• Blog
  • Cloud Security

Cloud Security

Cloud Security

Application Security
Cloud Posture Security
Cloud Runtime Security
AI Security Posture Management
Cloud Native Application Protection Platform
Where Cloud Security Stands Today and Where AI Breaks It
Announcement, Cloud Native Application Protection Platform, Cloud Security, CNAPP, Reports

Where Cloud Security Stands Today and Where AI Breaks It

Cloud security trends reveal where teams gain ground and fragmentation breaks defense. Explore insights from 2,800 leaders and how cloud, identity and AI risks converge.
Dec 16, 2025
By 
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
AppSec, Cloud Detection and Response, Cloud Runtime Security, Cloud Security, Supply Chain Security

Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm

Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
Nov 26, 2025
By  and
Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossible
CIEM, Cloud Security, IAM, Identity Security, KSPM

Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossibl...

Kubernetes identity security demands clarity. Learn how KIEMPossible uncovers entities, permissions and usage to help you reduce identity attack surfa...
Nov 25, 2025
By 
Is Your Snowflake Data at Risk? Find and Protect Sensitive Data with DSPM
Data Security, Data Security Posture Management

Is Your Snowflake Data at Risk? Find and Protect Sensitive Data with DSPM

Cloud data security is critical. Learn how Snowflake users can mitigate risks with effective data security posture management (DSPM) and enhanced secu...
Nov 21, 2025
By 
Beyond Shift Left: Why Application Security Needs Smart Context
Application Security, ASPM, Cloud Security

Beyond Shift Left: Why Application Security Needs Smart Context

Application security posture management (ASPM) turns scans into context, prioritizes risk, and embeds guidance in developer workflows to prevent produ...
Sep 26, 2025
By 
The Expanding API Attack Surface
API Security, Cloud Runtime Security, Cloud Workload Protection, CWPP, Web Application & API Security

The Expanding API Attack Surface

API security for cloud-native teams: discover every API, prioritize risk with context, and enable real-time protection without slowing developers.
Sep 24, 2025
By  and
How Auto-Remediation Shifts the Odds in Cloud Security
Cloud Security, Cloud-Native Application Protection Platform, CNAPP

How Auto-Remediation Shifts the Odds in Cloud Security

CNAPP autoremediation streamlines cloud security by cutting alert noise, enforcing guardrails, and driving faster, safer outcomes for teams.
Sep 17, 2025
By 
Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downloads at Risk
AppSec, ASPM, Cloud Security

Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downl...

npm supply chain attack exposed billions of downloads to risk. Learn how malicious packages spread and how to prevent threats with Cortex Cloud.
Sep 10, 2025
By  and
Accelerate Secure Development by Automating Delivery of a Compliant Cloud Infrastructure
AppSec, Cloud Security, Partners

Accelerate Secure Development by Automating Delivery of a Compliant Cloud I...

Cortex Cloud and HashiCorp Terraform integration secures cloud infrastructure by default, enabling fast, compliant provisioning and reduced risk.
Sep 09, 2025
By 
Taking Cloud Security from Visibility to Prevention with eBPF
Cloud Detection and Response, Cloud Runtime Security, Cloud Security, Cloud Workload Protection, CNAPP

Taking Cloud Security from Visibility to Prevention with eBPF

eBPF delivers real-time cloud security with deep visibility, stability, and speed—enabling Cortex to protect workloads w...
Aug 27, 2025
By 
Why Self-Managed AI Models Are Blind Spots and What to Do About It
AI Security, AI Security Posture Management, Cloud Security

Why Self-Managed AI Models Are Blind Spots and What to Do About It

Understand the real AI security risks of running self-managed models, from hidden deployments to supply chain threats, and how to effectively monitor ...
Aug 18, 2025
By 
Microsoft Entra Permissions Management to Retire: Why the Time for a Vendor-Neutral CIEM Is Now
Cloud Infrastructure Entitlement Management, Cloud Security, Identity Security

Microsoft Entra Permissions Management to Retire: Why the Time for a Vendor...

Microsoft Entra Permissions Management retirement leaves multicloud identities exposed. Discover why a vendor-neutral CIEM is essential and how Cortex...
Aug 15, 2025
By 
Announcing Checkov 2.0: Deepening Open Source IaC Security
Cloud Workload Protection Platform, DevSecOps

Announcing Checkov 2.0: Deepening Open Source IaC Security

Checkov 2.0 is a graph-based, open source IaC security tool for environments with complex dependencies across resources and modules.
Apr 08, 2021
By 
Explore the OWASP Top 10 for LLMs: A New Interactive Guide
AI Security, AI-SPM, Cloud Security

Explore the OWASP Top 10 for LLMs: A New Interactive Guide

AI security starts with the OWASP Top 10 for LLMs. Explore our interactive guide to uncover and mitigate the biggest risks across your AI pipelines.
Nov 20, 2025
By 
Understanding Template Injection Vulnerabilities
Cloud Workload Protection, Technical Documentation, Web Application & API Security

Understanding Template Injection Vulnerabilities

Template injection is a class of vulnerabilities that are commonly found in web applications and Prisma Cloud’s Web Application and API Security module can help.
Feb 22, 2022
By 
Agentless vs. Agent-Based Security: How to Use Them to Stay Secure
Cloud Workload Protection, Cloud Workload Protection Platform

Agentless vs. Agent-Based Security: How to Use Them to Stay Secure

The cloud computing industry will see a staggering compound annual growth rate of over 15% through 2028 when its market cap is expected to exceed $1 T...
Feb 09, 2023
By 
The New AI Attack Surface — How Cortex Cloud Secures MCP
AI Security, AI Security Posture Management

The New AI Attack Surface — How Cortex Cloud Secures MCP

MCP Security in Cortex Cloud protects AI applications by securing Model Context Protocol communications and detecting API-layer threats in real time.
Jun 13, 2025
By , and
Agentless Vs. Agent-Based Scanning in Kubernetes: A Deep Dive
Cloud Runtime Security, Cloud Security, Cloud Workload Protection, CWPP

Agentless Vs. Agent-Based Scanning in Kubernetes: A Deep Dive

Kubernetes security depends on smart scanning. Compare agentless and agent-based approaches to find the right balance between coverage and runtime def...
Nov 13, 2025
By 
Analyzing CVE-2023-50164: Apache Struts Path Traversal Vulnerability
Web Application & API Security

Analyzing CVE-2023-50164: Apache Struts Path Traversal Vulnerability

Read about CVE-2023-50164, a critical Apache Struts path traversal vulnerability, enabling attackers to gain full system control via remote code execu...
Dec 20, 2023
By 
Container Escape: New Vulnerabilities Affecting Docker and RunC
Cloud Posture Security, Cloud Workload Protection, Research

Container Escape: New Vulnerabilities Affecting Docker and RunC

Mitigate critical Leaky Vessels vulnerabilities in Docker and RunC with in-depth analysis on CVE-2024-21626, CVE-2024-23651, CVE-2024-23652, and CVE-2...
Feb 05, 2024
By  and

Subscribe to Cloud Security Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.

Get the latest news, invites to events, and threat alerts

Get the latest news, invites to events, and threat alerts