Cloud computing security
25
MENTIONS
10
EPISODES
10
PODCASTS
Search complete. 25 mentions across 10 episodes found for "Cloud computing security".
Sep 15, 2026
Brian ContosHOST
So you really do need to focus on that resiliency, that ability to detect nefarious activity and respond to it quickly.
Brian ContosHOST
Do you think that's kind of leading the charge now, detection and response, when it comes to cloud security?
Bill CrowellGUEST
No, I think that's right.
Bill CrowellGUEST
And that's one of the reasons that the whole zero trust for the cloud approach is important because it allows you to contain, if you will, micro segment the cloud.
Andrey KurenkovHOST
And sticking with Anthropic, next, bringing the cybersecurity capabilities of Cloud Mythos 5 to more defenders.
Andrey KurenkovHOST
So Mythos 5 is now available in Cloud Security for enterprise customers, enabling code-based vulnerability scanning with suggested patches billed as standard token security.
Andrey KurenkovHOST
This is expanding from a prior program where we had Project Glasswing.
Andrey KurenkovHOST
They partnered with some limited organizations.
Francis BreroGUEST
But then there are things where, you know, when the new capabilities for generating images came out, it changed the way we thought about how do we generate images in marketing.
Francis BreroGUEST
Like when Midjourney came out, it changed, like, how do we think about doing Dex? Like Gamma came out, then like Cloud Design came out, and then we have Cloud Security.
Francis BreroGUEST
And so we have people in these teams that are testing those and like kind of being the trailblazers to determine, does this fit in any problem that we have as an organization? And then we roll it out to the rest of the team.
Francis BreroGUEST
The truth of it is the majority of the releases are not that relevant to the team.
Rob T. LeeGUEST
And I use that TSA analogy here is 'cause you would theoretically be able to do a lot more damage, you know, even, um...
Rob T. LeeGUEST
Ed, I'm not sure if you saw some of the output from Jason Clinton's talk just from our own summit a couple days ago at Cloud Security, is that he said we're only months away from a teenager having the literal capabilities of a nation state attacker from their basement.
Rob T. LeeGUEST
When you have that amount of lethality and the only thing that was holding back nation state attacks was the fact that they didn't know when it would go kinetic, meaning that if we did this, would we actually have, you know, something hit us physically.
Sean AtkinsonHOST
Yeah.
9 MINS LATER
Rob T. LeeGUEST
And then you'll start to see, okay, all the different configuration things that you actually had to put in place, you know.
Rob T. LeeGUEST
But not enough people in cybersecurity are doing that.
Rob T. LeeGUEST
How many people in cloud security actually built a cloud cluster that they managed? This is, again, something I see, you know, the rudimentary skills in some cases.
Rob T. LeeGUEST
You're asked to defend a thing you actually never built.
Rob T. LeeGUEST
And I use that TSA analogy here is 'cause you would theoretically be able to do a lot more damage, you know, even, um...
Rob T. LeeGUEST
Ed, I'm not sure if you saw some of the output from Jason Clinton's talk just from our own summit a couple days ago at Cloud Security, is that he said we're only months away from a teenager having the literal capabilities of a nation state attacker from their basement.
Rob T. LeeGUEST
When you have that amount of lethality, and the only thing that was holding back nation state attacks was the fact that they didn't know when it would go kinetic, meaning that if we did this, would we actually have, you know, something hit us physically.
Sean AtkinsonHOST
Yeah.
9 MINS LATER
Rob T. LeeGUEST
And then you'll start to see, okay, all the different configuration things that you actually had to put in place, you know.
Rob T. LeeGUEST
But not enough people in cybersecurity are doing that.
Rob T. LeeGUEST
How many people in cloud security actually built a cloud cluster that they managed? This is, again, something I see, you know, the rudimentary skills in some cases.
Rob T. LeeGUEST
You're asked to defend a thing you actually never built.
Steve GibsonHOST
They're trying to manage... mythos fives power so that it's used for good only for good so what's interesting is the way they did this uh their posting said We're sharing an update on our efforts to help more teams use frontier capabilities for cyber defense.
Steve GibsonHOST
Cloud Mythos 5 is now available in cloud security and coming soon to partners cyber defense tools.
Steve GibsonHOST
We're also launching a $35 million fund to help secure open source software and sharing plans to expand our cyber verification program.
Steve GibsonHOST
And then now they're going to break all that down.
8 MINS LATER
Steve GibsonHOST
There's no way it could be abused.
Steve GibsonHOST
So anyway, that's beginning to happen.
Steve GibsonHOST
Okay, so next up is making cloud security available with Mythos 5 for enterprise customers.
Steve GibsonHOST
They write, starting today, cloud security scan, when today mean last Friday, cloud security scans now run on cloud Mythos 5.
speaker_0HOST
Anthropic is applying that capability to security.
speaker_0HOST
Cloud Mythos 5 is available for code scanning through Cloud Security, with direct user prompting restricted.
speaker_0HOST
The scans trace repository data flows, identify weaknesses, assign CWB labels, and suggest patches.
speaker_0HOST
Public beta access is available to cloud enterprise customers.
Thomas RichardHOST
Yeah.
Jeff BaileyGUEST
I, my main background, I spent a few years in cloud security.
Jeff BaileyGUEST
It's like, I may know a little about cloud security, but there's always that issue as a manager, it's just like as soon as I give my opinion on anything, that becomes the answer and that becomes the default.
Jeff BaileyGUEST
So you wanna make sure, like, I wanna make sure if I ever say something, I want my team to always be able to challenge me, especially the, like, the folks that we hired to be the experts in their field.
Jeff BaileyGUEST
If I say something about application security, I want my application security engineer to go, "Jeff, that's not a very good idea." And I want him to say that on a call with other stakeholders.
Jeff BaileyGUEST
Yeah, absolutely.
Jeff BaileyGUEST
Just like a whole, kinda like a paradigm shift.
Jeff BaileyGUEST
When I moved from doing the SOC endpoint and went into the security engineering, kind of the cloud security, it was just like, "Oh, the, the biggest risk is a misconfiguration.
James BerthotyGUEST
I was very close to the cloud security adoption early on.
James BerthotyGUEST
And what surprised me about AI is it's much more of like a executive push from day one than cloud was.
James BerthotyGUEST
But there's like this mandate from a lot of executive teams to where if you're not adopting AI, you're like a dead company.
Mackenzie JacksonHOST
It's no secret that in security, every single vendor is going to tell you that they solve all your problems.
Mackenzie JacksonHOST
When you cut through the marketing noise, the acronym soup and the vendor fluff, what actually stops a breach? Today, I'm joined by James Bathouti, a cloud security engineer and FedRAMP survivor who became an analyst and built Latio, a practitioner-first analyst firm tearing down vendor BS.
Mackenzie JacksonHOST
I brought on James to cut straight to the truth.
Mackenzie JacksonHOST
What's actually winning in security during the AI revolution? And is it finally time that we throw away our traditional sass and SCA scanners.
Mackenzie JacksonHOST
I really liked the journey of kind of how you, how you got there because I think it probably provides a lot of credibility as to like what, like, you know, not, not there's anything wrong with the analyst industry, right? We all love Gartner.