InfoSec Bites

In this podcast we will discuss comprehensive analysis of Cloud Data Lifecycle Management (CDLM), tracing the journey of digital information from its initial creation to its final, secure deletion. The discussion emphasize that managing data in the cloud requires a shared responsibility model where both providers and customers must align on identity and access management, encryption, and automated governance. Major platforms like AWS, Azure, GCP, and OCI are compared based on their unique security frameworks, compliance certifications, and regional sovereignty options. Organizations must navigate a complex landscape of regulatory mandates, such as GDPR, HIPAA, and the CCPA, by implementing rigorous data classification and continuous monitoring. Modern strategies increasingly rely on AI-driven automation and unified metadata control planes to reduce human error and manage the risks of data sprawl. Ultimately, these frameworks help businesses maintain data integrity and sovereignty while optimizing costs across diverse, multi-cloud environments.

Modern legal discovery and digital forensics are increasingly defined by the transition from traditional email to complex cloud-based platforms and collaborative tools like Slack and Microsoft Teams. This podcast discusses the technical hurdles of capturing modern attachments, which are hyperlinked files rather than static documents, and the necessity of using hash values to ensure data integrity. Organizations face significant risks from the limitations of built-in tools like Microsoft Purview, which may suffer from performance bottlenecks and incomplete indexing. To mitigate these threats, experts recommend a specialized investigation methodology that includes early legal holds, forensic data analytics, and the use of artificial intelligence to identify patterns in massive datasets. Ultimately, maintaining defensibility in court requires a combination of advanced software, certified professionals, and rigorous documentation of the entire collection process. Case studies further illustrate how these forensic technologies are successfully applied to uncover financial fraud and corporate embezzlement.

In this podcast we examine the complex regulatory intersection of the General Data Protection Regulation (GDPR) and international laws governing data access, such as the U.S. CLOUD Act. Under the GDPR, organizations must follow strict rules regarding personal data processing, necessitating clear contracts between data controllers and processors to ensure security and confidentiality. A significant conflict arises because the CLOUD Act allows American authorities to demand data regardless of its physical location, potentially forcing companies to choose between violating EU privacy rights or facing U.S. legal sanctions. Recent guidance from the European Data Protection Board (EDPB) outlines a rigorous two-step test for such transfers, emphasizing that disclosure to foreign authorities generally requires a valid international agreement. Furthermore, the research highlight emerging challenges in digital sovereignty, including high-profile litigation involving AI platforms and the evolving role of encryption as a safeguard against extraterritorial data claims. Organizations are encouraged to adopt robust governance strategies, such as data protection impact assessments and client-side encryption, to navigate these overlapping global jurisdictions.

Hypervisor - Security and Architecture : AWS, GCP, Azure

In this podcast we discuss Confidential computing which refers to technologies that protect data while it's being processed in memory, ensuring it remains encrypted and isolated from unauthorized access, including from cloud providers. TEEs are hardware-based secure enclaves within processors that enable this isolation, such as Intel's SGX, AMD's SEV, and ARM's TrustZone. In cloud environments, these are integrated to allow secure computation on sensitive data without trusting the host infrastructure.

The Cloud Security Alliance (CSA) provides a global framework for cloud governance and trust. Key tools like the Cloud Controls Matrix (CCM) and the STAR program standardise security across providers. Recent updates address AI risks, compliance automation, and shared responsibility.

Major cloud providers like Amazon Web Services, Microsoft Azure, and Google Cloud have developed Well-Architected Frameworks to help organisations build high-quality, resilient infrastructure. These frameworks are structured around core pillars, which typically include security, reliability, operational excellence, cost optimization, and performance efficiency. AWS uniquely adds a sixth pillar for sustainability, while Google integrates Site Reliability Engineering and DORA principles into its guidance. To address specific technical needs, providers offer lenses or perspectives for domains such as artificial intelligence, machine learning, and serverless computing. Architects use these resources to evaluate trade-offs, identify risks, and ensure their cloud environments align with long-term business goals. Professionals can also access specialized tools and assessments to continuously measure and improve the maturity of their digital workloads.

In this podcast we explore Netflix’s Chaos Engineering philosophy, a proactive strategy designed to ensure business continuity and disaster recovery by intentionally simulating system failures. Rather than viewing outages as anomalies, this approach treats infrastructure instability as an inevitability of cloud computing, using empirical experimentation to identify and fix vulnerabilities before they impact users. The source outlines a suite of specialised tools, such as Chaos Monkey and Chaos Kong, which stress-test the network at various scales—from individual instances to entire geographic regions. Ultimately, the document illustrates a paradigm shift toward resilience, where automated, controlled chaos is used to build unshakeable availability and a culture of engineering humility.

In this podcast we examine the critical evolution of virtualisation security within modern cloud environments, highlighting how the hypervisor acts as a vital yet vulnerable point of isolation. It details the transition from complex software emulators to minimalist hardware-assisted architectures designed to reduce potential attack surfaces. By reviewing landmark breaches such as VENOM and Meltdown, the source illustrates the persistent risks posed by legacy code and hardware-level flaws. Furthermore, it discusses how regulatory frameworks like NIST and GDPR mandate rigorous technical controls to protect multi-tenant data. The analysis ultimately points toward a future of Confidential Computing, where cryptographic protections and hardware-based roots of trust ensure security even when the underlying infrastructure is compromised.

The dicussion provides a detailed expert analysis of the Signaling System 7 (SS7) protocol, identifying it as a foundational yet profoundly vulnerable component of global telecommunications infrastructure. Built on a legacy assumption of a closed and trusted network, SS7 lacks essential security features like encryption and authentication, making it susceptible to widespread exploitation. The discussion explains how this architectural flaw enables malicious actors to perform location tracking, call and SMS interception, and bypass two-factor authentication (2FA) for financial fraud by abusing legitimate network functions. The analysis concludes with strong recommendations for mitigation, urging telecommunications providers to implement SS7 firewalls and mandating that financial institutions abandon SMS-based 2FA in favor of more secure methods like authenticator apps.