# Cloud Security at Risk: Tackling Misconfigurations Head-On - Nadia Mazzarolo - CSP #204 Page: https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/cloud-security-at-risk-tackling-misconfigurations-head-on-nadia-mazzarolo-csp-204 Text version: https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/cloud-security-at-risk-tackling-misconfigurations-head-on-nadia-mazzarolo-csp-204.md Podcast: [CISO Stories Podcast (Audio)](https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889) Published: 2024-12-10T15:00:00+00:00 Episode link: https://cspaudio.libsyn.com/cloud-security-at-risk-tackling-misconfigurations-head-on-nadia-mazzarolo-csp-204 Audio file: https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/cspaudio/CSP_204_Nadia_Mazzarolo_AUDIO_e3a3a0a4-702b-4266-bec1-46813ca24647.mp3?dest-id=2584793 Processing state: not_requested JSON: https://stenobird.com/v1/public/podcasts/ciso-stories-podcast-audio-3570889/episodes/cloud-security-at-risk-tackling-misconfigurations-head-on-nadia-mazzarolo-csp-204 Duration seconds: 1416 ## Resource In this episode, we dive into the critical role of proper configurations in cloud environments and why misconfigurations remain the leading cause of security breaches. From overly permissive access controls to unencrypted data stores and default credentials left unchanged, we explore real-world examples that adversaries exploit. Learn how organizations can mitigate these risks through proactive monitoring, automated tools, and a culture of security-first thinking. Tune in to uncover actionable insights to keep your cloud infrastructure secure. This segment is sponsored by Fortinet Cloud Security. Visit https://cisostoriespodcast.com/fortinet to learn more about them! Segment Resources: CoGuard CLI (Select cloud resources can be scanned with a free account): https://portal.coguard.io/auth/realms/coguard/protocol/openid-connect/auth?client id=client-react-frontend&redirect uri=https%3A%2F%2Fportal.coguard.io%2F&state=7cd7e2ac-aa64-497d-8957-f0b8be3e2f8d&response mode=fragment&response type=code&scope=openid&nonce=86649c48-03f3-44c1-9612-560d42e049d9 More info on the CoGuard CLI on Github: https://github.com/coguardio/ Open AI grant: https://openai.com/index/empowering-defenders-through-our-cybersecurity-grant-program/ Open AI research results on Github: https://github.com/coguardio/coguard openai rule auto generation_research Securing Multi Cloud Environments - Tips from Nadia's co-founder/CTO - blog: https://www.coguard.io/post/securing-multi-cloud-environments Visit https://cisostoriespodcast.com for all the latest episodes! Show Notes: https://cisostoriespodcast.com/csp-204 ## Actions - request_transcript: `POST https://stenobird.com/v1/public/podcasts/ciso-stories-podcast-audio-3570889/episodes/cloud-security-at-risk-tackling-misconfigurations-head-on-nadia-mazzarolo-csp-204/transcription-requests` — Idempotently request low-priority transcript generation for this episode. - read_markdown: `GET https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/cloud-security-at-risk-tackling-misconfigurations-head-on-nadia-mazzarolo-csp-204.md` — Read the agent-friendly Markdown representation of this episode resource. A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed. ## Transcript Full transcripts are not published on public pages unless there is a clear rights basis.