Where Cloud Security Stands Today and Where AI Breaks It
Cloud security trends reveal where teams gain ground and fragmentation breaks defense. Explore insights from 2,800 leaders and how cloud, identity and AI risks converge.
Cloud Security
Bitwarden CLI Impersonation Attack Steals Cloud Credentials and Spreads Acr...
Malicious @bitwarden/cli npm package steals cloud credentials & spreads via supply chains. Learn how to detect TeamPCP’s worm & protect CI/CD with Cor...
When Security Scanners Become the Weapon: Breaking Down the Trivy Supply Ch...
The Trivy Supply Chain Attack shows how security tools can be weaponized. Learn how this 2026 breach unfolded and how Cortex Cloud blocks the threat.
Level Up Your AppSec Team with an Agentic Workforce
Optimize your AppSec program with Cortex Cloud. Our AI AppSec Agent automates vulnerability remediation, prioritizes risks, and stops threats before production.
Cortex Cloud Named Leader and Outperformer in the 2026 GigaOm Radar for CIE...
Cloud infrastructure entitlement management is foundational to CNAPP. See why Cortex Cloud was named a Leader in the 2026 GigaOm CIEM Radar.
More Blogs
Displaying 1—16 of
482 results
Sort By:
Container Security: A Layer-by-Layer Guide for Security Engineers
Container security demands more than shift left. Learn how to build defense in depth across IDE, CI, registry, admission control and runtime without a...
Why the Future of Cloud Security Is Agentic
Agentic cloud security marks the shift from dashboards to autonomous action. Learn why AI agents are redefining cloud defense and closing the speed gap.
Closing the Gap Between Cloud Visibility and Network Security
Cloud visibility improves risk prioritization by adding network security context, revealing protected paths, reducing false positives, and focusing te...
An Inside Look into ASPM: Five Findings from New Industry Research
ASPM is emerging as the orchestration layer for AppSec. Explore key findings in new research from Omdia on risk reduction, automation, and tool conver...
Palo Alto Networks and Veracode: Unifying Application Security from Code to...
Secure your software supply chain with the Cortex Cloud and Veracode integration. Correlate code vulnerabilities with cloud context to prioritize and ...
Is AI a New Challenge for Cloud Security? Yes and No.
AI security challenges are accelerating as models and agents reshape cloud risk. Learn where traditional controls break down and how to close the AI security gap.
AI-Powered Cloud Security That Sees Everything and Fixes It Faster
AI-powered cloud security unifies posture, runtime and AppSec with autonomous investigation, guardrails and real-time protection to reduce risk faster...
Understanding API Risk in the Age of AI
API security now sits at the center of AI risk. Learn how AI-driven traffic expands exposure and how Cortex Cloud delivers discovery, prioritization and real-time protection.
OWASP Top 10 for Agentic Applications 2026 Is Here – Why It Matters and How...
Agentic AI introduces new risks across tools, identities, supply chains and memory. Learn what the OWASP Top 10 for Agentic AI means and how to secure autonomous systems.
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossibl...
Kubernetes identity security demands clarity. Learn how KIEMPossible uncovers entities, permissions and usage to help you reduce identity attack surfa...
Is Your Snowflake Data at Risk? Find and Protect Sensitive Data with DSPM
Cloud data security is critical. Learn how Snowflake users can mitigate risks with effective data security posture management (DSPM) and enhanced secu...
Explore the OWASP Top 10 for LLMs: A New Interactive Guide
AI security starts with the OWASP Top 10 for LLMs. Explore our interactive guide to uncover and mitigate the biggest risks across your AI pipelines.
All Paths Lead to Your Cloud: A Mapping of Initial Access Vectors to Your A...
Initial-access risks in AWS demand clarity. Uncover how service exposure and access-by-design flaws open cloud perimeters and learn how to secure them...
Agentless Vs. Agent-Based Scanning in Kubernetes: A Deep Dive
Kubernetes security depends on smart scanning. Compare agentless and agent-based approaches to find the right balance between coverage and runtime def...
Regaining Control Over Identity and Access
Cloud permissions outpace control. Learn how CIEM restores visibility, enforces least privilege, and secures every identity in dynamic cloud environments.
More Blogs
Displaying 1—16 of
482 results
Sort By:
Introducing Cortex Cloud 2.0: Smarter Cloud Security for an AI-Driven World
Cortex Cloud 2.0 delivers unified protection from code to cloud to SOC, turning complexity into clarity with AI-driven prevention and response.
Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downl...
npm supply chain attack exposed billions of downloads to risk. Learn how malicious packages spread and how to prevent threats with Cortex Cloud.
Model Context Protocol (MCP): A Security Overview
Model Context Protocol (MCP) introduces new AI integration risks. Learn how to manage threats like prompt injection, credential leaks, and toolchain abuse.
OWASP Top 10 for Agentic Applications 2026 Is Here – Why It Matters and How...
Agentic AI introduces new risks across tools, identities, supply chains and memory. Learn what the OWASP Top 10 for Agentic AI means and how to secure autonomous systems.
Introducing Cortex Cloud ASPM
Cortex Cloud ASPM redefines application security with context-aware prevention, unified policy and runtime insight across the full software lifecycle.
AI-SPM Now Generally Available: Enhancing AI Security and Compliance with P...
Learn how AI Security Posture Management (AI-SPM) addresses new cloud security challenges, including model risk, data exposure, and misuse in AI envir...
Announcement, Application Security, Cloud Security, CNAPP, News and Events, Product Features, Products and Services
Introducing Cortex Cloud — The Future of Real-Time Cloud Security
Cortex Cloud brings the world’s leading CNAPP onto the #1 SecOps platform, delivering real-time protection — for the fir...
Why the Future of Cloud Security Is Agentic
Agentic cloud security marks the shift from dashboards to autonomous action. Learn why AI agents are redefining cloud defense and closing the speed gap.
An Inside Look into ASPM: Five Findings from New Industry Research
ASPM is emerging as the orchestration layer for AppSec. Explore key findings in new research from Omdia on risk reduction, automation, and tool conver...
Closing the Gap Between Cloud Visibility and Network Security
Cloud visibility improves risk prioritization by adding network security context, revealing protected paths, reducing false positives, and focusing te...
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
Agentless vs. Agent-Based Security: How to Use Them to Stay Secure
The cloud computing industry will see a staggering compound annual growth rate of over 15% through 2028 when its market cap is expected to exceed $1 T...
Announcing Checkov 2.0: Deepening Open Source IaC Security
Checkov 2.0 is a graph-based, open source IaC security tool for environments with complex dependencies across resources and modules.
Container Security: A Layer-by-Layer Guide for Security Engineers
Container security demands more than shift left. Learn how to build defense in depth across IDE, CI, registry, admission control and runtime without a...
Code to Cloud Vulnerability Management
Innovative vulnerability management dashboard streamlines discovery, prioritization and remediation of vulns, ensuring robust security from code to cloud.
Palo Alto Networks and Veracode: Unifying Application Security from Code to...
Secure your software supply chain with the Cortex Cloud and Veracode integration. Correlate code vulnerabilities with cloud context to prioritize and ...
Subscribe to Cloud Security Blogs!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.
This site is protected by reCAPTCHA and the Google
Privacy Policy and
Terms of Service apply.