• Blog
  • Cloud Native Security

Cloud Native Security

Cloud Native Security

AI Security Posture Management
Data Security Posture Management
Cloud Security Posture Management
Cloud Infrastructure Entitlement Management
Cloud Workload Protection Platform
Cloud Native Application Protection Platform
Stay Ahead of Cyberthreats: Prisma Cloud and the Essential Eight Framework
Cloud Security, Cloud Security Posture Management, Compliance

Stay Ahead of Cyberthreats: Prisma Cloud and the Essential Eight Framework

The Australian Cyber Security Centre (ACSC), led by the Australian Signals Directorate (ASD), has developed a comprehensive list of strategies for mit...
Jul 31, 2024
By 
Implementing a Comprehensive Cloud Vulnerability Management Program
Cloud Native Application Platform, Cloud Workload Protection Platform, Vulnerability Management

Implementing a Comprehensive Cloud Vulnerability Management Program

Cloud security incidents are on the rise, with 64% of organizations reporting an increase in data breaches. Another 48%...
Jul 26, 2024
By 
Tackling AI Risk Requires a New Governance Framework
AI Governance, AI Security Posture Management

Tackling AI Risk Requires a New Governance Framework

Artificial intelligence (AI) is advancing rapidly, with organizations across myriad industries deploying AI-powered applications at an unprecedented pace. In The State of Cloud-Native Security Report 2024, for...
Jul 25, 2024
By 
Prisma Cloud Offers Certified Red Hat Vulnerability Scanning for Red Hat OpenShift
Announcement, Cloud Workload Protection Platform

Prisma Cloud Offers Certified Red Hat Vulnerability Scanning for Red Hat Op...

Prisma Cloud by Palo Alto Networks is a certified solution that supports the Red Hat OpenShift platform with more accurate, consistent and reliable ri...
Jul 24, 2024
By 
Why EPSS Scores Matter for Vulnerability Management
Cloud Workload Protection, Vulnerability Management

Why EPSS Scores Matter for Vulnerability Management

Unaddressed security flaws can have significant repercussions — data breaches, financial loss, reputational damage — making vulnerability management critically important.
Jun 20, 2024
By 
2024 Open-Source Security Tools Roundup
CI/CD, Cloud Security, DevSecOps

2024 Open-Source Security Tools Roundup

We’re quickly approaching the halfway point of 2024 and, with it, the advent of the summer security conference season. This got us thinking about our favorite go-to open-source security tools!
Jun 18, 2024
By  and
Instilling a Secure Cloud Mindset
Cloud Security, DevSecOps

Instilling a Secure Cloud Mindset

The journey toward formidable — invincible — cloud security involves not just technological changes but a fundamental shift in culture, mindset, and operational processes. But attempting to harness the power of the cloud while ensuring the security and resilience of cri...
Jun 13, 2024
By 
One Small Step for Developers, One Giant Leap for Security
AppSec, DevSecOps

One Small Step for Developers, One Giant Leap for Security

Incorporate Prisma Cloud directly into your development workflows with intuitive IDE and VCS integrations.
Jun 12, 2024
By  and
Breaking Bad Habits with CIS Benchmarks
Cloud Security, Cloud Security Posture Management, Compliance

Breaking Bad Habits with CIS Benchmarks

In today’s cyberthreat climate, organizations must prioritize the security of their IT infrastructure. The Center for Internet Security (CIS) Benchmarks provide a set of comprehens...
Jun 11, 2024
By 
Are Cloud Serverless Functions Exposing Your Data?
Data Security, Data Security Posture Management

Are Cloud Serverless Functions Exposing Your Data?

More than 25% of all publicly accessible serverless functions have access to sensitive data, as seen in internal research. The question then becomes, Are cloud serverless functions exposing your data? — which i...
Jun 06, 2024
By 
Acting on NSA Zero Trust Guidance for Applications and Workloads
Cloud Native Application Platform, Zero Trust Security

Acting on NSA Zero Trust Guidance for Applications and Workloads

The U.S. National Security Agency (NSA) recently published the cybersecurity information sheet Advancing Zero Trust Maturity Throughout the Applicatio...
Jun 05, 2024
By 
Improving API Security with Google Cloud Service Extensions
API Security, Partners

Improving API Security with Google Cloud Service Extensions

Explore the potential of Service Extensions to strengthen your API security layer and protect web applications across any cloud-native architecture, public or private.
Jun 04, 2024
By , and
CNAPP, DSPM and DDR: A New Age in Cloud Security
Announcement, Cloud Native Application Protection Platform, DSPM

CNAPP, DSPM and DDR: A New Age in Cloud Security

It’s clear that organizations need more robust capabilities for detecting sensitive data, monitoring access and usage, and tackling misconfigurations and vulnerabilities.
Dec 05, 2023
By 
5 Essential Components of a Cloud DLP Solution
Data Detection and Response, Data Loss Prevention, Data Security Posture Management

5 Essential Components of a Cloud DLP Solution

The data loss prevention (DLP) landscape has taken a long while to catch up with the realities of the public cloud. In this post, we’ll explain why this tooling, developed in the o...
Feb 20, 2024
By 
Forrester Names Prisma Cloud a Leader in Cloud Workload Security
Announcement, Cloud Native Application Protection Platform, Cloud Workload Protection Platform

Forrester Names Prisma Cloud a Leader in Cloud Workload Security

Forrester has named Palo Alto Networks a Leader in The Forrester Wave™: Cloud Workload Security, Q1 2024. To us, this re...
Jan 30, 2024
By 
Announcing Checkov 2.0: Deepening Open Source IaC Security
Cloud Workload Protection Platform, DevSecOps

Announcing Checkov 2.0: Deepening Open Source IaC Security

The Bridgecrew team is excited to announce the release of Checkov 2.0, further enhancing one of the most popular open source IaC security scanners ava...
Apr 08, 2021
By 
Checkov 3.0: Upgraded Open-Source Infrastructure-as-Code Security
Code Security, DevSecOps

Checkov 3.0: Upgraded Open-Source Infrastructure-as-Code Security

Version 3.0 of Checkov — Prisma Cloud’s open-source infrastructure-as-code (IaC) security scanner — is now available. Checkov 3.0 is a result of over 11 thousand new commits since...
Oct 25, 2023
By 
The GitHub Actions Worm: Compromising GitHub Repositories Through the Actions Dependency Tree
AppSec, CI/CD, DevOps, Research

The GitHub Actions Worm: Compromising GitHub Repositories Through the Actio...

Learn how a novel attack vector in GitHub Actions allows attackers to distribute malware across repositories using a technique that exploits the actio...
Sep 14, 2023
By 
A CIEM Leader and Outperformer
Announcement, Cloud Infrastructure Entitlement Management, Reports

A CIEM Leader and Outperformer

GigaOm named Prisma Cloud a Leader in Cloud Security Posture Management (CSPM), Container Security, and now Cloud Infrastructure Entitlement Management (CIEM).
Mar 20, 2024
By 
Prisma Cloud Achieves “In Process” for FedRAMP High
Announcement, CNAPP, Government

Prisma Cloud Achieves “In Process” for FedRAMP High

Prisma Cloud takes the next step in working toward Federal Risk and Authorization Management Program (FedRAMP) High authorization and has achieved the "in process" milestone on the FedRAMP Marketplace.
Jan 23, 2024
By 

Subscribe to Cloud Native Security Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.

Get the latest news, invites to events, and threat alerts