When Security Scanners Become the Weapon: Breaking Down the Trivy Supply Chain Attack
The Trivy Supply Chain Attack shows how security tools can be weaponized. Learn how this 2026 breach unfolded and how Cortex Cloud blocks the threat.
Cloud Security
Where Cloud Security Stands Today and Where AI Breaks It
Cloud security trends reveal where teams gain ground and fragmentation breaks defense. Explore insights from 2,800 leaders and how cloud, identity and AI risks converge.
Level Up Your AppSec Team with an Agentic Workforce
Optimize your AppSec program with Cortex Cloud. Our AI AppSec Agent automates vulnerability remediation, prioritizes risks, and stops threats before production.
Cortex Cloud Named Leader and Outperformer in the 2026 GigaOm Radar for CIE...
Cloud infrastructure entitlement management is foundational to CNAPP. See why Cortex Cloud was named a Leader in the 2026 GigaOm CIEM Radar.
Container Security: A Layer-by-Layer Guide for Security Engineers
Container security demands more than shift left. Learn how to build defense in depth across IDE, CI, registry, admission control and runtime without a...
More Blogs
Displaying 1—16 of
481 results
Sort By:
Why the Future of Cloud Security Is Agentic
Agentic cloud security marks the shift from dashboards to autonomous action. Learn why AI agents are redefining cloud defense and closing the speed gap.
Closing the Gap Between Cloud Visibility and Network Security
Cloud visibility improves risk prioritization by adding network security context, revealing protected paths, reducing false positives, and focusing te...
An Inside Look into ASPM: Five Findings from New Industry Research
ASPM is emerging as the orchestration layer for AppSec. Explore key findings in new research from Omdia on risk reduction, automation, and tool conver...
Palo Alto Networks and Veracode: Unifying Application Security from Code to...
Secure your software supply chain with the Cortex Cloud and Veracode integration. Correlate code vulnerabilities with cloud context to prioritize and ...
Is AI a New Challenge for Cloud Security? Yes and No.
AI security challenges are accelerating as models and agents reshape cloud risk. Learn where traditional controls break down and how to close the AI security gap.
AI-Powered Cloud Security That Sees Everything and Fixes It Faster
AI-powered cloud security unifies posture, runtime and AppSec with autonomous investigation, guardrails and real-time protection to reduce risk faster...
Understanding API Risk in the Age of AI
API security now sits at the center of AI risk. Learn how AI-driven traffic expands exposure and how Cortex Cloud delivers discovery, prioritization and real-time protection.
OWASP Top 10 for Agentic Applications 2026 Is Here – Why It Matters and How...
Agentic AI introduces new risks across tools, identities, supply chains and memory. Learn what the OWASP Top 10 for Agentic AI means and how to secure autonomous systems.
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossibl...
Kubernetes identity security demands clarity. Learn how KIEMPossible uncovers entities, permissions and usage to help you reduce identity attack surfa...
Is Your Snowflake Data at Risk? Find and Protect Sensitive Data with DSPM
Cloud data security is critical. Learn how Snowflake users can mitigate risks with effective data security posture management (DSPM) and enhanced secu...
Explore the OWASP Top 10 for LLMs: A New Interactive Guide
AI security starts with the OWASP Top 10 for LLMs. Explore our interactive guide to uncover and mitigate the biggest risks across your AI pipelines.
All Paths Lead to Your Cloud: A Mapping of Initial Access Vectors to Your A...
Initial-access risks in AWS demand clarity. Uncover how service exposure and access-by-design flaws open cloud perimeters and learn how to secure them...
Agentless Vs. Agent-Based Scanning in Kubernetes: A Deep Dive
Kubernetes security depends on smart scanning. Compare agentless and agent-based approaches to find the right balance between coverage and runtime def...
Regaining Control Over Identity and Access
Cloud permissions outpace control. Learn how CIEM restores visibility, enforces least privilege, and secures every identity in dynamic cloud environments.
Lessons Ted Lasso Can Teach You About CDR
Ted Lasso’s lessons inspire a smarter, faster, more collaborative approach to cloud detection and response. Learn to turn chaos into confidence.
More Blogs
Displaying 1—16 of
474 results
Sort By:
Shai-Hulud 2.0: How Cortex Helps Protect Against the Resurgent npm Worm
Shai-Hulud 2.0 exposes the fragility of software supply chains. Learn how the npm worm spreads through developer ecosyst...
Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downl...
npm supply chain attack exposed billions of downloads to risk. Learn how malicious packages spread and how to prevent threats with Cortex Cloud.
Introducing Cortex Cloud 2.0: Smarter Cloud Security for an AI-Driven World
Cortex Cloud 2.0 delivers unified protection from code to cloud to SOC, turning complexity into clarity with AI-driven prevention and response.
All Paths Lead to Your Cloud: A Mapping of Initial Access Vectors to Your A...
Initial-access risks in AWS demand clarity. Uncover how service exposure and access-by-design flaws open cloud perimeters and learn how to secure them...
Announcement, Application Security, Cloud Security, CNAPP, News and Events, Product Features, Products and Services
Introducing Cortex Cloud — The Future of Real-Time Cloud Security
Cortex Cloud brings the world’s leading CNAPP onto the #1 SecOps platform, delivering real-time protection — for the fir...
Introducing Cortex Cloud ASPM
Cortex Cloud ASPM redefines application security with context-aware prevention, unified policy and runtime insight across the full software lifecycle.
Model Context Protocol (MCP): A Security Overview
Model Context Protocol (MCP) introduces new AI integration risks. Learn how to manage threats like prompt injection, credential leaks, and toolchain abuse.
How Cortex Cloud and Semgrep Are Redefining AI-Driven Application Security
Modern AppSec demands context. Cortex Cloud and Semgrep integrate to unify code, runtime, and infrastructure visibility, helping teams prioritize expl...
AI-SPM Now Generally Available: Enhancing AI Security and Compliance with P...
Learn how AI Security Posture Management (AI-SPM) addresses new cloud security challenges, including model risk, data exposure, and misuse in AI envir...
Announcing Checkov 2.0: Deepening Open Source IaC Security
Checkov 2.0 is a graph-based, open source IaC security tool for environments with complex dependencies across resources and modules.
Explore the OWASP Top 10 for LLMs: A New Interactive Guide
AI security starts with the OWASP Top 10 for LLMs. Explore our interactive guide to uncover and mitigate the biggest risks across your AI pipelines.
Understanding Template Injection Vulnerabilities
Template injection is a class of vulnerabilities that are commonly found in web applications and Prisma Cloud’s Web Application and API Security module can help.
Agentless vs. Agent-Based Security: How to Use Them to Stay Secure
The cloud computing industry will see a staggering compound annual growth rate of over 15% through 2028 when its market cap is expected to exceed $1 T...
The New AI Attack Surface — How Cortex Cloud Secures MCP
MCP Security in Cortex Cloud protects AI applications by securing Model Context Protocol communications and detecting API-layer threats in real time.
Agentless Vs. Agent-Based Scanning in Kubernetes: A Deep Dive
Kubernetes security depends on smart scanning. Compare agentless and agent-based approaches to find the right balance between coverage and runtime def...
Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossibl...
Kubernetes identity security demands clarity. Learn how KIEMPossible uncovers entities, permissions and usage to help you reduce identity attack surfa...
Subscribe to Cloud Security Blogs!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.
This site is protected by reCAPTCHA and the Google
Privacy Policy and
Terms of Service apply.