https://csoh.org/meetings.html Topic-by-topic recaps of the Cloud Security Office Hours Friday Zoom session. What a room of cloud security practitioners actually discussed each week: breaches, tooling, careers, and the arguments in between. en-us admin@csoh.org (CSOH) admin@csoh.org (CSOH) Sun, 13 Sep 2026 14:57:37 +0000 1440 https://csoh.org/favicon.png https://csoh.org/meetings.html https://csoh.org/meetings/2026-09-11.html This was the Cloud Security Office Hours meeting (week 180), where participants discussed various security topics including AI-generated vulnerabilities and patch management. https://csoh.org/meetings/2026-09-11.html Fri, 11 Sep 2026 07:00:00 -0700 AI Vulnerabilities Conferences https://csoh.org/meetings/2026-09-04.html The Cloud Security Office Hours meeting was an open forum for participants to discuss current topics in cybersecurity. Neil Carpenter began by sharing updates on his job search after his startup closed, noting positive responses from his… https://csoh.org/meetings/2026-09-04.html Fri, 04 Sep 2026 07:00:00 -0700 AI Conferences Passwords Industry News https://csoh.org/meetings/2026-08-28.html Stryker presented "The Meeple Problem," a talk on building security controls around what people actually do rather than around the role they hold. https://csoh.org/meetings/2026-08-28.html Fri, 28 Aug 2026 07:00:00 -0700 Guest Speaker AI Insider Threats https://csoh.org/meetings/2026-08-21.html This was a Cloud Security Office Hours meeting where participants discussed various cybersecurity topics and shared updates. https://csoh.org/meetings/2026-08-21.html Fri, 21 Aug 2026 07:00:00 -0700 AI Guest Speaker https://csoh.org/meetings/2026-08-14.html The meeting was Cloud Security Office Hours, where Jay presented a concerning finding about AI-generated code that inadvertently incorporates illegal biases, particularly regarding gender-based salary calculations and performance evaluations. https://csoh.org/meetings/2026-08-14.html Fri, 14 Aug 2026 07:00:00 -0700 AI Conferences Guest Speaker https://csoh.org/meetings/2026-08-07.html The Cloud Security Office Hours meeting began with Shawn greeting the group from his vacation at Disney World before handing over hosting duties to Dave. https://csoh.org/meetings/2026-08-07.html Fri, 07 Aug 2026 07:00:00 -0700 AI Supply Chain Vulnerabilities Conferences https://csoh.org/meetings/2026-07-31.html The meeting was an open office hours session led by Neil, with Shawn and others joining for discussions on cloud security, AI, and related topics. https://csoh.org/meetings/2026-07-31.html Fri, 31 Jul 2026 07:00:00 -0700 AI Vulnerabilities Conferences Governance https://csoh.org/meetings/2026-07-24.html Rohit Valia from Tumeryk presented on AI trust scoring and the Cloud Security Alliance's new risk rubric for AI. Rohit explained Tumeryk's platform for evaluating AI models across six pillars: security, privacy, reliability, excessive… https://csoh.org/meetings/2026-07-24.html Fri, 24 Jul 2026 07:00:00 -0700 AI Guest Speaker https://csoh.org/meetings/2026-07-17.html The Cloud Security Office Hours session focused on open discussions about cloud security challenges, particularly around vulnerability management and the evolving landscape of prioritizing and remediating vulnerabilities. https://csoh.org/meetings/2026-07-17.html Fri, 17 Jul 2026 07:00:00 -0700 AI Vulnerabilities Conferences Community https://csoh.org/meetings/2026-07-10.html The session ranged across AI-assisted phishing, threat-intel attribution, and cloud cost control. It began with introductions for new attendees, including Kelsey from Minimus and Daniel, a recent Information Technology and Informatics… https://csoh.org/meetings/2026-07-10.html Fri, 10 Jul 2026 07:00:00 -0700 AI Conferences Community https://csoh.org/meetings/2026-07-03.html The session worked through a publicly reported industry controversy over a security company's alleged contact with a threat actor, using it to examine the ethics and real risks of researchers engaging threat actors and the field's… https://csoh.org/meetings/2026-07-03.html Fri, 03 Jul 2026 07:00:00 -0700 Governance Industry News Community https://csoh.org/meetings/2026-06-26.html The conversation centered on governing AI in the enterprise - token limits, usage tracking, and the reality that these tools were not designed with enterprise security controls in mind - and widened into whether fines or personal… https://csoh.org/meetings/2026-06-26.html Fri, 26 Jun 2026 07:00:00 -0700 AI Governance Passwords Conferences https://csoh.org/meetings/2026-06-19.html The 177th session opened on Fortinet's run of zero-days and why perimeter vendors keep drawing nation-state attention, then moved to practical AWS posture tooling. https://csoh.org/meetings/2026-06-19.html Fri, 19 Jun 2026 07:00:00 -0700 Vulnerabilities AI Industry News https://csoh.org/meetings/2026-06-12.html New members joined from Kansas City to Budapest, and the main thread was asset management in the cloud - specifically how organizations inventory and secure GitHub repositories at scale. https://csoh.org/meetings/2026-06-12.html Fri, 12 Jun 2026 07:00:00 -0700 Vulnerabilities GitHub Actions Governance Community https://csoh.org/meetings/2026-06-05.html The group worked through Anthropic's white paper on securing AI agents and applying zero-trust principles to non-deterministic agents, debating whether it offered practical guidance or mostly framing. https://csoh.org/meetings/2026-06-05.html Fri, 05 Jun 2026 07:00:00 -0700 AI Supply Chain Governance Industry News https://csoh.org/meetings/2026-05-29.html The 175th session dug into how enterprises are actually governing AI use - MDM controls, proxies, and AI gateways to enforce acceptable-use policies - and the widening gap between promised and real token costs as newer models get less… https://csoh.org/meetings/2026-05-29.html Fri, 29 May 2026 07:00:00 -0700 AI Governance Vulnerabilities Industry News https://csoh.org/meetings/2026-05-22.html The session dug into a hard, current problem: how to secure and scan the skills that power generative-AI agents. Neil laid out three code-scanning approaches - CI/CD integration, external secret scanners like GitGuardian, and secured… https://csoh.org/meetings/2026-05-22.html Fri, 22 May 2026 07:00:00 -0700 AI Supply Chain Governance Vulnerabilities https://csoh.org/meetings/2026-05-15.html This session was a wide-ranging discussion of the human side of security: social engineering, user behavior, and why technical controls alone cannot carry the load. https://csoh.org/meetings/2026-05-15.html Fri, 15 May 2026 07:00:00 -0700 Community Governance Industry News https://csoh.org/meetings/2026-05-08.html The Cloud Security Office Hours meeting focused primarily on discussions about data backup strategies and security implications of AI agents. The group extensively discussed recent security breaches, including the Instructure/Canvas… https://csoh.org/meetings/2026-05-08.html Fri, 08 May 2026 07:00:00 -0700 AI Industry News Vulnerabilities https://csoh.org/meetings/2026-05-01.html This meeting was Cloud Security Office Hours, where participants discussed recent website updates and shared insights on cloud security practices. Shawn presented new navigation and content sections on the website, including "What Is… https://csoh.org/meetings/2026-05-01.html Fri, 01 May 2026 07:00:00 -0700 SBOM Supply Chain Governance Community https://csoh.org/meetings/2026-04-24.html The Cloud Security Office Hours meeting focused on discussions about AI token usage and supply chain security threats. Participants, including Tyler, Stryker, and Neil, debated the merits and challenges of "token maxing" in AI… https://csoh.org/meetings/2026-04-24.html Fri, 24 Apr 2026 07:00:00 -0700 AI Supply Chain Vulnerabilities SBOM https://csoh.org/meetings/2026-04-17.html The Cloud Security Office Hours meeting focused on discussing recent developments in AI's impact on cybersecurity, particularly around Microsoft's Mythos AI tool and its potential to accelerate vulnerability discovery and exploitation.… https://csoh.org/meetings/2026-04-17.html Fri, 17 Apr 2026 07:00:00 -0700 AI Vulnerabilities Passwords https://csoh.org/meetings/2026-04-10.html The meeting focused on discussing the current crisis in open source security, particularly regarding supply chain attacks and the impact of generative AI tools like Claude on vulnerability research. Participants, including Neil, Jay,… https://csoh.org/meetings/2026-04-10.html Fri, 10 Apr 2026 07:00:00 -0700 Supply Chain GitHub Actions Community https://csoh.org/meetings/2026-04-03.html Cloud Security Office Hours featured discussions about conference experiences, particularly RSA and Black Hat, with participants sharing insights about networking, speaking opportunities, and career development in cybersecurity. The group… https://csoh.org/meetings/2026-04-03.html Fri, 03 Apr 2026 07:00:00 -0700 Conferences AI Governance https://csoh.org/meetings/2026-03-27.html The meeting focused on discussing the recent Light LLM security compromise, where a Python package used by 97 million monthly users was compromised, leading to the theft of credentials and sensitive information from affected systems. The… https://csoh.org/meetings/2026-03-27.html Fri, 27 Mar 2026 07:00:00 -0700 Supply Chain Vulnerabilities Conferences https://csoh.org/meetings/2026-03-20.html Guest speaker Maria Thomas (digital investigator with the RISE Information Security Foundation, background in behavioral science) presented on the behavioral science behind online harassment - why people pile on, how anonymity shapes… https://csoh.org/meetings/2026-03-20.html Fri, 20 Mar 2026 07:00:00 -0700 Guest Speaker Community https://csoh.org/meetings/2026-03-13.html The meeting focused on several key topics, including the recent acquisition of Wiz by Google and its implications for the company and its employees. Participants discussed the potential risks and benefits of this acquisition, with some… https://csoh.org/meetings/2026-03-13.html Fri, 13 Mar 2026 07:00:00 -0700 Industry News Supply Chain Education https://csoh.org/meetings/2026-03-06.html The meeting focused on discussing a critical Java authentication vulnerability and its implications for organizations. Participants shared their experiences with patching and vulnerability management, emphasizing the importance of… https://csoh.org/meetings/2026-03-06.html Fri, 06 Mar 2026 07:00:00 -0700 Vulnerabilities SBOM Conferences https://csoh.org/meetings/2026-02-27.html The Cloud Security Office Hours meeting focused on discussing password security practices and the importance of asking questions in technical environments. Tyler shared insights about using AI agents for software development and testing,… https://csoh.org/meetings/2026-02-27.html Fri, 27 Feb 2026 07:00:00 -0700 AI Conferences Passwords https://csoh.org/meetings/2026-02-20.html The meeting focused on reviewing and contributing to the Cloud Security Office Hours website, with participants discussing GitHub workflows, pull requests, and website improvements. New members introduced themselves, including Pavel from… https://csoh.org/meetings/2026-02-20.html Fri, 20 Feb 2026 07:00:00 -0700 AI GitHub Actions Community https://csoh.org/meetings/2026-02-13.html The Cloud Security Office Hours community celebrated its 3-year anniversary, with Shawn highlighting the growth of the global participant base and introducing a new website built using AI that is now community-editable via GitHub. The… https://csoh.org/meetings/2026-02-13.html Fri, 13 Feb 2026 07:00:00 -0700 Anniversary Governance Community https://csoh.org/meetings/2026-02-06.html The Cloud Security Office Hours meeting began with introductions and casual conversation before transitioning into a discussion about AI's role in coding and development, including both its benefits and potential risks. The group explored… https://csoh.org/meetings/2026-02-06.html Fri, 06 Feb 2026 07:00:00 -0700 AI Education https://csoh.org/meetings/2026-01-30.html The meeting began with informal discussions before transitioning into Cloud Security Office Hours, where new participants introduced themselves and shared their backgrounds in cybersecurity and security architecture. The group engaged in… https://csoh.org/meetings/2026-01-30.html Fri, 30 Jan 2026 07:00:00 -0700 Insider Threats AI Governance https://csoh.org/meetings/2026-01-23.html The meeting opened with informal greetings and casual conversation about weather conditions before transitioning to a discussion of Cloud Security Office Hours and its objectives for networking and knowledge sharing. The group reviewed… https://csoh.org/meetings/2026-01-23.html Fri, 23 Jan 2026 07:00:00 -0700 AI Conferences https://csoh.org/meetings/2026-01-16.html The meeting began with casual greetings and technical discussions about screen-sharing issues before transitioning into conversations about the upcoming RSA Conference and organizing a Cloud Security Office Hours breakfast meeting.… https://csoh.org/meetings/2026-01-16.html Fri, 16 Jan 2026 07:00:00 -0700 AI Conferences Community Anniversary https://csoh.org/meetings/2026-01-09.html The Cloud Security Office Hours meeting focused on discussions about management styles and experiences, with participants sharing personal stories about their bosses and leadership challenges. The group discussed the importance of… https://csoh.org/meetings/2026-01-09.html Fri, 09 Jan 2026 07:00:00 -0700 AI Conferences https://csoh.org/meetings/2026-01-02.html The meeting began with informal discussions about attendance and personal updates before transitioning into conversations about LinkedIn networking strategies and social media engagement. The group explored cultural differences between… https://csoh.org/meetings/2026-01-02.html Fri, 02 Jan 2026 07:00:00 -0700 AI Conferences Guest Speaker https://csoh.org/meetings/2025-12-26.html The meeting focused on discussing predictions for 2026 in cloud security, with participants sharing various forecasts about emerging threats, technology trends, and market developments. The group explored specific predictions including… https://csoh.org/meetings/2025-12-26.html Fri, 26 Dec 2025 07:00:00 -0700 AI Conferences Industry News https://csoh.org/meetings/2025-12-19.html The meeting focused on networking and career development in cloud security, featuring David Bradford, a former General Counsel at Novell, who shared his experiences and principles for building professional relationships. David emphasized… https://csoh.org/meetings/2025-12-19.html Fri, 19 Dec 2025 07:00:00 -0700 AI Conferences Guest Speaker https://csoh.org/meetings/2025-12-12.html The meeting began with introductions and networking opportunities, welcoming Cole to the team and setting the stage for a collaborative session. The main focus was a GitHub and Mindset Dojo session aimed at demystifying open source… https://csoh.org/meetings/2025-12-12.html Fri, 12 Dec 2025 07:00:00 -0700 AI Vulnerabilities Guest Speaker Community https://csoh.org/meetings/2025-12-05.html The meeting began with casual conversation about travel plans and experiences, including discussions about upcoming trips to Prague and European destinations. The Cloud Security Office Hours meeting welcomed new participants and addressed… https://csoh.org/meetings/2025-12-05.html Fri, 05 Dec 2025 07:00:00 -0700 Vulnerabilities Conferences Community https://csoh.org/meetings/2025-11-28.html The meeting began with casual conversation about Thanksgiving experiences and holiday attendance before transitioning into a discussion about cybersecurity challenges faced by seniors and various network security solutions. The group… https://csoh.org/meetings/2025-11-28.html Fri, 28 Nov 2025 07:00:00 -0700 Conferences https://csoh.org/meetings/2025-11-21.html The meeting began with discussions about building a religion and welcoming new participants, including a GitHub walkthrough session and potential new group member James Frasotti. The group explored leadership transitions and management… https://csoh.org/meetings/2025-11-21.html Fri, 21 Nov 2025 07:00:00 -0700 Conferences Community https://csoh.org/meetings/2025-11-14.html The meeting began with casual conversation and music sharing before transitioning to discussions about virtual meeting filters and a humorous charity rule about AI mentions. The main focus was on open source security challenges, including… https://csoh.org/meetings/2025-11-14.html Fri, 14 Nov 2025 07:00:00 -0700 AI Supply Chain Vulnerabilities Conferences https://csoh.org/meetings/2025-11-07.html The meeting began with introductions of new participants and discussions about cloud security and the importance of proactive cybersecurity approaches. The group then examined the Google Mandiant report on AI malware and discussed various… https://csoh.org/meetings/2025-11-07.html Fri, 07 Nov 2025 07:00:00 -0700 AI Vulnerabilities Conferences Community https://csoh.org/meetings/2025-10-31.html The meeting began with casual conversation about Halloween costumes and music before transitioning to introductions and updates from the Cloud Security Office Hours community. Community leaders shared their backgrounds and experiences,… https://csoh.org/meetings/2025-10-31.html Fri, 31 Oct 2025 07:00:00 -0700 AI Vulnerabilities Conferences Community https://csoh.org/meetings/2025-10-24.html The meeting began with casual discussions about cybersecurity awareness and included an introduction to Cloud Security Office Hours, welcoming new participants and encouraging networking. The group explored the importance of building and… https://csoh.org/meetings/2025-10-24.html Fri, 24 Oct 2025 07:00:00 -0700 AI Conferences Community https://csoh.org/meetings/2025-10-17.html The meeting began with introductions and discussions about cloud security tools, including experiences with Wiz's incident response capabilities and challenges in securing AI agents. The group explored issues around security reporting and… https://csoh.org/meetings/2025-10-17.html Fri, 17 Oct 2025 07:00:00 -0700 AI Conferences Community https://csoh.org/meetings/2025-10-10.html The meeting began with casual discussions about music and song genres before transitioning to a conversation about polymorphic malware and cybersecurity, featuring an introduction of Andrea Pullman and her work with Cyberjutsu. The group… https://csoh.org/meetings/2025-10-10.html Fri, 10 Oct 2025 07:00:00 -0700 AI Vulnerabilities Conferences Community https://csoh.org/meetings/2025-10-03.html The meeting began with casual conversation and introductions before transitioning into a discussion about cloud security and job searching strategies, including advice on networking at security conferences and using technology like QR… https://csoh.org/meetings/2025-10-03.html Fri, 03 Oct 2025 07:00:00 -0700 AI Conferences Community