    Guests: • Alexander Pabst, Deputy Group CISO, Allianz • Lars Koenig, Global Head of D&R, Allianz Topics: • Moving from traditional SIEM to an agentic SOC model, especially in a heavily regulated insurer, is a…

  43. EP251 Beyond Fancy Scripts: Can AI Red Teaming Find Truly Novel Attacks?

    · 25 min · S1 E251

    Guest: • Ari Herbert-Voss, CEO at RunSybil Topics: • The market already has Breach and Attack Simulation (BAS), for testing known TTPs. You're calling this 'AI-powered' red teaming. Is this just a fancy LLM…

  44. EP250 The End of "Collect Everything"? Moving from Centralization to Data Access?

    · 29 min · S1 E250

    Guest: • Balazs Scheidler, CEO at Axoflow, original founder of syslog-ng Topics: • Are we really coming to "access to security data" and away from "centralizing the data"? • How to detect without the same storage…

  45. EP249 Data First: What Really Makes Your SOC 'AI Ready'?

    · 31 min · S1 E249

    Guest: • Monzy Merza, co-founder and CEO at Crogl Topics: • We often hear about the aspirational idea of an "IronMan suit" for the SOC—a system that empowers analysts to be faster and more effective. What does this…

  46. EP248 Cloud IR Tabletop Wins: How to Stop Playing Security Theater and Start Practicing

    · 33 min · S1 E248

    Guest: • Jibran Ilyas, Director for Incident Response at Google Cloud Topics: • What is this tabletop thing, please tell us about running a good security incident tabletop? • Why are tabletops for incident response…

  47. EP247 The Evolving CISO: From Security Cop to Cloud & AI Champion

    · 29 min · S1 E247

    Guest: • David Gee, Board Risk Advisor, Non-Executive Director & Author, former CISO Topics: • Drawing from the "Aspiring CIO and CISO" book's focus on continuous improvement, how have you seen the necessary skills,…

  48. EP246 From Scanners to AI: 25 Years of Vulnerability Management with Qualys CEO Sumedh Thakar

    · 37 min · S1 E246

    Guest: • Sumedh Thakar, President and CEO, Qualys Topics: • How did vulnerability management (VM) change since Qualys was founded in 1999? What is different about VM today? • Can we actually remediate…

  49. EP245 From Consumer Chatbots to Enterprise Guardrails: Securing Real AI Adoption

    · 34 min · S1 E245

    Guest: • Rick Caccia, CEO and Co-Founder, Witness AI Topics: • In what ways is the current wave of enterprise AI adoption different from previous technology shifts? If we say "but it is different this time", then…

  50. EP244 The Future of SOAPA: Jon Oltsik on Platform Consolidation vs. Best-of-Breed in the Age of Agentic AI

    · 28 min · S1 E244

    Guest: • Jon Oltsik, security researcher, ex-ESG analyst Topics: • You invented the concept of SOAPA – Security Operations & Analytics Platform Architecture. As we look towards SOAPA 2025, how do you see the ongoing…

Shows are listed from Apple Podcasts' charts and directory, and Podcast Index where it is used. Every show and episode belongs to its publisher and plays from the publisher's own feed; this site hosts none of them. Explicit shows are for adult profiles only, and children’s profiles hear only children’s shows. More about this list.