logo
episode-header-image
Feb 2025
42m 55s

PP049: CSMM – A Practical Model for Impr...

Packet Pushers
About this episode
The Cloud Security Maturity Model (CSMM) is a practical blueprint for improving the security of your public cloud deployments. Developed in partnership with the Cloud Security Alliance, IANS, and Securosis, the model covers 12 categories, such as network security and application security, across 3 domains. It describes 5 levels of security maturity, and includes process... Read more »
Up next
Nov 18
PP087: Why SBOMs Are Cooler and More Useful Than You Think
Just what’s inside that commercial software you bought? Does it contain open-source components, NPM packages, or other third-party code? How could you find out? The answer is a Software Bill of Materials, or SBOM, a machine-readable inventory of a finished piece of software ... Show More
46m 8s
Nov 11
PP086: Using Let’s Encrypt and the ACME Protocol for Domain Validation Certificates
Certificates are the socks of IT—everyone needs them, and you always lose track of a few. On today’s show we dive into the ACME protocol, an IETF standard to help automate how a domain owner gets a domain validation certificate from a Certificate Authority (CA). Our guest, Ed Har ... Show More
44m 39s
Nov 5
PP085: News Roundup – Naked Satellite Signals, Account Recovery Buddies, Busting Ghost Networks
Did you know college students are snooping on satellite transmissions? On today’s news roundup we discuss new research in which university investigators use off-the-shelf equipment to intercept traffic from geostationary satellites and discover that a lot of it is unencrypted. We ... Show More
52m 28s
Recommended Episodes
Aug 2024
State of Cloud Security 2024 - Leadership Edition
<p>Leadership Insights on Cloud Security in 2024. Ashish sat down with return guest <a href="https://www.linkedin.com/in/skuruvadi/" target="_blank" rel="noopener noreferer">Srinath Kuruvadi,</a> a seasoned cloud security leader with over two decades of experience in the field. T ... Show More
25m 31s
Feb 2025
Rethinking Cloud Security Strategies
Cloud security is more complex than ever. Organizations move fast, but security teams often struggle to keep up. In this episode of Threat Vector, host David Moulton speaks with Amol Mathur, SVP of Products for Prisma Cloud at Palo Alto Networks, about how platformization is resh ... Show More
35m 28s
Jul 2025
MCP Security at Wiz with Rami McCarthy
<p>Wiz is a cloud security platform that helps organizations identify and remediate risks across their cloud environments. The company’s platform scans layers of the cloud stack, including virtual machines, containers, and serverless configurations, to detect vulnerabilities and ... Show More
54m 7s
Jan 2022
Tech Bytes: Embedding Network Security Into Your Cloud Network (Sponsored)
Today on the Tech Bytes podcast we’re talk network security at scale. That is, in a cloud environment, how can you build security capabilities and features into the network while also being able to keep up with security policies, operations, compliance, and more. Our sponsor is A ... Show More
14m 28s
Apr 2024
The role of Real Time Defense in Cloud Security
<p>In this episode from KubeCon Paris 2024, we spoke to <a href="https://www.linkedin.com/in/degio/" target="_blank" rel="noopener noreferer">Loris Degioanni,</a> Co-Founder and CTO of <a href="https://sysdig.com/" target="_blank" rel="noopener noreferer">Sysdig</a> about Open So ... Show More
21m 35s
Dec 2024
Behind the Scenes with Palo Alto Networks CIO and CISO Securing Business Success with Frictionless Cybersecurity
In this episode of Threat Vector, David Moulton speaks with Meerah Rajavel, CIO of Palo Alto Networks, and Niall Browne, CISO of the organization, about the importance of aligning IT strategy with cybersecurity.  Meerah and Niall discuss how frictionless security, AI integration ... Show More
39m 17s
Oct 2024
Traditional PAM vs Cloud CPAM for a cloud first world
<p>In this episode of the Cloud Security Podcast, Ashish sat down with <a href="https://www.linkedin.com/in/artyompoghosyan/" target="_blank" rel="ugc noopener noreferrer">Art Poghosyan</a>, CEO and co-founder of <a href="https://britive.com/" target="_blank" rel="ugc noopener no ... Show More
34m 22s
Oct 2024
Balancing Security with Usability in Cybersecurity
In this episode of Threat Vector, host David Moulton talks with guest speaker Brian Wrozek, Forrester Principal Analyst in Security & Risk, about the complexities of aligning security strategies across global teams. Brian draws on his extensive experience in cybersecurity, operat ... Show More
41m 41s
Aug 2024
Threat Modeling in the Cloud with Romina Druta & Daniela Cruzes
<p>What are the threats your cloud application and infrastructure are facing? While at NDC Oslo, Richard chatted with Daniela Cruzes and Romina Druta about their work building threat models for cloud-based applications. Daniela discusses how modeling helps to understand security ... Show More
36m 24s