Real-World Cloud Threats and Multi-Cloud Defense in 2024

We spoke to Chris Hosking, AI and Cloud Evangelist at SentinelOne about why Cloud Security Posture Management (CSPM) is no longer sufficient in today's rapidly changing cloud environment, stating bluntly that "CSPM is dead." Ashish and Chris chatted about the rise of Cloud-Native Application Protection Platforms (CNAPP) and how they are critical for integrating infrastructure as code (IaC), runtime security, and vulnerability management across multi-cloud and hybrid environments. Chris also shares his perspective on the evolution of cloud attacks, emphasizing how threat actors are becoming more sophisticated, leveraging cloud-native tooling, and targeting misconfigurations and vulnerabilities in ways that were previously unseen. There is increasing complexity of multi-cloud and hybrid cloud setups and a need to build more resilient cloud defense strategies for 2024 and beyond. Questions asked: 00:00 Introduction 02:43 A bit about Chris Hosking 03:16 Is CSPM Dead? 04:08 Attacks expected in Olympics 2024 06:15 CSPM should be embedded 07:56 How has the attack landscape changed? 10:36 The evolution of CSPM 13:17 Time to respond to Cloud Security Incidents 14:00 Where to start for Cloud Security Program? 17:26 Consolidation of Cloud Security Tools 18:51 Where is the Cloud Security Tooling space headed? 23:52 Building vs buying Cloud Security Tools 26:35 Where does the security data lake fit in? 27:57 Keeping up with the changing cloud landscape 30:05 The Fun Section -------------------------------------------------------------------------------- 📱Cloud Security Podcast Social Media📱 _____________________________________ 🛜 Website: https://cloudsecuritypodcast.tv/ 🧑🏾‍💻 Cloud Security Bootcamp - https://www.cloudsecuritybootcamp.com/ ✉️ Cloud Security Newsletter - https://www.cloudsecuritynewsletter.com/ Twitter:   / cloudsecpod   LinkedIn:   / cloud-security-podcast   #cloudsecurity