In this special edition of the O3 Cloud Security Podcast we are coming live from Sikkerhetsfestival 2025 in Lillehammer. Nora Bodin and Anna Beruldsen are two very talented Cyber security Consultants working at mnemonic. In this episode we discuss DevSecOps, and how to create efficient security programs within the DevOps-culture at scale.

In this special edition of the O3 Cloud Security Podcast we are coming live from Sikkerhetsfestival 2025 in Lillehammer.

Nora Tomas is a Senior Software Engineer working with authentication and authorization at Vipps, a Norwegian mobile payment application. In this episode we discuss security from the perspective of a SWE, and how to create efficient authentication at scale.

In this episode, the Håkon and Olav discuss cloud security automation with expert Audun Blichfeldt Mo from Remarkable. They discuss how to effectively automate and improve security operations in the cloud. The conversation also delves into the Go security eco-system, and why Go might be a good choice for many usecases.

In this episode, the Håkon and Olav discuss the cloud incident response with expert Noah McDonald from Google Cloud. They explore the differences between traditional and cloud incident response, the importance of automation, and the evolving threat landscape in cloud security. The conversation also delves into the role of AI in enhancing incident response capabilities and how organizations can leverage cloud services for more efficient security operations. Noah also shares insights on how to build a competent security team capable of handling cloud incidents and the unique challenges faced in this field. The discussion also touches on the dynamics of incident response teams, particularly at Google, and the collaborative efforts required to effectively manage security incidents.

In this episode, James Berthoty, Karim El-Melhaoui and Håkon Sørum discuss the evolving landscape of cloud security. The necessity of specialized tools like CNAPP and CADR for effective monitoring and defense against threats is a hot topic these days, and the guys go in depth on the topic. They explore the challenges posed by hybrid environments and the future of exploits, emphasizing the importance of runtime protection and the integration of security tools. he discussion also highlights the need for organizations to adapt to the changing threat landscape with threat actors learning cloud native attack techniques.

https://www.latio.tech/ ​

https://www.youtube.com/@latiotech

https://www.linkedin.com/in/james-berthoty/

In this episode of the O3 Cloud Security Podcast, Håkon Sørum and Anja Olsen delve into the intricacies of cloud threat detection, discussing its differences from traditional detection methods, the importance of application-specific knowledge, and the evolving landscape of cybersecurity. Anja shares her journey in cybersecurity, her role at DNB, and insights into effective detection strategies, including the significance of risk-based alerting and community engagement.

DNB Threat Report:https://www.dnb.no/okonomisk-radgiver/sikkerhet/trusler-og-trender

Detection Engineering Weekly: https://www.detectionengineering.net/

Detection at scale: detectionatscale.com

Deathcon: https://deathcon.io/ 

In this episode of the O3C Cloud Security Podcast, host Håkon Sørum and guests Rami McCarthy and Olav Østbye delve into the intricacies of cloud security strategy. Rami shares his extensive background in cloud security, discussing his transition from consultancy to in-house roles and now to a vendor position. The conversation emphasizes the importance of visibility in cloud security, the need to understand the business context, and the critical steps for CISOs moving to the cloud. They explore the challenges faced by security leaders in navigating the evolving landscape of cloud security, the significance of identity and data security, and the need for democratizing security practices across organizations. The discussion also highlights the role of people in shaping security strategies and the future trends that will impact cloud security.

You can find Rami at:

https://www.linkedin.com/in/ramimac/ and https://ramimac.me/

In this episode Håkon has Olav and Karim on the podcast to discuss the upcoming season and some common challenges organizations face when using cloud services.

Find us at:

https://www.linkedin.com/company/o3cyber

https://www.youtube.com/@o3cyber

Host:

www.linkedin.com/in/hakonsorum

Guests:

https://www.linkedin.com/in/karim-el-melhaoui

https://www.linkedin.com/in/oestbye/

A special edition episode in English featuring Scott Piper, a security researcher at Wiz.

Beskrivelse:

I ellevte episode av sesong fire er vi live på Sikkerhetsfestivalen i Lillehammer hvor vi snakker om hvorfor vi valgte å starte O3 Cyber, hvordan reise har gått så langt, blemmer og utfordringer, resultater og veien videre.

Level: 100

Kilder som nevnes/anbefales:

– ⁠⁠⁠⁠https://o3c.io⁠

Medvirkende:

- Olav Østbye, O3 CYBER

- Karim El-Melhaoui, O3 CYBER

- Håkon Nikolai Stange Sørum, O3 CYBER

Følg oss!

– ⁠⁠⁠⁠⁠⁠https://www.linkedin.com/company/O3CYBER⁠⁠⁠⁠⁠⁠

– ⁠⁠⁠⁠⁠⁠https://twitter.com/O3CYBER⁠⁠⁠⁠⁠⁠

– ⁠⁠⁠⁠⁠⁠https://github.com/O3-Cyber ⁠⁠⁠⁠

Ris og ros?

Gi oss gjerne en tilbakemelding, både positive og forbedringspotensiale. Dette kan du gjøre via ⁠⁠⁠⁠⁠⁠kontakt oss⁠⁠⁠⁠⁠⁠ på nettsiden vår, ⁠⁠⁠⁠⁠⁠O3C.no⁠⁠⁠⁠⁠⁠

Forslag til nye episoder?

Skulle du ha noen ønsker/forslag til nye episoder så ta gjerne ⁠⁠⁠⁠⁠⁠kontakt med oss⁠⁠⁠⁠⁠⁠ med oss via nettsiden vår, ⁠⁠⁠⁠⁠⁠O3C.no