NO. 372 — LastPass Employee Hack, State AI Propaganda, Crowdstrike Report Analysis…

NO. 372 — LastPass Employee Hack, State AI Propaganda, Crowdstrike Report Analysis…

Unsupervised Learning is about ideas and trends in Cybersecurity, National Security, AI, Technology, and Culture—and how best to upgrade ourselves to be ready for what's coming.

Unsupervised Learning is about ideas and trends in Cybersecurity, National Security, AI, Technology, and Culture&mdash;and how best to upgrade ourselves to be ready for what's coming.

Exploring the fascinating intersection of security, technology, and humans.

Unsupervised Learning

Unsupervised Learning (Member Edition)

➡ Prevent Risk At The Source with Cortex Cloud: https://www.paloaltonetworks.com/cortex/cloud/application-security

In this sponsored conversation, I speak with Sarit Tager, VP of Product Management at Palo Alto Networks, about how Prisma Cloud and their new ASPM solution are transforming cloud and application security by unifying data and deeply integrating business context into AppSec workflows.

We talk about:

Unifying AppSec, Cloud, and SOC into One Data Lake
 How Palo Alto merged their products into a single system that consolidates runtime, code, identity, cloud, and SOC data, allowing for true context-aware risk prioritization and faster response times across the board.

From Detection to Dynamic Prevention
 Why the future of application security isn’t just about discovering vulnerabilities, but enforcing smart, context-based guardrails during development, CI/CD, and build processes to prevent issues before they reach production.

AI-Powered Insight and the Future of Secure DevOps
How their system uses AI to analyze the full security posture, enrich findings, simulate attack paths, and recommend precise mitigations. The platform even helps guide security and engineering teams through better workflows, boosting velocity, and not blocking it.

 

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

 

Chapters:

00:00 – Sarit’s Background and the Goal of Unifying Security Context
01:50 – Building a Single Data Lake for Cloud, SOC, and AppSec
04:28 – From Noise to Clarity: Fixing the Prioritization Problem in AppSec
06:47 – Using Business Context to Drive Risk-Based Decisions
10:18 – True App Ownership, Developer Velocity, and Aligning with Business Impact
13:12 – Continuous Discovery and Bringing External Signals Into One View
15:25 – Why App Grouping and Context-Rich Policies Increase Velocity
17:58 – How Attackers Are Already Building Their Own Unified Context (UEC)
20:45 – Prisma’s Control Points: IDE, PR, CI/CD, Image, Admission Control
21:56 – Bringing In Data From External Scanners and Enriching Coverage
24:23 – Ecosystem Signals, Query Language, and Intelligent Workflow Automation
25:05 – Closing Thoughts: Security and Developers Working Together

➡ Prevent Risk At The Source with Cortex Cloud: <a href="https://www.paloaltonetworks.com/cortex/cloud/application-security">https://www.paloaltonetworks.com/cortex/cloud/application-security</a>
In this sponsored conversation, I speak with Sarit Tager, VP of Product Management at Palo Alto Networks, about how Prisma Cloud and their new ASPM solution are transforming cloud and application security by unifying data and deeply integrating business context into AppSec workflows.
We talk about:
Unifying AppSec, Cloud, and SOC into One Data Lake How Palo Alto merged their products into a single system that consolidates runtime, code, identity, cloud, and SOC data, allowing for true context-aware risk prioritization and faster response times across the board.
From Detection to Dynamic Prevention Why the future of application security isn&rsquo;t just about discovering vulnerabilities, but enforcing smart, context-based guardrails during development, CI/CD, and build processes to prevent issues before they reach production.
AI-Powered Insight and the Future of Secure DevOps How their system uses AI to analyze the full security posture, enrich findings, simulate attack paths, and recommend precise mitigations. The platform even helps guide security and engineering teams through better workflows, boosting velocity, and not blocking it.
&nbsp;
Subscribe to the newsletter at: <a href="https://danielmiessler.com/subscribe">https://danielmiessler.com/subscribe</a>
Join the UL community at: <a href="https://danielmiessler.com/upgrade">https://danielmiessler.com/upgrade</a>
Follow on X: <a href="https://x.com/danielmiessler">https://x.com/danielmiessler</a>
Follow on LinkedIn: <a href="https://www.linkedin.com/in/danielmiessler">https://www.linkedin.com/in/danielmiessler</a>
&nbsp;
Chapters:
00:00 &ndash; Sarit&rsquo;s Background and the Goal of Unifying Security Context 01:50 &ndash; Building a Single Data Lake for Cloud, SOC, and AppSec 04:28 &ndash; From Noise to Clarity: Fixing the Prioritization Problem in AppSec 06:47 &ndash; Using Business Context to Drive Risk-Based Decisions 10:18 &ndash; True App Ownership, Developer Velocity, and Aligning with Business Impact 13:12 &ndash; Continuous Discovery and Bringing External Signals Into One View 15:25 &ndash; Why App Grouping and Context-Rich Policies Increase Velocity 17:58 &ndash; How Attackers Are Already Building Their Own Unified Context (UEC) 20:45 &ndash; Prisma&rsquo;s Control Points: IDE, PR, CI/CD, Image, Admission Control 21:56 &ndash; Bringing In Data From External Scanners and Enriching Coverage 24:23 &ndash; Ecosystem Signals, Query Language, and Intelligent Workflow Automation 25:05 &ndash; Closing Thoughts: Security and Developers Working Together

A Conversation With Sarit Tager from Prisma Cloud

https://api.omny.fm/orgs/070af456-729b-4a0f-9c09-a6c100397b59/clips/160b94c3-c102-4037-adff-b32101370c13/transcript

UL NO. 489: STANDARD EDITION | My personal toolchain updates, Google tracking through DuckDuckGo, Anthropic’s Pentagon Deal, Grok4 NSFW, Substack Crushes WSJ, and more...

You are currently listening to the Standard version of the podcast, consider upgrading and becoming a member to unlock the full version and many other exclusive benefits here: https://newsletter.danielmiessler.com/upgrade

Read this episode online: https://newsletter.danielmiessler.com/p/ul-489

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

UL NO. 489: STANDARD EDITION | My personal toolchain updates, Google tracking through DuckDuckGo, Anthropic&rsquo;s Pentagon Deal, Grok4 NSFW, Substack Crushes WSJ, and more...
You are currently listening to the Standard version of the podcast, consider upgrading and becoming a member to unlock the full version and many other exclusive benefits here:&nbsp;<a href="https://newsletter.danielmiessler.com/upgrade">https://newsletter.danielmiessler.com/upgrade</a>
Read this episode online:&nbsp;<a href="https://newsletter.danielmiessler.com/p/ul-489">https://newsletter.danielmiessler.com/p/ul-489</a>
Subscribe to the newsletter at: <a href="https://danielmiessler.com/subscribe">https://danielmiessler.com/subscribe</a>
Join the UL community at: <a href="https://danielmiessler.com/upgrade">https://danielmiessler.com/upgrade</a>
Follow on X: <a href="https://x.com/danielmiessler">https://x.com/danielmiessler</a>
Follow on LinkedIn: <a href="https://www.linkedin.com/in/danielmiessler">https://www.linkedin.com/in/danielmiessler</a>

UL NO. 489: STANDARD EDITION | My personal toolchain updates, Google tracking through DuckDuckGo, Anthropic’s Pentagon Deal, Grok4 NSFW, Substack Crushes WSJ, and more...

https://api.omny.fm/orgs/070af456-729b-4a0f-9c09-a6c100397b59/clips/40e10bbf-305e-46ae-a409-b31d0077e548/transcript

UL NO. 488: STANDARD EDITION | Google Granting Confusing Access to Gemini, A New Favorite Creator, Russia's new Autonomous Drones, Claude Code Madness and Neovim Config, and more...

You are currently listening to the Standard version of the podcast, consider upgrading and becoming a member to unlock the full version and many other exclusive benefits here: https://newsletter.danielmiessler.com/upgrade

Read this episode online: https://newsletter.danielmiessler.com/p/ul-488

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

UL NO. 488: STANDARD EDITION | Google Granting Confusing Access to Gemini, A New Favorite Creator, Russia's new Autonomous Drones, Claude Code Madness and Neovim Config, and more...
You are currently listening to the Standard version of the podcast, consider upgrading and becoming a member to unlock the full version and many other exclusive benefits here:&nbsp;<a href="https://newsletter.danielmiessler.com/upgrade">https://newsletter.danielmiessler.com/upgrade</a>
Read this episode online:&nbsp;<a href="https://newsletter.danielmiessler.com/p/ul-488">https://newsletter.danielmiessler.com/p/ul-488</a>
Subscribe to the newsletter at: <a href="https://danielmiessler.com/subscribe">https://danielmiessler.com/subscribe</a>
Join the UL community at: <a href="https://danielmiessler.com/upgrade">https://danielmiessler.com/upgrade</a>
Follow on X: <a href="https://x.com/danielmiessler">https://x.com/danielmiessler</a>
Follow on LinkedIn: <a href="https://www.linkedin.com/in/danielmiessler">https://www.linkedin.com/in/danielmiessler</a>

UL NO. 488: STANDARD EDITION | Google Granting Confusing Access to Gemini, A New Favorite Creator, Russia's new Autonomous Drones, Claude Code Madness and Neovim Config, and more...

https://api.omny.fm/orgs/070af456-729b-4a0f-9c09-a6c100397b59/clips/c7bc657c-de05-4660-a7ef-b316014bd57b/transcript

NO. 372 — LastPass Employee Hack, State AI Propaganda, Crowdstrike Report Analysis…

In 1 playlist(s)

Unsupervised Learning

Social links

Follow podcast

Recent clips