Blog
Cloud Native Security

Cloud Native Security

Implementing a Comprehensive Cloud Vulnerability Management Program

Cloud security incidents are on the rise, with 64% of organizations reporting an increase in data breaches. Another 48% of organizations report more compliance violations in 2024, which is followed by 45% experiencing increases in operational downtime due to misconfigurations.

Cloud Native Application Platform

Cloud Workload Protection Platform

Vulnerability Management

Jul 26, 2024

By Mohit Bhasin

Cloud Native Security

AI Security Posture Management

Data Security Posture Management

Cloud Security Posture Management

Cloud Infrastructure Entitlement Management

Cloud Workload Protection Platform

Cloud Native Application Protection Platform

AI Governance, AI Security Posture Management

Tackling AI Risk Requires a New Governance Framework

Artificial intelligence (AI) is advancing rapidly, with organizations across myriad industries deploying AI-powered applications at an unprecedented pace. In The State of Cloud-Native Security Report 2024, for...

Jul 25, 2024

By Sharon Farber

Announcement, Cloud Workload Protection Platform

Prisma Cloud Offers Certified Red Hat Vulnerability Scanning for Red Hat Op...

Prisma Cloud by Palo Alto Networks is a certified solution that supports the Red Hat OpenShift platform with more accurate, consistent and reliable ri...

Jul 24, 2024

By Derek Rogerson

Black Hat, Cloud Security

Heading to Vegas the Week of August 5th? Here’s Where to Find Us!

Join us in Las Vegas as we showcase our Code to CloudTM platform at Black Hat, BSides and Def Con. You won’t want to miss the breakout and theater sessions, demos, parties, prizes...

Jul 23, 2024

By Cameron Hyde

Cloud Security, Cloud Security Posture Management, Compliance

Cloud Security Simplified: NIST CSF 2.0 Meets Prisma Cloud

Earlier this year, the National Institute of Standards and Technology (NIST) published a major revision to their Cybersecurity Framework (CSF), known...

Jul 17, 2024

By Pranay Shastrulla

More Blogs

Displaying 1—16 of

394 results

Sort By:

Cloud Discovery and Exposure Management, Cloud Security

Where to Start When Dealing with Shadow Cloud Assets

Exploring the latest enhancements of Cloud Discovery & Exposure Management (CDEM) to combat shadow IT with Prisma Cloud.

Jul 11, 2024

By Cameron Hyde

Cloud Native Security Platform, Points of View

The Growing Dichotomy of AI-Powered Code in Cloud-Native Security

AI-generated code promises to reshape cloud-native application development practices, offering unparalleled efficiency gains and fostering innovation...

Jul 03, 2024

By Amol Mathur

Cloud Discovery and Exposure Management, Cloud Security Posture Management

Peekaboo! We See Connections Between Your Shadow and Sanctioned Clouds

Shadow IT and unmanaged cloud assets pose significant security risks for organizations. Prisma Cloud, in recent months, has addressed this visibility...

Jul 02, 2024

By Jason Williams

AppSec, AppSec, Cloud Native Application Platform

Inject Security into Your AWS Development Pipeline

Seamlessly integrate Code to Cloud security into your AWS development workflows with Prisma Cloud and AWS CodeCommit.

Jun 26, 2024

By Cameron Hyde

Cloud Security, DevSecOps

Empowering Developers and Security Teams with Prisma Cloud and Terraform

For cloud and development teams struggling with securing continuous rapid deployment (CI/CD) and needing faster security workflows, Prisma Cloud can help with cloud-native integrat...

Jun 25, 2024

By Derek Rogerson

Artificial Intelligence, Cloud Security Posture Management, Precision AI

CSPM Practitioners: Use AI To Your Advantage

For more than seven years now, cloud security posture management (CSPM) tools have provided cloud asset visibility, detected risky misconfigurations and monitored compliance postur...

Jun 21, 2024

By Jason Williams

Cloud Workload Protection, Vulnerability Management

Why EPSS Scores Matter for Vulnerability Management

Unaddressed security flaws can have significant repercussions — data breaches, financial loss, reputational damage — making vulnerability management critically important.

Jun 20, 2024

By Mohit Bhasin

CI/CD, Cloud Security, DevSecOps

2024 Open-Source Security Tools Roundup

We’re quickly approaching the halfway point of 2024 and, with it, the advent of the summer security conference season. This got us thinking about our favorite go-to open-source security tools!

Jun 18, 2024

By Matt Johnson and Steve Giguere

Cloud Security, DevSecOps

Instilling a Secure Cloud Mindset

The journey toward formidable — invincible — cloud security involves not just technological changes but a fundamental shift in culture, mindset, and operational processes. But attempting to harness the power of the cloud while ensuring the security and resilience of cri...

Jun 13, 2024

By Mohit Bhasin

AppSec, DevSecOps

One Small Step for Developers, One Giant Leap for Security

Incorporate Prisma Cloud directly into your development workflows with intuitive IDE and VCS integrations.

Jun 12, 2024

By Steve Giguere and Cameron Hyde

Cloud Security, Cloud Security Posture Management, Compliance

Breaking Bad Habits with CIS Benchmarks

In today’s cyberthreat climate, organizations must prioritize the security of their IT infrastructure. The Center for Internet Security (CIS) Benchmarks provide a set of comprehens...

Jun 11, 2024

By Chanchal Sutradhar

Data Security, Data Security Posture Management

Are Cloud Serverless Functions Exposing Your Data?

More than 25% of all publicly accessible serverless functions have access to sensitive data, as seen in internal research. The question then becomes, Are cloud serverless functions exposing your data? — which i...

Jun 06, 2024

By Golan Myers

Cloud Native Application Platform, Zero Trust Security

Acting on NSA Zero Trust Guidance for Applications and Workloads

The U.S. National Security Agency (NSA) recently published the cybersecurity information sheet Advancing Zero Trust Maturity Throughout the Applicatio...

Jun 05, 2024

By Jason Williams

API Security, Partners

Improving API Security with Google Cloud Service Extensions

Explore the potential of Service Extensions to strengthen your API security layer and protect web applications across any cloud-native architecture, public or private.

Jun 04, 2024

By Ori Berkovitch, Oryan Omer and Derek Rogerson

Announcement, Cloud Security

Harnessing AI to Bolster Cybersecurity: Safeguarding Qatar’s Digital Transf...

As the world embraces digital transformation, the threat landscape expands in parallel. With threat actors constantly developing new tactics, techniques and procedures, the speed t...

Jun 03, 2024

By Haider Pasha

Cloud Security, Code to Cloud

Best Practices for Managing Vulnerabilities in the Cloud–Part 2

Welcome back to our Best Practices for Managing Vulnerabilities in the Cloud series. In part one, we discussed how important it's to have complete visibility into vulnerabilities a...

May 31, 2024

By Mohit Bhasin and Alexandre Cezar

Load more blogs

More Blogs

Displaying 1—16 of

362 results

Sort By:

Application Security, AppSec

Protecting Your Delivery Pipeline: Extensive CI/CD Security with Prisma Clo...

With the rise in attacks on continuous integration and continuous delivery (CI/CD) environments, it’s no surprise that the U.S. Government recently released guidance to help organi...

Jul 27, 2023

By Jonathan Bregman

Cloud Security Posture Management, Cloud Workload Protection, Research

Container Escape: New Vulnerabilities Affecting Docker and RunC

A recent discovery identifies critical vulnerabilities affecting Docker and other container engines. Collectively called "Leaky Vessels", the vulnerab...

Feb 05, 2024

By Shaul Ben Hai and Artur Oleyarsh

Incident Response, New CVE, Vulnerability Management

Find and Fix XZ Utils in Just a Few Clicks

By now you’ve likely heard about the vulnerability in XZ Utils Data Compression Library that impacted multiple Linux distributions (CVE-2024-3094) and read the threat brief Palo Alto Networks Unit 42 posted.

Apr 03, 2024

By Mohit Bhasin, Alexandre Cezar and Nils Jannasch

Data Security, Data Security Posture Management, DevOps, Research

OpenAI Custom GPTs: What You Need to Worry About

The integration of OpenAI's Custom GPTs with personal data files and third-party APIs offers new opportunities for organizations looking for custom LLMs for a variety of needs. The...

Feb 15, 2024

By Ofir Balassiano and David Nir Orlovsky

Announcement, Announcement, Cloud Security, CNAPP, Products and Services

Prisma Cloud: Darwin Release Introduces Code to Cloud Intelligence

Cloud applications power the modern enterprise. Still, today’s app economy — propelled by AI-led development — will seem inaugural in retrospect. By...

Oct 18, 2023

By Ankur Shah

Cloud Native Application Protection Platform, Cloud Workload Protection Platform

Agent Vs Agentless: Determining the Right Deployment Option for Cloud Workl...

Organizations are embracing the cloud to facilitate digital transformation, from lifting and shifting to building cloud-native applications. Utilizing...

Feb 29, 2024

By Mohit Bhasin and Omri Cohen

Announcement, Cloud Security, Partners

Prisma Cloud’s Code to Cloud Security Featured at Google Cloud Next '24

Planning your schedule for the Google Cloud Next ‘24 event coming to the Mandalay Bay Convention Center in Las Vegas April 9–11? Please make some time...

Mar 18, 2024

By Derek Rogerson

Data Detection and Response, Data Security, Data Security Posture Management

Cloud Data Security & Protection: Everything You Need to Know

Data is currency for modern businesses. Organizations use data analytics to make decisions about new products and services or to provide better custom...

Mar 06, 2024

By Sharon Farber

Announcement, Cloud Native Application Protection Platform, DSPM

CNAPP, DSPM and DDR: A New Age in Cloud Security

It’s clear that organizations need more robust capabilities for detecting sensitive data, monitoring access and usage, and tackling misconfigurations and vulnerabilities.

Dec 05, 2023

By Dan Benjamin

Data Detection and Response, Data Loss Prevention, Data Security Posture Management

5 Essential Components of a Cloud DLP Solution

The data loss prevention (DLP) landscape has taken a long while to catch up with the realities of the public cloud. In this post, we’ll explain why this tooling, developed in the o...

Feb 20, 2024

By Benny Rofman

Announcement, Cloud Native Application Protection Platform, Cloud Workload Protection Platform

Forrester Names Prisma Cloud a Leader in Cloud Workload Security

Forrester has named Palo Alto Networks a Leader in The Forrester Wave™: Cloud Workload Security, Q1 2024. To us, this re...

Jan 30, 2024

By Jason Williams

Cloud Workload Protection Platform, DevSecOps

Announcing Checkov 2.0: Deepening Open Source IaC Security

The Bridgecrew team is excited to announce the release of Checkov 2.0, further enhancing one of the most popular open source IaC security scanners ava...

Apr 08, 2021

By Matt Johnson

Code Security, DevSecOps

Checkov 3.0: Upgraded Open-Source Infrastructure-as-Code Security

Version 3.0 of Checkov — Prisma Cloud’s open-source infrastructure-as-code (IaC) security scanner — is now available. Checkov 3.0 is a result of over 11 thousand new commits since...

Oct 25, 2023

By Matt Johnson

AppSec, CI/CD, DevOps, Research

The GitHub Actions Worm: Compromising GitHub Repositories Through the Actio...

Learn how a novel attack vector in GitHub Actions allows attackers to distribute malware across repositories using a technique that exploits the actio...

Sep 14, 2023

By Asi Greenholts

Announcement, Cloud Infrastructure Entitlement Management, Reports

A CIEM Leader and Outperformer

GigaOm named Prisma Cloud a Leader in Cloud Security Posture Management (CSPM), Container Security, and now Cloud Infrastructure Entitlement Management (CIEM).

Mar 20, 2024

By Cameron Hyde

Announcement, CNAPP, Government

Prisma Cloud Achieves “In Process” for FedRAMP High

Prisma Cloud takes the next step in working toward Federal Risk and Authorization Management Program (FedRAMP) High authorization and has achieved the "in process" milestone on the FedRAMP Marketplace.

Jan 23, 2024

By Cameron Hyde

Load more blogs

Cloud Native Security

Implementing a Comprehensive Cloud Vulnerability Management Program

Cloud Native Security

More Blogs

More Blogs

Subscribe to Cloud Native Security Blogs!

Get the latest news, invites to events, and threat alerts

Products and Services

Company

Popular Links