• Blog
  • Cloud Security

Cloud Security

Cloud Security

Application Security
Cloud Posture Security
Cloud Runtime Security
AI Security Posture Management
Cloud Native Application Protection Platform
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
AppSec, Cloud Detection and Response, Cloud Runtime Security, Cloud Security, Supply Chain Security

Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm

Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
Nov 26, 2025
By  and
Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossible
CIEM, Cloud Security, IAM, Identity Security, KSPM

Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossibl...

Kubernetes identity security demands clarity. Learn how KIEMPossible uncovers entities, permissions and usage to help you reduce identity attack surfa...
Nov 25, 2025
By 
Is Your Snowflake Data at Risk? Find and Protect Sensitive Data with DSPM
Data Security, Data Security Posture Management

Is Your Snowflake Data at Risk? Find and Protect Sensitive Data with DSPM

Cloud data security is critical. Learn how Snowflake users can mitigate risks with effective data security posture management (DSPM) and enhanced secu...
Nov 21, 2025
By 
Explore the OWASP Top 10 for LLMs: A New Interactive Guide
AI Security, AI-SPM, Cloud Security

Explore the OWASP Top 10 for LLMs: A New Interactive Guide

AI security starts with the OWASP Top 10 for LLMs. Explore our interactive guide to uncover and mitigate the biggest risks across your AI pipelines.
Nov 20, 2025
By 
The Expanding API Attack Surface
API Security, Cloud Runtime Security, Cloud Workload Protection, CWPP, Web Application & API Security

The Expanding API Attack Surface

API security for cloud-native teams: discover every API, prioritize risk with context, and enable real-time protection without slowing developers.
Sep 24, 2025
By  and
How Auto-Remediation Shifts the Odds in Cloud Security
Cloud Security, Cloud-Native Application Protection Platform, CNAPP

How Auto-Remediation Shifts the Odds in Cloud Security

CNAPP autoremediation streamlines cloud security by cutting alert noise, enforcing guardrails, and driving faster, safer outcomes for teams.
Sep 17, 2025
By 
Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downloads at Risk
AppSec, ASPM, Cloud Security

Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downl...

npm supply chain attack exposed billions of downloads to risk. Learn how malicious packages spread and how to prevent threats with Cortex Cloud.
Sep 10, 2025
By  and
Accelerate Secure Development by Automating Delivery of a Compliant Cloud Infrastructure
AppSec, Cloud Security, Partners

Accelerate Secure Development by Automating Delivery of a Compliant Cloud I...

Cortex Cloud and HashiCorp Terraform integration secures cloud infrastructure by default, enabling fast, compliant provisioning and reduced risk.
Sep 09, 2025
By 
Taking Cloud Security from Visibility to Prevention with eBPF
Cloud Detection and Response, Cloud Runtime Security, Cloud Security, Cloud Workload Protection, CNAPP

Taking Cloud Security from Visibility to Prevention with eBPF

eBPF delivers real-time cloud security with deep visibility, stability, and speed—enabling Cortex to protect workloads w...
Aug 27, 2025
By 
Why Self-Managed AI Models Are Blind Spots and What to Do About It
AI Security, AI Security Posture Management, Cloud Security

Why Self-Managed AI Models Are Blind Spots and What to Do About It

Understand the real AI security risks of running self-managed models, from hidden deployments to supply chain threats, and how to effectively monitor ...
Aug 18, 2025
By 
Microsoft Entra Permissions Management to Retire: Why the Time for a Vendor-Neutral CIEM Is Now
Cloud Infrastructure Entitlement Management, Cloud Security, Identity Security

Microsoft Entra Permissions Management to Retire: Why the Time for a Vendor...

Microsoft Entra Permissions Management retirement leaves multicloud identities exposed. Discover why a vendor-neutral CIEM is essential and how Cortex...
Aug 15, 2025
By 
Beyond Integration Theater: Why Counting Connections Misses the Point in Cloud Security
Cloud Security, Cloud-Native Application Protection Platform

Beyond Integration Theater: Why Counting Connections Misses the Point in Cl...

Integrations: Go beyond the count. Our platform unifies data from all your sources with AI-driven analysis and automation to deliver measurable securi...
Aug 14, 2025
By 
The Rise of AI-Powered IDEs: What the Windsurf Acquisition News Mean for Security Teams
AI Security, AI Security Posture Management, Artificial Intelligence, Cloud Security, CSPM

The Rise of AI-Powered IDEs: What the Windsurf Acquisition News Mean for Se...

Cortex Cloud helps security teams prepare for AI-powered IDEs in the wake of OpenAI’s Windsurf acquisition, securing code and risks across the lifecyc...
May 12, 2025
By 
Prisma Cloud: The Industry’s Only FedRAMP High Authorized CNAPP
Announcement

Prisma Cloud: The Industry’s Only FedRAMP High Authorized CNAPP

FedRAMP bestows the first CNAPP with FedRAMP High authorization, making Prisma Cloud the only CNAPP to hold FedRAMP High certification.
Dec 19, 2024
By 
Announcing Checkov 2.0: Deepening Open Source IaC Security
Cloud Workload Protection Platform, DevSecOps

Announcing Checkov 2.0: Deepening Open Source IaC Security

Checkov 2.0 is a graph-based, open source IaC security tool for environments with complex dependencies across resources and modules.
Apr 08, 2021
By 
Cortex Cloud Stands Alone to Secure Mission-Critical Workloads with FedRAMP High and Moderate
Announcement, CNAPP, Compliance

Cortex Cloud Stands Alone to Secure Mission-Critical Workloads with FedRAMP...

Cortex Cloud earns FedRAMP High and Moderate, becoming the only CNAPP with both. Delivering real-time cloud security for mission-critical government w...
May 15, 2025
By 
Forecasting the 2025 Cloudscape
Cloud Security, Points of View, Predictions

Forecasting the 2025 Cloudscape

Discover 2025 cloud security trends, predictions on AI-driven threats, market consolidation, data security in CNAPPs, and more from Prisma Cloud leaders.
Dec 05, 2024
By 
GigaOm Names Prisma Cloud a Leader in Software Supply Chain Security
Announcement, AppSec, CI/CD

GigaOm Names Prisma Cloud a Leader in Software Supply Chain Security

Secure your software supply chain with Prisma® Cloud, the top-ranked leader in GigaOm's Radar, offering end-to-end protection for cloud-native applications.
Dec 17, 2024
By 
Container Escape: New Vulnerabilities Affecting Docker and RunC
Cloud Posture Security, Cloud Workload Protection, Research

Container Escape: New Vulnerabilities Affecting Docker and RunC

Mitigate critical Leaky Vessels vulnerabilities in Docker and RunC with in-depth analysis on CVE-2024-21626, CVE-2024-23651, CVE-2024-23652, and CVE-2...
Feb 05, 2024
By  and
Shadow Data Is Inevitable, But Security Risks Aren’t
Data Detection and Response, Data Security, Data Security Posture Management

Shadow Data Is Inevitable, But Security Risks Aren’t

Explore shadow data in multicloud environments and learn how data security posture management (DSPM) can help protect sensitive data while balancing security and agility.
Dec 12, 2023
By 

Subscribe to Cloud Security Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.

Get the latest news, invites to events, and threat alerts

Get the latest news, invites to events, and threat alerts