Cloud Security Podcast by Google

Guest:
Mike Armistead,  CEO, Pulse Security AI
Dan Lamorena, Chief Go-To-Market Officer,  Pulse Security AI
Topics: 
You've described Pulse as an 'operational management platform for cybersecurity leaders.' What does a security management platform look like in practice? 
How does Pulse bridge this 'translation layer' gap? How do you help a CISO transition from presenting patch rates and MTTD to discussing liability exposure and business capital allocation?
What actually gets better when someone works with Pulse? Other than, of course, your ARR numbers for your next funding round?
What is the single most surprising or alarming disconnect you've identified in your CISO and Board Engagement Survey? 
You've introduced the concept of the 'Minimum Viable Security Program (MV(S)P)' and emphasized that 'focus is power.' In an era of non-stop vendor noise, compliance updates, and emerging AI threats, how does Pulse help a CISO ruthlessly prioritize and execute their MV(S)P without getting distracted by the noise?
Your company is officially 'Pulse Security AI,' so AI is central to your brand. To put on our healthy skeptic hats: how does Pulse pragmatically leverage AI to solve the CISO's actual day-to-day program management problems, rather than just adding to the marketing noise?
Resources:
Video
EP114 Minimal Viable Secure Product (MVSP) - Is That a Thing?
EP208 The Modern CISO: Balancing Risk, Innovation, and Business Strategy (And Where is Cloud?)
EP201 Every CTO Should Be a CSTO (Or Else!) - Transformation Lessons from The Hoff
EP204 Beyond PCAST: Phil Venables on the Future of Resilience and Leading Indicators
"The Bomber Mafia: A Dream, a Temptation, and the Longest Night of the Second World War" by Malcolm Gladwell

ZeroDay Cloud: How a hacking competition exposed the reality of AI-augmented offensive security.
The Power of Multi-Agent AI: Why a single model is not enough, and how specialized agents (Threat Modeling, Hunting, Triage, and Adversarial Debate) collaborate like a human team.
GitHub RCE & CosmosDB Cross Tenant Access: A breakdown of the record-breaking bounty for the GitHub RCE report and the Azure CosmosDB master key vulnerability discovered by Atlas.
Humans vs. AI: Whether vulnerability researchers are becoming "buggy whip manufacturers" or if human insight, instinct, and the smell of danger remain irreplaceable.
 
https://www.wiz.io/blog/atlas-ai-vulnerability-researcher

How do you build the foundations for a secure Google-scale enterprise that stays secure even if an AI is writing the code and nobody has time to review it? In this episode, hosts Timothy Peacock and Anton Chuvakin sit down with Christoph Kern, Principal Security Engineer at Google, to look under the hood of "secure-by-design." They trace Google's 15-year engineering journey to fundamentally eliminate entire classes of vulnerabilities rather than just playing whack-a-mole with bugs after they are written.
🛠️ Software Engineering vs. Software Craft: Why Google ditched "be careful" programming checklists in favor of hard compiler and framework-level invariants that make security defects physically impossible to build.
📦 Hiding the Risky Abstractions: How replacing high-risk programming constructs (like raw pointers in C++ or raw injection sinks in browser code) with safe, compiler-enforced abstractions secures codebases at a scale humans can no longer manually audit.
📢 "Marketing Didn't Write It": Christoph and the hosts unpack why the concept of "eliminating a class of vulnerabilities" is a rigorous, mathematical reality at Google rather than just public relations hype.
🤝 Empathy vs. Opinionated Platforms: The secret feedback loop Google uses to build highly opinionated developer platforms (like Boq or browser-native safe types) that protect systems without turning developers into frustrated "software artists" fighting the compiler.
📈 The Android Productivity Proof: The real-world metrics from Google's Android team proving that shifting to memory-safe languages (like Rust) dramatically drops vulnerabilities while actually boosting developer velocity and lowering rollback rates

How do you make sure your favorite cereal is always on the shelves when a cyber disaster strikes? In this episode, hosts Tim Peacock and Alicja Cade sit down with Noah Korba, VP of Digital Core, Cybersecurity, and Enterprise Architecture at General Mills, to look under the hood of "Mills Collaborative Recovery"—their intensive, annual two-week drill that actually recovers 90% of their Google Cloud estate to test real-world cyber resilience.
⌨️ "Clicking and Clacking" vs. Talking: Why General Mills ditched traditional tabletop discussions to actually run hands-on, keyboard-driven recoveries of their entire cloud infrastructure.

🥣 Protecting the Cinnamon Toast Crunch: How the team mapped out their "Minimum Viable Business" to keep critical supply chain and manufacturing operations moving.

🔑 The IT vs. OT Reality: The unique challenge of recovering factory equipment, where software updates won't work without a physical key turned on the warehouse floor.

💼 To Board or Not to Board: Noah's take on whether involving the board of directors in active cyber exercises is a valuable use of their time.

Cloud Security Podcast Episode 285: Defending Against the AI DDoS
Is internet trust fundamentally broken? On this episode, former Google "Click Fraud Czar" and Reken CEO Shuman Ghosemajumder joins hosts Tim Peacock and Nolan Karpinski to trace the evolution of automated fraud—from Gmail's early invite days to the origin of "credential stuffing."
Discover why today's threat landscape feels like an AI DDoS, how cybercriminals exploit the "Smart Cow" resource model, and why running security models on-device is our best shot at defending against scaled AI slop without sacrificing data privacy.
What you'll learn:
🧠 The "Smart Cow" Problem: How advanced exploit tools are built by the few and commoditized for the masses.

💻 On-Device Defense: Why local, lightweight AI models are the future of communications security.

🛡️ The Paranoia Protocol: Tim and Shuman's practical advice on validating identities in the age of deepfakes.

👉 Subscribe for your weekly dose of cloud security insights, piping hot every Monday! Watch the full episode on YouTube at youtube.com/@CloudSecPodcast.