Scale to Zero - No Security Questions Left Unanswered

Scale To Zero
  • 5.0 (1)
  • Technology
  • Biweekly

We know security is challenging, but a timely understanding of security is far more challenging! Scale to Zero is built for all the security professionals for helping them to be more privacy and security-sensitive. With this show, we hope to address all the security-related issues that are challenging to understand and resolve without the help of experts. We believed that a community space like Scale to Zero would make things a little bit simpler for everyone after we discovered the discomfort of constantly switching back and forth.

  1. 2d ago

    Purple Teaming AI Agents & Non-Deterministic Threat Modeling | ft. Dhivya Chandramouleeswaran (AI Safety Research Fellow) | ScaleToZero Podcast | Powered by Cloudanix | Ep.115

    When AI agents write code, execute autonomous workflows, and make architectural decisions, traditional security paradigms crumble. Who are guardrails truly protecting—the model or the human behind it? In this episode of the ScaleToZero podcast, we sit down with Dhivya Chandramouleeswaran, AI Safety Research Fellow and AppSec leader, to deconstruct the hard realities of securing non-deterministic AI systems.From threat modeling autonomous agent behavior to operationalizing AI-driven purple teaming, this masterclass covers the architectural and testing frameworks engineering teams need to safely build with GenAI. Connect with Dhivya Chandramouleeswaran on LinkedIn: https://www.linkedin.com/in/dhivyac/ Connect with host: https://www.linkedin.com/in/mpurusottamc/ #AISafety #PurpleTeaming #ThreatModeling #AIAgents #DevSecOps #AppSec #GenerativeAI #Cybersecurity #ScaleToZero #TechPodcast #agenticai 00:00 Teaser and Introduction03:23 To whom should guardrails be designed for - AI or Humans?07:10 Evaluating architectural decisions for AI-written code10:10 Developer-first security for AI systems14:34 Assessing the risks of AI systems19:34 Hard to test agent behavior for AI-enabled products23:05 Trusting AI automation vs. having a human-in-the-loop26:53 What happens when agents bypass the guardrails?30:10 Threat modeling in a non-deterministic AI agent33:56 AI-generated threat modeling and how to trust it?37:00 How to trust an AI-driven security workflow?43:20 Measuring if AI automation is improving signal quality49:00 Purple Teaming AI agents - Defense vs. Secure52:30 Does model choice change an agent's ability to defend?56:26 AI adoption for teams performing manual purple teaming59:47 Getting started with purple teaming - KPIs01:02:44 Summary TLDR;01:03:44 Learning recommendations

    Purple Teaming AI Agents & Non-Deterministic Threat Modeling | ft. Dhivya Chandramouleeswaran (AI Safety Research Fellow) | ScaleToZero Podcast | Powered by Cloudanix | Ep.115

  2. Aug 5

    Enterprise Security Restructuring & The AI Vulnerability Boom | ft. Alma Paul - Senior Corporate Security Engineer | Ep.113 | Cloudanix

    As AI accelerates vulnerability discovery to machine speed, enterprise security teams are facing a seismic shift. Is your vulnerability management model keeping up, or is it time to pivot toward continuous Detection and Response? In this episode of the ScaleToZero podcast, we sit down with a Senior Corporate Security Engineer to break down how to restructure an enterprise security program from the ground up.Alma Paul: https://www.linkedin.com/in/alma-paul/Host: https://www.linkedin.com/in/mpurusottamc/Cloudanix: https://www.cloudanix.com/00:00 Introduction and Teaser03:35 Strong educational foundation in security05:50 Near future of relevance of formal education09:09 Starting with restructuring enterprise security program12:15 North star for security organizations14:10 Measuring The Health of Enterprise Security Program17:40 Balancing Security and Engineering Speed24:45 AI-driven vulnerability discovery and management29:09 AI-Driven Vulnerability Boom31:25 Shifting from VM to Detection and Response33:33 Prioritising Vulnerabilities36:33 AI for Application Security39:20 Consider AI for Security or Runaway44:16 Learning recommendations and Summary#CorporateSecurity #AppSec #VulnerabilityManagement #DetectionAndResponse #AISecurity #SecurityLeadership #TechPodcast #CybersecurityCareers #DevSecOps #ScaleToZero

    Enterprise Security Restructuring & The AI Vulnerability Boom | ft. Alma Paul - Senior Corporate Security Engineer | Ep.113 | Cloudanix

  3. Jul 22

    The Mythos Era: TPRM Evolution, AI Ethics, and Project Glasswing | ft. Matthew Moog - Senior CISA & Principal TPRM | ScaleToZero Podcast | Cloudanix

    The traditional checklist approach to Third-Party Risk Management (TPRM) is officially obsolete. With frontier AI models like Anthropic's Mythos demonstrating autonomous zero-day chaining capabilities, security leaders are facing unprecedented threat velocity.In this episode of the ScaleToZero podcast, we sit down with Matthew Moog - a Senior CISA and also a Principal TPRM to unpack the radical evolution of supply chain risk, the reality of Project Glasswing, and how security teams must structurally adapt over the next two years.00:00 Teaser and Introduction11:06 Evolution of TPRM16:30 Benefits and Challenges of AI in TPRM24:00 Change with AI in the next 2 years29:00 Anthropic's Project Glasswing for Security Leaders35:00 AI ethics in TPRM44:35 Role of Mythos in the security world or TPRM49:20 AI Security in SDLC53:35 Impact on security team size with AI Security57:57 Learning recommendations#TPRM #AISecurity #ProjectGlasswing #ClaudeMythos #CISA #ThirdPartyRisk #VendorRisk #SDLC #InformationSecurity #ScaleToZero #TechPodcast

    The Mythos Era: TPRM Evolution, AI Ethics, and Project Glasswing | ft. Matthew Moog - Senior CISA & Principal TPRM | ScaleToZero Podcast | Cloudanix

  4. Jul 8

    AI: Your Next Tool or New Colleague? | Next-Gen Security Skills | Ft.Priyanka Chatterjee | Cloudanix | ScaleToZero Podcast

    Is AI just an efficiency booster, or are we actively training our next team member? In this episode of the ScaleToZero podcast, we sit down with a Senior Cloud Security Architect to explore the profound operational and philosophical shifts happening in security teams today.We move beyond basic automation talk to dissect the fundamental operational differences between traditional and AI-driven architecture, the evolving "Skill Economy," and how modern security professionals can future-proof their careers.00:00 Teaser and Introduction04:55 Progress and Challenges of Using AI09:19 AI - Tool or Colleague?16:00 AI and its Operational Wins20:25 Fundamental Operational Differences with AI vs Traditional24:15 Next Gen Skills for Security Teams29:05 Why Learn in the Age of AI32:40 Knowledge vs Skill Economy37:05 Breaking the Chicken and Egg Problem in Cybersecurity43:21 Prioritizing Life or Work50:30 Learning Recommendations53:42 Summary#CloudSecurity #AISecurity #SecurityArchitecture #DevSecOps #TechPodcast #CybersecurityCareers #FutureOfWork #Infosec #GenerativeAI #ScaleToZero

    AI: Your Next Tool or New Colleague? | Next-Gen Security Skills | Ft.Priyanka Chatterjee | Cloudanix | ScaleToZero Podcast

  5. Jun 24

    Beyond the Tools: Bridging Product Security Gaps | ft. Neelu Tripathy | Senior Security Architect | Cloudanix | ScaleToZero Podcast

    In our latest episode of the ScaleToZero podcast, we sat down with Neelu, a Senior Cloud Security Architect, for an incredibly pragmatic look at the state of modern product security. We bypassed the standard compliance checklists to talk about what actually works when defending a cloud ecosystem. We also tracked the massive evolution of product security and got a glimpse into Neelu’s personal motivation for driving security-first mindsets across engineering environments. Whether you’re an enterprise architect or an engineer trying to ship secure software, this episode will help you recalibrate your security and development priorities. Available on YouTube: https://youtu.be/eSxoKxDWrII Here's what we discussed in our strategy session: 00:00 Introduction04:55 Non-Negotiable Security Controls for AI-powered Workplaces07:44 Product Security Gaps and How to Bridge Them12:50 Prioritising Security in SDLC17:15 Overcomplicating Security23:15 Use of AI for Product Security34:10 Why do tools fail to stop hacks, and what actually works?40:10 Calibrating Security and Product Development45:30 AI for Developing Security Practices54:22 Neelu's Motivation for Security55:22 Evolution of Product Security57:57 Learning Recommendations59:49 Summary #CloudSecurity #ProductSecurity #AppSec #SDLC #AISecurity #SecurityArchitecture #TechPodcast #CloudArchitect #DevSecOps #ScaleToZero

    Beyond the Tools: Bridging Product Security Gaps | ft. Neelu Tripathy | Senior Security Architect | Cloudanix | ScaleToZero Podcast

  6. May 20

    Ransomware in the AI Era | ft. Behnaz Karimi | Ep. 109 | ScaleToZero Podcast | Cloudanix

    Ransomware is no longer just about encrypting files on a legacy server. In the age of AI, the attack surface has fundamentally shifted. In this episode, we sit down with Behnaz Karimi, An Independent Researcher, to deconstruct how ransomware has evolved over the last decade and what it means for modern, AI-driven infrastructure.From identifying the most overlooked entry points to mapping out a bulletproof incident response plan using the OWASP framework, this conversation is a tactical guide for securing organizations of all sizes.00:00 Teaser and Introduction04:10 Ransomware Today vs. 10 Years Ago08:13 Does Ransomware Affect AI Systems?11:42 Ransomware Attacks in the AI Age15:45 AI vs. Users vs. Attackers; Who is powerful?20:00 Compromised System Components for AI Attack22:48 Most Overlooked Entry Point26:06 Attacks on Small and Mid-Sized Orgs31:40 Where do you stand against AI attack?36:20 What is holding back organizations?40:46 Incident Response during Ransomware Attack50:20 Starting Security with OWASP Framework53:05 Security Tech Globally01:00:00 Summary01:01:30 Learning Recommendations#Ransomware #AISecurity #SRE #InfrastructureSecurity #IncidentResponse #OWASP #Cybersecurity #TechPodcast #CloudSecurity #InfoSec #ScaleToZero

    Ransomware in the AI Era | ft. Behnaz Karimi | Ep. 109 | ScaleToZero Podcast | Cloudanix

  7. Apr 8

    IAM in 2026: From Anti-Patterns to Autonomous AI Agents | ft. Advait Patel | ScaleToZero Podcast | Ep. 108 | Cloudanix

    Cloud infrastructure is moving faster than ever, but is your security keeping up? We sit down with a Senior Site Reliability Engineer to discuss the evolution of Infrastructure Security and Compliance in 2026. Whether you're an SRE, Security Engineer, or DevOps Lead, this episode will challenge how you think about "secure" infrastructure.Transcript: https://www.scaletozero.com/episodes/iam-in-2026-from-anti-patterns-to-autonomous-ai-agents-with-advait-patel/Advait Patel: https://www.linkedin.com/in/advaitpatel93/Powered by: https://cloudanix.com Also Available on our YouTube Channel: https://youtu.be/1dchqWnt1hAKey Discussion Points are as Follows:00:00 Introduction07:40 Real-world Challenges of Infrastructure Security and Compliance11:20 Automating Security Checks and Avoiding Bottlenecks13:25 Security Impact of IAM Implementation17:28 Architecting an IAM Program in 202619:38 KPIs to Measure the Effectiveness of Security Implementations22:48 Measuring the Decision Quality25:12 Most Common IAM Anti-Patterns29:40 AI Agents for Automated Root Cause Analysis of IAM Failures33:27 Will AI Agents go Fully Autonomous?35:40 Using AI to Bypass IAM Security39:14 Cloud Security Trend From 2012 Should Die42:33 Future of AI Cloud Security44:14 Summary45:24 Learning Recommendations

    IAM in 2026: From Anti-Patterns to Autonomous AI Agents | ft. Advait Patel | ScaleToZero Podcast | Ep. 108 | Cloudanix

  8. Mar 25

    AI Security: Hype vs. Reality and the Roadmap to CISO | Ft. Niyati Daftary | Ep. 107 | ScaleToZero Podcast | Powered by Cloudanix

    Is the security impact of AI being underrated, or are we worrying about the wrong risks? In this episode, we sit down with a Security Analyst to bridge the gap between high-level security consulting and the deep-trench reality of day-to-day defense. #Cybersecurity #SecurityAnalyst #CISO #AISecurity #SecurityResearch #Infosec #CareerRoadmap #SecurityLeadership #TechPodcast #ScaleToZero Powered by Cloudanix: https://www.cloudanix.com YouTube: https://www.youtube.com/@cloudanix 00:00 Introduction04:55 AI Security Risks Organizations are Worried09:00 Security Impact of AI - Underrated?11:33 Challenges of Security Leaders18:00 Cybersecurity Perspective of a Consultant vs. Analyst22:10 Beliefs vs. Reality in Security Practices23:53 Development of a Security Research Document31:40 Challenges of Leaders Implementing Security Research Notes36:22 Roadmap for Aspiring CISOs and Security Leaders42:22 Learning Recommendations

    AI Security: Hype vs. Reality and the Roadmap to CISO | Ft. Niyati Daftary | Ep. 107 | ScaleToZero Podcast | Powered by Cloudanix
See All (113)

About

We know security is challenging, but a timely understanding of security is far more challenging! Scale to Zero is built for all the security professionals for helping them to be more privacy and security-sensitive. With this show, we hope to address all the security-related issues that are challenging to understand and resolve without the help of experts. We believed that a community space like Scale to Zero would make things a little bit simpler for everyone after we discovered the discomfort of constantly switching back and forth.

Information