

Cloud Security Podcast by Google
Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users' data safe and workloads secure. We're going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject's benefit or just for organizational benefit. We hope you'll join us if you're interested in where technology overlaps with process and bumps up against organizational design. We're hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can't keep as the world moves from on-premises computing to cloud computing.
Episodes


EP212 Securing the Cloud at Scale: Modern Bank CISO on Metrics, Challenges, and SecOps

EP211 Decoding the Underground: Google's Dual-Lens Threat Intelligence Magic

EP210 Cloud Security Surprises: Real Stories, Real Lessons, Real "Oh No!" Moments

EP209 vCISO in the Cloud: Navigating the New Security Landscape (and Don’t Forget Resilience!)

EP208 The Modern CISO: Balancing Risk, Innovation, and Business Strategy (And Where is Cloud?)

EP207 Slaying the Ransomware Dragon: Can a Startup Succeed?

EP206 Paying the Price: Ransomware's Rising Stakes in the Cloud
This interview podcast episode features Allan Liska, a ransomware expert, discussing the current ransomware landscape. The hosts and Allan explore the surprisingly robust and profitable business model behind ransomware, including the "ransomware-as-a-service" ecosystem and the increasingly aggressive tactics used by a...

EP205 Cybersecurity Forecast 2025: Beyond the Hype and into the Reality
This interview-style podcast episode of Google's Cloud Security Podcast features Andrew Kopcienski, a Principal Intelligence Analyst with the Google Threat Intelligence Group (GTIG). The discussion centers on GTIG's annual security forecast, focusing on emerging threats in 2024, particularly the role of AI and the per...

EP204 Beyond PCAST: Phil Venables on the Future of Resilience and Leading Indicators
This panel discussion-style podcast focuses on cybersecurity resilience. The hosts introduce Phil Venables, a frequent guest, and the episode centers on his contributions to a PCAST report on cyber-physical resilience. Key discussion points include defining resilience, the importance of leading indicators over laggin...

EP203 Cloud Shared Responsibility: Beyond the Blame Game with Rich Mogull

EP202 Beyond Tiered SOCs: Detection as Code and the Rise of Response Engineering

EP201 Every CTO Should Be a CSTO (Or Else!) - Transformation Lessons from The Hoff
This interview podcast features Chris Hoff, LastPass's Chief Secure Technology Officer, discussing his experience rebuilding LastPass's infrastructure and security after a significant incident. The conversation begins with a discussion of Hoff's unique title and its implications for integrating security into technolog...

EP200 Zero Touch Prod, Security Rings, and Foundational Services: How Google Does Workload Security

EP199 Your Cloud IAM Top Pet Peeves (and How to Fix Them)

EP198 GenAI Security: Unseen Attack Surfaces & AI Pentesting Lessons
This interview podcast episode focuses on the unique challenges of penetration testing (pentesting) AI applications, particularly Generative AI (GenAI) applications. The host interviews Ante Gojsalic from Splix AI, who highlights key differences from traditional application pentesting, such as the non-deterministic na...

EP197 SIEM (Decoupled or Not), and Security Data Lakes: A Google SecOps Perspective
This interview-style podcast delves into the future of Security Information and Event Management (SIEM) architecture. The discussion centers on two opposing viewpoints: disassembling SIEM into smaller, specialized components versus integrating SIEM more broadly with other security tools (SOAR, EDR, XDR, cloud detecti...

EP196 AI+TI: What Happens When Two Intelligences Meet?
This interview podcast episode of the Cloud Security Podcast by Google features Vijay Ganti, Director of Product Management at Google Cloud Security. The discussion centers on the historical pain points of using threat intelligence, focusing on the fragmentation of vendors, lack of context in threat data (often limite...

EP195 Containers vs. VMs: The Security Showdown!

EP194 Deep Dive into ADR - Application Detection and Response
Follow this podcast in Podwise
Sign in to get AI summaries, transcripts and mind maps for any episode, including new ones.
