loader from loading.io

EP265 Beyond Shadow IT: Unsanctioned AI Agents Don't Just Talk, They Act!

Cloud Security Podcast by Google

Release Date: 03/02/2026

EP291 Ruthless Prioritization: How CISOs Can Execute a Minimum Viable Security Program show art EP291 Ruthless Prioritization: How CISOs Can Execute a Minimum Viable Security Program

Cloud Security Podcast by Google

Guest: ,  CEO, Pulse Security AI , Chief Go-To-Market Officer,  Topics:  You’ve described Pulse as an 'operational management platform for cybersecurity leaders.' What does a security management platform look like in practice?  How does Pulse bridge this 'translation layer' gap? How do you help a CISO transition from presenting patch rates and MTTD to discussing liability exposure and business capital allocation? What actually gets better when someone works with Pulse? Other than, of course, your ARR numbers for your next funding round? What is the single most...

info_outline EP290 Project Atlas: Wiz's AI Vulnerability Research show art EP290 Project Atlas: Wiz's AI Vulnerability Research

Cloud Security Podcast by Google

ZeroDay Cloud: How a hacking competition exposed the reality of AI-augmented offensive security. The Power of Multi-Agent AI: Why a single model is not enough, and how specialized agents (Threat Modeling, Hunting, Triage, and Adversarial Debate) collaborate like a human team. GitHub RCE & CosmosDB Cross Tenant Access: A breakdown of the record-breaking bounty for the GitHub RCE report and the Azure CosmosDB master key vulnerability discovered by Atlas. Humans vs. AI: Whether vulnerability researchers are becoming "buggy whip manufacturers" or if human insight, instinct, and the smell of...

info_outline EP289 Software Engineering vs. Software Craft: How Google Scalably Eliminates Classes of Vulnerabilities show art EP289 Software Engineering vs. Software Craft: How Google Scalably Eliminates Classes of Vulnerabilities

Cloud Security Podcast by Google

How do you build the foundations for a secure Google-scale enterprise that stays secure even if an AI is writing the code and nobody has time to review it? In this episode, hosts Timothy Peacock and Anton Chuvakin sit down with Christoph Kern, Principal Security Engineer at Google, to look under the hood of "secure-by-design." They trace Google’s 15-year engineering journey to fundamentally eliminate entire classes of vulnerabilities rather than just playing whack-a-mole with bugs after they are written. 🛠️ Software Engineering vs. Software Craft: Why Google ditched "be careful"...

info_outline EP288 CISO Tested, Board Approved: Cloud Resilience with General Mills CISO Noah Korba show art EP288 CISO Tested, Board Approved: Cloud Resilience with General Mills CISO Noah Korba

Cloud Security Podcast by Google

How do you make sure your favorite cereal is always on the shelves when a cyber disaster strikes? In this episode, hosts Tim Peacock and Alicja Cade sit down with Noah Korba, VP of Digital Core, Cybersecurity, and Enterprise Architecture at General Mills, to look under the hood of "Mills Collaborative Recovery"—their intensive, annual two-week drill that actually recovers 90% of their Google Cloud estate to test real-world cyber resilience. ⌨️ "Clicking and Clacking" vs. Talking: Why General Mills ditched traditional tabletop discussions to actually...

info_outline EP287: Creating Trust at Global Scale with Local AI: Reken-ing with Shuman Ghosemajumder show art EP287: Creating Trust at Global Scale with Local AI: Reken-ing with Shuman Ghosemajumder

Cloud Security Podcast by Google

Cloud Security Podcast Episode 285: Defending Against the AI DDoS Is internet trust fundamentally broken? On this episode, former Google "Click Fraud Czar" and Reken CEO Shuman Ghosemajumder joins hosts Tim Peacock and Nolan Karpinski to trace the evolution of automated fraud—from Gmail's early invite days to the origin of "credential stuffing." Discover why today’s threat landscape feels like an AI DDoS, how cybercriminals exploit the "Smart Cow" resource model, and why running security models on-device is our best shot at defending against scaled...

info_outline EP286 Building an AI-pilled, solo vibe-coded, Clickhouse-based SIEM with Dan Lussier show art EP286 Building an AI-pilled, solo vibe-coded, Clickhouse-based SIEM with Dan Lussier

Cloud Security Podcast by Google

Can you build a fully functional, high-scale SIEM in just two weeks for under $7,000? In this episode of the Cloud Security Podcast, hosts Tim Peacock and Kyle Champlin sit down with long-time collaborator Dan Lucier, Founder of Nano, to unpack how he "vibe-coded" an entire SIEM from scratch during his end-of-year holiday break. Dan shares his journey of leveraging bleeding-edge AI code assistants to go from a Postgres prototype to a blazing-fast, production-ready SIEM built on Rust and ClickHouse. In this episode, we cover: 🛠️ The...

info_outline EP285 Scaling Lessons from Leading the NSA to Defending the World with Morgan Adamski show art EP285 Scaling Lessons from Leading the NSA to Defending the World with Morgan Adamski

Cloud Security Podcast by Google

info_outline EP284 Closest Alligator to the Canoe: How Transforming SOC Became P0 for Lloyds Bank show art EP284 Closest Alligator to the Canoe: How Transforming SOC Became P0 for Lloyds Bank

Cloud Security Podcast by Google

https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-how-cisos-can-pursue-technical-and-cultural-resilience-q-a?e=48754805

info_outline EP283: How Google Cloud CISO Chris Betz Uses LLMs to Defend Billions of Users from Vulnerablities show art EP283: How Google Cloud CISO Chris Betz Uses LLMs to Defend Billions of Users from Vulnerablities

Cloud Security Podcast by Google

info_outline EP282: Debating Coupled or Decoupled SIEM with Alex Hurtado and Christopher Witter show art EP282: Debating Coupled or Decoupled SIEM with Alex Hurtado and Christopher Witter

Cloud Security Podcast by Google

info_outline
 
More Episodes

Guest:

Topics:

  • Harmonic Security focuses on securing generative AI in use. Can you walk us through a real, anonymized example of a data leak caused by employee AI usage that your platform has identified?
  • AI governance gets thrown around a lot. What does this mean in the context of Shadow AI? How should organizations be thinking about governing AI in light of upcoming AI regulations in the US and in the EU?
  • If we generally agree that employees are using AI tools before they are sanctioned, how can organizations control this? Network, API, endpoint?
  • Many organizations struggle with the "ban vs. embrace" debate for generative AI. Based on your experience, what's a compelling argument for moving from a blanket ban to a managed, secure adoption model? Can you share a success story where this approach demonstrably reduced risk?
  • The term "shadow AI" is often used interchangeably with "shadow IT" (but for AI-powered applications)  but you've highlighted that AI is a different beast. What is the single biggest distinction between managing the risk of unsanctioned AI tools versus unsanctioned IT applications?
  • Looking forward, where do you see the biggest risks in the evolution of shadow AI? For instance, will the next threat be from highly specialized AI agents trained on proprietary data, or from the rapid proliferation of new, unmonitored open-source models?
  • Given the speed of change in this space, what's one piece of advice you'd give to a CISO today who is just beginning to get a handle on their organization's shadow AI problem?

Resources: