• Blog
  • Cloud Security

Cloud Security

Cloud Security

Application Security
Cloud Posture Security
Cloud Runtime Security
AI Security Posture Management
Cloud Native Application Protection Platform
Where Cloud Security Stands Today and Where AI Breaks It
Announcement, Cloud Native Application Protection Platform, Cloud Security, CNAPP, Reports

Where Cloud Security Stands Today and Where AI Breaks It

Cloud security trends reveal where teams gain ground and fragmentation breaks defense. Explore insights from 2,800 leaders and how cloud, identity and AI risks converge.
Dec 16, 2025
By 
When Security Scanners Become the Weapon: Breaking Down the Trivy Supply Chain Attack
AppSec, Cloud Security, Threat Prevention, Unit 42, Vulnerability Exposed

When Security Scanners Become the Weapon: Breaking Down the Trivy Supply Ch...

The Trivy Supply Chain Attack shows how security tools can be weaponized. Learn how this 2026 breach unfolded and how Cortex Cloud blocks the threat.
Mar 24, 2026
By  and
Level Up Your AppSec Team with an Agentic Workforce
Application Security, AppSec, ASPM, Cloud Security, DevSecOps

Level Up Your AppSec Team with an Agentic Workforce

Optimize your AppSec program with Cortex Cloud. Our AI AppSec Agent automates vulnerability remediation, prioritizes risks, and stops threats before production.
Mar 12, 2026
By 
Cortex Cloud Named Leader and Outperformer in the 2026 GigaOm Radar for CIEM
Cloud Infrastructure Entitlement Management, Cloud Security, IAM, Identity Security

Cortex Cloud Named Leader and Outperformer in the 2026 GigaOm Radar for CIE...

Cloud infrastructure entitlement management is foundational to CNAPP. See why Cortex Cloud was named a Leader in the 2026 GigaOm CIEM Radar.
Mar 05, 2026
By  and
OWASP Top 10 for Agentic Applications 2026 Is Here – Why It Matters and How to Prepare
AI Security, Cloud Security

OWASP Top 10 for Agentic Applications 2026 Is Here – Why It Matters and How...

Agentic AI introduces new risks across tools, identities, supply chains and memory. Learn what the OWASP Top 10 for Agentic AI means and how to secure autonomous systems.
Dec 10, 2025
By  and
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
AppSec, Cloud Detection and Response, Cloud Runtime Security, Cloud Security, Supply Chain Security

Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm

Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
Nov 26, 2025
By  and
Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossible
CIEM, Cloud Security, IAM, Identity Security, KSPM

Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossibl...

Kubernetes identity security demands clarity. Learn how KIEMPossible uncovers entities, permissions and usage to help you reduce identity attack surfa...
Nov 25, 2025
By 
Is Your Snowflake Data at Risk? Find and Protect Sensitive Data with DSPM
Data Security, Data Security Posture Management

Is Your Snowflake Data at Risk? Find and Protect Sensitive Data with DSPM

Cloud data security is critical. Learn how Snowflake users can mitigate risks with effective data security posture management (DSPM) and enhanced secu...
Nov 21, 2025
By 
Explore the OWASP Top 10 for LLMs: A New Interactive Guide
AI Security, AI-SPM, Cloud Security

Explore the OWASP Top 10 for LLMs: A New Interactive Guide

AI security starts with the OWASP Top 10 for LLMs. Explore our interactive guide to uncover and mitigate the biggest risks across your AI pipelines.
Nov 20, 2025
By 
All Paths Lead to Your Cloud: A Mapping of Initial Access Vectors to Your AWS Environment
CIEM, Cloud Security, DSPM, IAM

All Paths Lead to Your Cloud: A Mapping of Initial Access Vectors to Your A...

Initial-access risks in AWS demand clarity. Uncover how service exposure and access-by-design flaws open cloud perimeters and learn how to secure them...
Nov 18, 2025
By  and
Agentless Vs. Agent-Based Scanning in Kubernetes: A Deep Dive
Cloud Runtime Security, Cloud Security, Cloud Workload Protection, CWPP

Agentless Vs. Agent-Based Scanning in Kubernetes: A Deep Dive

Kubernetes security depends on smart scanning. Compare agentless and agent-based approaches to find the right balance between coverage and runtime def...
Nov 13, 2025
By 
Regaining Control Over Identity and Access
CIEM, Cloud Security, IAM

Regaining Control Over Identity and Access

Cloud permissions outpace control. Learn how CIEM restores visibility, enforces least privilege, and secures every identity in dynamic cloud environments.
Nov 12, 2025
By 
An Inside Look into ASPM: Five Findings from New Industry Research
AppSec, ASPM, Cloud Security, Code Security, DevSecOps, Research

An Inside Look into ASPM: Five Findings from New Industry Research

ASPM is emerging as the orchestration layer for AppSec. Explore key findings in new research from Omdia on risk reduction, automation, and tool conver...
Feb 09, 2026
By 
Closing the Gap Between Cloud Visibility and Network Security
Announcement, Cloud Security, Cloud Security Platform, CNAPP

Closing the Gap Between Cloud Visibility and Network Security

Cloud visibility improves risk prioritization by adding network security context, revealing protected paths, reducing false positives, and focusing te...
Feb 17, 2026
By  and
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
AppSec, Cloud Detection and Response, Cloud Runtime Security, Cloud Security, Supply Chain Security

Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm

Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
Nov 26, 2025
By  and
Agentless vs. Agent-Based Security: How to Use Them to Stay Secure
Cloud Workload Protection, Cloud Workload Protection Platform

Agentless vs. Agent-Based Security: How to Use Them to Stay Secure

The cloud computing industry will see a staggering compound annual growth rate of over 15% through 2028 when its market cap is expected to exceed $1 T...
Feb 09, 2023
By 
Announcing Checkov 2.0: Deepening Open Source IaC Security
Cloud Workload Protection Platform, DevSecOps

Announcing Checkov 2.0: Deepening Open Source IaC Security

Checkov 2.0 is a graph-based, open source IaC security tool for environments with complex dependencies across resources and modules.
Apr 08, 2021
By 
Container Security: A Layer-by-Layer Guide for Security Engineers
ASPM, Cloud Runtime Security, Cloud Security, CNAPP, Containers

Container Security: A Layer-by-Layer Guide for Security Engineers

Container security demands more than shift left. Learn how to build defense in depth across IDE, CI, registry, admission control and runtime without a...
Mar 03, 2026
By  and
Code to Cloud Vulnerability Management
Cloud Native Application Protection Platform, CNAPP

Code to Cloud Vulnerability Management

Innovative vulnerability management dashboard streamlines discovery, prioritization and remediation of vulns, ensuring robust security from code to cloud.
Oct 26, 2023
By  and
Palo Alto Networks and Veracode: Unifying Application Security from Code to Cloud
Application Security, AppSec, ASPM, Cloud Security, Partners

Palo Alto Networks and Veracode: Unifying Application Security from Code to...

Secure your software supply chain with the Cortex Cloud and Veracode integration. Correlate code vulnerabilities with cloud context to prioritize and ...
Jan 20, 2026
By 

Subscribe to Cloud Security Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Get the latest news, invites to events, and threat alerts

Get the latest news, invites to events, and threat alerts