EP289 Software Engineering vs. Software Craft: How Google Scalably Eliminates Classes of Vulnerabilities

More from Cloud Security Podcast by Google All episodes →

1. 

   S1 · E293 · 31 Aug 2026 · 22 min

   EP293 Farewell (for now?)

   EP293 Farewell (for now) Tim and Anton reflect on 5 years of podcasting and say farewell to their listeners in the final episode of Cloud Security Podcast by Google. What will the future bring? Resources: VIdeo version Show YouTube page Show on Apple Podcasts Show on Spotify

2. 

   S1 · E292 · 25 Aug 2026 · 36 min

   EP292 Inside Chrome Security: AI Patching, Agents, Rust, and … Your Tabs

   Guests: Jasika Bawa, Group Product Manager, Chrome Security Doug Turner, Engineering Director, Chrome Security Topics: Gemini agent harness found a sandbox escape that survived in the codebase for 13 years! How did that happen and how did that bug get noticed among what's surely a tidal wave of bugs being found by the machines? Chrome 149 and 150 fixed over a thousand security bugs—surpassing the last 23 milestones combined. That is a massive spike! T he blog explains it's possible by having 'fixing agents' and 'critic agents' working in a loop that mimics human code reviews. I have to ask:…

3. 

   S1 · 18 Aug 2026 · 36 min

   EP291 Ruthless Prioritization: How CISOs Can Execute a Minimum Viable Security Program

   Guest: Mike Armistead , CEO, Pulse Security AI Dan Lamorena , Chief Go-To-Market Officer, Pulse Security AI Topics: You've described Pulse as an 'operational management platform for cybersecurity leaders.' What does a security management platform look like in practice? How does Pulse bridge this 'translation layer' gap? How do you help a CISO transition from presenting patch rates and MTTD to discussing liability exposure and business capital allocation? What actually gets better when someone works with Pulse? Other than, of course, your ARR numbers for your next funding round? What is the…

4. 

   S1 · 10 Aug 2026 · 31 min

   EP290 Project Atlas: Wiz's AI Vulnerability Research

   ZeroDay Cloud: How a hacking competition exposed the reality of AI-augmented offensive security. The Power of Multi-Agent AI: Why a single model is not enough, and how specialized agents (Threat Modeling, Hunting, Triage, and Adversarial Debate) collaborate like a human team. GitHub RCE & CosmosDB Cross Tenant Access: A breakdown of the record-breaking bounty for the GitHub RCE report and the Azure CosmosDB master key vulnerability discovered by Atlas. Humans vs. AI: Whether vulnerability researchers are becoming "buggy whip manufacturers" or if human insight, instinct, and the smell of…

5. 

   S1 · 27 Jul 2026 · 26 min

   EP288 CISO Tested, Board Approved: Cloud Resilience with General Mills CISO Noah Korba

   How do you make sure your favorite cereal is always on the shelves when a cyber disaster strikes? In this episode, hosts Tim Peacock and Alicja Cade sit down with Noah Korba , VP of Digital Core, Cybersecurity, and Enterprise Architecture at General Mills, to look under the hood of "Mills Collaborative Recovery"—their intensive, annual two-week drill that actually recovers 90% of their Google Cloud estate to test real-world cyber resilience. ⌨️ "Clicking and Clacking" vs. Talking: Why General Mills ditched traditional tabletop discussions to actually run hands-on, keyboard-driven recoveries…

6. 

   S1 · 20 Jul 2026 · 38 min

   EP287: Creating Trust at Global Scale with Local AI: Reken-ing with Shuman Ghosemajumder

   Cloud Security Podcast Episode 285: Defending Against the AI DDoS Is internet trust fundamentally broken? On this episode, former Google "Click Fraud Czar" and Reken CEO Shuman Ghosemajumder joins hosts Tim Peacock and Nolan Karpinski to trace the evolution of automated fraud—from Gmail's early invite days to the origin of "credential stuffing." Discover why today's threat landscape feels like an AI DDoS , how cybercriminals exploit the "Smart Cow" resource model, and why running security models on-device is our best shot at defending against scaled AI slop without sacrificing data privacy.…

7. 

   S1 · 13 Jul 2026 · 27 min

   EP286 Building an AI-pilled, solo vibe-coded, Clickhouse-based SIEM with Dan Lussier

   Can you build a fully functional, high-scale SIEM in just two weeks for under $7,000? In this episode of the Cloud Security Podcast , hosts Tim Peacock and Kyle Champlin sit down with long-time collaborator Dan Lucier , Founder of Nano , to unpack how he "vibe-coded" an entire SIEM from scratch during his end-of-year holiday break. Dan shares his journey of leveraging bleeding-edge AI code assistants to go from a Postgres prototype to a blazing-fast, production-ready SIEM built on Rust and ClickHouse . In this episode, we cover: 🛠️ The $7,000 Stack: How Dan utilized Claude Code and…

8. 

   S1 · 6 Jul 2026 · 20 min

   EP285 Scaling Lessons from Leading the NSA to Defending the World with Morgan Adamski

9. 

   S1 · 29 Jun 2026 · 26 min

   EP284 Closest Alligator to the Canoe: How Transforming SOC Became P0 for Lloyds Bank

   https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-how-cisos-can-pursue-technical-and-cultural-resilience-q-a?e=48754805