Understanding API Risk in the Age of AI
API security now sits at the center of AI risk. Learn how AI-driven traffic expands exposure and how Cortex Cloud delivers discovery, prioritization and real-time protection.
Cloud Security
Where Cloud Security Stands Today and Where AI Breaks It
Cloud security trends reveal where teams gain ground and fragmentation breaks defense. Explore insights from 2,800 leaders and how cloud, identity and AI risks converge.
OWASP Top 10 for Agentic Applications 2026 Is Here – Why It Matters and How...
Agentic AI introduces new risks across tools, identities, supply chains and memory. Learn what the OWASP Top 10 for Agentic AI means and how to secure autonomous systems.
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossibl...
Kubernetes identity security demands clarity. Learn how KIEMPossible uncovers entities, permissions and usage to help you reduce identity attack surfa...
More Blogs
Displaying 1—16 of
471 results
Sort By:
Is Your Snowflake Data at Risk? Find and Protect Sensitive Data with DSPM
Cloud data security is critical. Learn how Snowflake users can mitigate risks with effective data security posture management (DSPM) and enhanced secu...
Explore the OWASP Top 10 for LLMs: A New Interactive Guide
AI security starts with the OWASP Top 10 for LLMs. Explore our interactive guide to uncover and mitigate the biggest risks across your AI pipelines.
All Paths Lead to Your Cloud: A Mapping of Initial Access Vectors to Your A...
Initial-access risks in AWS demand clarity. Uncover how service exposure and access-by-design flaws open cloud perimeters and learn how to secure them...
Agentless Vs. Agent-Based Scanning in Kubernetes: A Deep Dive
Kubernetes security depends on smart scanning. Compare agentless and agent-based approaches to find the right balance between coverage and runtime def...
Regaining Control Over Identity and Access
Cloud permissions outpace control. Learn how CIEM restores visibility, enforces least privilege, and secures every identity in dynamic cloud environments.
Lessons Ted Lasso Can Teach You About CDR
Ted Lasso’s lessons inspire a smarter, faster, more collaborative approach to cloud detection and response. Learn to turn chaos into confidence.
AI-SPM Update: 3 New Capabilities for Model Activity, Agentic AI and Softwa...
AI-SPM's new features analyze model activity to spot unused assets, enhance security for agentic AI deployments, and shift-left with software package ...
Introducing Cortex Cloud 2.0: Smarter Cloud Security for an AI-Driven World
Cortex Cloud 2.0 delivers unified protection from code to cloud to SOC, turning complexity into clarity with AI-driven prevention and response.
How Cortex Cloud and Semgrep Are Redefining AI-Driven Application Security
Modern AppSec demands context. Cortex Cloud and Semgrep integrate to unify code, runtime, and infrastructure visibility, helping teams prioritize expl...
Beyond Shift Left: Why Application Security Needs Smart Context
Application security posture management (ASPM) turns scans into context, prioritizes risk, and embeds guidance in developer workflows to prevent produ...
API Security, Cloud Runtime Security, Cloud Workload Protection, CWPP, Web Application & API Security
The Expanding API Attack Surface
API security for cloud-native teams: discover every API, prioritize risk with context, and enable real-time protection without slowing developers.
How Auto-Remediation Shifts the Odds in Cloud Security
CNAPP autoremediation streamlines cloud security by cutting alert noise, enforcing guardrails, and driving faster, safer outcomes for teams.
Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downl...
npm supply chain attack exposed billions of downloads to risk. Learn how malicious packages spread and how to prevent threats with Cortex Cloud.
Accelerate Secure Development by Automating Delivery of a Compliant Cloud I...
Cortex Cloud and HashiCorp Terraform integration secures cloud infrastructure by default, enabling fast, compliant provisioning and reduced risk.
Cloud Detection and Response, Cloud Runtime Security, Cloud Security, Cloud Workload Protection, CNAPP
Taking Cloud Security from Visibility to Prevention with eBPF
eBPF delivers real-time cloud security with deep visibility, stability, and speed—enabling Cortex to protect workloads w...
Why Self-Managed AI Models Are Blind Spots and What to Do About It
Understand the real AI security risks of running self-managed models, from hidden deployments to supply chain threats, and how to effectively monitor ...
More Blogs
Displaying 1—16 of
471 results
Sort By:
Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downl...
npm supply chain attack exposed billions of downloads to risk. Learn how malicious packages spread and how to prevent threats with Cortex Cloud.
Introducing Cortex Cloud 2.0: Smarter Cloud Security for an AI-Driven World
Cortex Cloud 2.0 delivers unified protection from code to cloud to SOC, turning complexity into clarity with AI-driven prevention and response.
All Paths Lead to Your Cloud: A Mapping of Initial Access Vectors to Your A...
Initial-access risks in AWS demand clarity. Uncover how service exposure and access-by-design flaws open cloud perimeters and learn how to secure them...
Announcement, Application Security, Cloud Security, CNAPP, News and Events, Product Features, Products and Services
Introducing Cortex Cloud — The Future of Real-Time Cloud Security
Cortex Cloud brings the world’s leading CNAPP onto the #1 SecOps platform, delivering real-time protection — for the fir...
Introducing Cortex Cloud ASPM
Cortex Cloud ASPM redefines application security with context-aware prevention, unified policy and runtime insight across the full software lifecycle.
Model Context Protocol (MCP): A Security Overview
Model Context Protocol (MCP) introduces new AI integration risks. Learn how to manage threats like prompt injection, credential leaks, and toolchain abuse.
How Cortex Cloud and Semgrep Are Redefining AI-Driven Application Security
Modern AppSec demands context. Cortex Cloud and Semgrep integrate to unify code, runtime, and infrastructure visibility, helping teams prioritize expl...
AI-SPM Now Generally Available: Enhancing AI Security and Compliance with P...
Learn how AI Security Posture Management (AI-SPM) addresses new cloud security challenges, including model risk, data exposure, and misuse in AI envir...
Announcing Checkov 2.0: Deepening Open Source IaC Security
Checkov 2.0 is a graph-based, open source IaC security tool for environments with complex dependencies across resources and modules.
Explore the OWASP Top 10 for LLMs: A New Interactive Guide
AI security starts with the OWASP Top 10 for LLMs. Explore our interactive guide to uncover and mitigate the biggest risks across your AI pipelines.
Understanding Template Injection Vulnerabilities
Template injection is a class of vulnerabilities that are commonly found in web applications and Prisma Cloud’s Web Application and API Security module can help.
Agentless vs. Agent-Based Security: How to Use Them to Stay Secure
The cloud computing industry will see a staggering compound annual growth rate of over 15% through 2028 when its market cap is expected to exceed $1 T...
The New AI Attack Surface — How Cortex Cloud Secures MCP
MCP Security in Cortex Cloud protects AI applications by securing Model Context Protocol communications and detecting API-layer threats in real time.
Agentless Vs. Agent-Based Scanning in Kubernetes: A Deep Dive
Kubernetes security depends on smart scanning. Compare agentless and agent-based approaches to find the right balance between coverage and runtime def...
Analyzing CVE-2023-50164: Apache Struts Path Traversal Vulnerability
Read about CVE-2023-50164, a critical Apache Struts path traversal vulnerability, enabling attackers to gain full system control via remote code execu...
Container Escape: New Vulnerabilities Affecting Docker and RunC
Mitigate critical Leaky Vessels vulnerabilities in Docker and RunC with in-depth analysis on CVE-2024-21626, CVE-2024-23651, CVE-2024-23652, and CVE-2...
Subscribe to Cloud Security Blogs!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.