EP269 Reflections on RSA 2026 - Beyond AI AI AI AI AI AI AI
Cloud Security Podcast by Google
Release Date: 03/30/2026
Cloud Security Podcast by Google
Guest: , CEO, Pulse Security AI , Chief Go-To-Market Officer, Topics: You’ve described Pulse as an 'operational management platform for cybersecurity leaders.' What does a security management platform look like in practice? How does Pulse bridge this 'translation layer' gap? How do you help a CISO transition from presenting patch rates and MTTD to discussing liability exposure and business capital allocation? What actually gets better when someone works with Pulse? Other than, of course, your ARR numbers for your next funding round? What is the single most...
info_outlineCloud Security Podcast by Google
ZeroDay Cloud: How a hacking competition exposed the reality of AI-augmented offensive security. The Power of Multi-Agent AI: Why a single model is not enough, and how specialized agents (Threat Modeling, Hunting, Triage, and Adversarial Debate) collaborate like a human team. GitHub RCE & CosmosDB Cross Tenant Access: A breakdown of the record-breaking bounty for the GitHub RCE report and the Azure CosmosDB master key vulnerability discovered by Atlas. Humans vs. AI: Whether vulnerability researchers are becoming "buggy whip manufacturers" or if human insight, instinct, and the smell of...
info_outlineCloud Security Podcast by Google
How do you build the foundations for a secure Google-scale enterprise that stays secure even if an AI is writing the code and nobody has time to review it? In this episode, hosts Timothy Peacock and Anton Chuvakin sit down with Christoph Kern, Principal Security Engineer at Google, to look under the hood of "secure-by-design." They trace Google’s 15-year engineering journey to fundamentally eliminate entire classes of vulnerabilities rather than just playing whack-a-mole with bugs after they are written. 🛠️ Software Engineering vs. Software Craft: Why Google ditched "be careful"...
info_outlineCloud Security Podcast by Google
How do you make sure your favorite cereal is always on the shelves when a cyber disaster strikes? In this episode, hosts Tim Peacock and Alicja Cade sit down with Noah Korba, VP of Digital Core, Cybersecurity, and Enterprise Architecture at General Mills, to look under the hood of "Mills Collaborative Recovery"—their intensive, annual two-week drill that actually recovers 90% of their Google Cloud estate to test real-world cyber resilience. ⌨️ "Clicking and Clacking" vs. Talking: Why General Mills ditched traditional tabletop discussions to actually...
info_outlineCloud Security Podcast by Google
Cloud Security Podcast Episode 285: Defending Against the AI DDoS Is internet trust fundamentally broken? On this episode, former Google "Click Fraud Czar" and Reken CEO Shuman Ghosemajumder joins hosts Tim Peacock and Nolan Karpinski to trace the evolution of automated fraud—from Gmail's early invite days to the origin of "credential stuffing." Discover why today’s threat landscape feels like an AI DDoS, how cybercriminals exploit the "Smart Cow" resource model, and why running security models on-device is our best shot at defending against scaled...
info_outlineCloud Security Podcast by Google
Can you build a fully functional, high-scale SIEM in just two weeks for under $7,000? In this episode of the Cloud Security Podcast, hosts Tim Peacock and Kyle Champlin sit down with long-time collaborator Dan Lucier, Founder of Nano, to unpack how he "vibe-coded" an entire SIEM from scratch during his end-of-year holiday break. Dan shares his journey of leveraging bleeding-edge AI code assistants to go from a Postgres prototype to a blazing-fast, production-ready SIEM built on Rust and ClickHouse. In this episode, we cover: 🛠️ The...
info_outlineCloud Security Podcast by Google
info_outlineCloud Security Podcast by Google
https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-how-cisos-can-pursue-technical-and-cultural-resilience-q-a?e=48754805
info_outlineCloud Security Podcast by Google
info_outlineCloud Security Podcast by Google
info_outlineGuests:
- No guests! Just Tim and Anton
Topics:
- Hard to believe we've been doing these since 2022, is that right?
- What did we see this year at RSA, apart from AI? And more AI? And more AI?
- What framework can we use to understand the approaches vendors take to AI and security? Just saying “AI washing” is not enough!
- How to tell “AI washer” from “AI tourist”?
- I sense that “securing AI” (and agents) is finally growing as fast as "using AI for security”, do you agree?
- Is the AI vulnerability apocalypse coming? Soon?
- Have we seen any signs of AI backlash?
Resource:
- Video version
- EP223 AI Addressable, Not AI Solvable: Reflections from RSA 2025
- RSA 2025: AI’s Promise vs. Security’s Past — A Reality Check blog
- EP172 RSA 2024: Separating AI Signal from Noise, SecOps Evolves, XDR Declines?
- EP119 RSA 2023 - What We Saw, What We Learned, and What We're Excited About
- EP70 Special - RSA 2022 Reflections - Securing the Past vs Securing the Future
- EP255 Separating Hype from Hazard: The Truth About Autonomous AI Hacking
- EP256 Rewiring Democracy & Hacking Trust: Bruce Schneier on the AI Offense-Defense Balance