Skip to main content
Qubicweb logo

Attack Surface Management - Matt Lea - CSP #227

August 10, 2026

Description

In this episode of CISO Stories, Jessica Hoffman sits down with Matt Lee to explore attack surface management, AWS security, and the cloud misconfigurations that can put organizations at risk. Matt shares lessons from his experience auditing cloud environments, including common AWS security gaps around identity and access management, exposed resources, security groups, and overly permissive access. The conversation also covers emerging challenges around AI agents, protecting production data, and balancing speed of innovation with security controls. From preventing cloud breaches to building stronger security practices, Matt breaks down what organizations should understand about reducing risk in today’s evolving threat landscape. Segment Resources: https://schematical.com/techdebt https://www.oreilly.com/videos/zero-to-hero/0642572107789/ https://schematical.com/posts https://schematical.com/free https://schematical.com/speaking This segment is sponsored by Horizon3. Visit https://cisostoriespodcast.com/horizon3 to learn more about them! Show Notes: https://cisostoriespodcast.com/csp-227

About

In this episode of CISO Stories, Jessica Hoffman sits down with Matt Lee to explore attack surface management, AWS security, and the cloud misconfigurations that can put organizations at risk. Matt shares lessons from his experience auditing cloud environments, including common AWS security gaps around identity and access management, exposed resources, security groups, and overly permissive access. The conversation also covers emerging challenges around AI agents, protecting production data, and balancing speed of innovation with security controls. From preventing cloud breaches to building stronger security practices, Matt breaks down what organizations should understand about reducing risk in today’s evolving threat landscape. Segment Resources: https://schematical.com/techdebt https://www.oreilly.com/videos/zero-to-hero/0642572107789/ https://schematical.com/posts https://schematical.com/free https://schematical.com/speaking This segment is sponsored by Horizon3. Visit https://cisostoriespodcast.com/horizon3 to learn more about them! Show Notes: https://cisostoriespodcast.com/csp-227
Watch on Original Source

Trust cues for videos

Internal ReadExternal SourceCuratedCommunity signalMixedSource-only
Attack Surface Management - Matt Lea - CSP #227 - Qubicweb