Prisma Clud

SEPTEMBER 14, 2023

Get an in-depth look at the attack vectors, technical details and a real-world demo in this blog post highlighting our latest research. Reference a tag. Figure 8: Calling an action using a tag We can use the secrets exfiltrated in the flow to infect the repository with malicious code. Reference a commit hash. Reference a branch.

Malware 144

Malware Open Source Research Software 144

Prisma Clud

AUGUST 30, 2023

As we discussed in the previous blog post, Third-Party GitHub Actions: Effects of an Opt-Out Permission Model , the permissive nature of GitHub Actions workflows is prevalent throughout the open-source community and private projects on GitHub. Figure 3: Pyupio/safety’s action.yaml file pulls a mutable image with the ‘latest’ tag.

Software Review 98

Software Review Systems Review Open Source Resources 98

Palo Alto Networks

FEBRUARY 9, 2023

The Key to IT Org Success in the Cloud Great things happen when an IT organization moves to the cloud. Yet, many public sector organizations are apprehensive to move to the cloud, or they have been wondering why their organizations are still struggling in the cloud. We are going to learn something today!

Cloud 48

Cloud Weak Development Team Scalability Infrastructure 48

Palo Alto Networks

OCTOBER 17, 2019

When it comes to the impact of CCPA on your cloud business, two key questions need to be evaluated: . How will this impact your public cloud security and compliance program? . You can also create policies using services like AWS Config and Azure Policy that enforce tagging rules and conventions. Data Security.

Cloud 47

Cloud Lambda Compliance AWS 47

Prisma Clud

MAY 15, 2023

Through advances in cloud technology, data access is now readily available. With datasets increasingly made available to company employees via cloud adoption or migration, the potential for personal and identifiable data falling into the wrong hands increases. This is a boon for developers.

Organization 52

Organization Cloud Policies Serverless 52