Blog
Cloud Native Security

Cloud Native Security

Security Theater: Don’t Hang your Hat on Compliance

Security breaches can cost millions. Everyone answers to someone — whether it's a manager, director, CISO, CEO or the company board. They’re going to want to know how security teams are protecting their infrastructure.

Application Security

Cloud Security

Compliance

Apr 18, 2024

By Steve Giguere and Cameron Hyde

Cloud Native Security

Cloud Native Application Protection Platform

Cloud Workload Protection Platform

Cloud Security Posture Management

Data Security Posture Management

Cloud Infrastructure Entitlement Management

DevSecOps

Partners

Cloud Security Posture Management, Products and Services

Prisma Cloud Adds Telecommunications Security Act Compliance Framework

Prisma Cloud has added the Telecommunications Security Act to its list of out-of-the-box compliance standards. With this release, public electronic co...

Apr 17, 2024

By Jason Williams

Data Detection and Response, Data Security, Data Security Posture Management

How to Build an Enterprise Data Security Team

Leading a data security company comes with great responsibility. A good chunk of my time is spent with security leaders discussing top-of-mind trends and topics.

Apr 16, 2024

By Dan Benjamin

Code to Cloud, Healthcare

Why Healthcare Needs a Code-to-Cloud Security Platform

The adoption of cloud infrastructure for application modernization is a significant trend, and healthcare is no different. However, the sensitive nature of health data, combined with the healthcare sector's inc...

Apr 11, 2024

By Jason Williams and Emily Rodenhuis

Data Detection and Response, Data Security, Data Security Posture Management

Redshift Security: Attack Surface Explained

In our previous two posts, Access and Data Flows and Data Backups and Encryption, we discussed security best practices to implement least-privileged access on Redshift and reduce t...

Apr 05, 2024

By Ofir Shaty and Ofir Balassiano

More Blogs

Displaying 1—16 of

364 results

Sort By:

Incident Response, New CVE, Vulnerability Management

Find and Fix XZ Utils in Just a Few Clicks

By now you’ve likely heard about the vulnerability in XZ Utils Data Compression Library that impacted multiple Linux distributions (CVE-2024-3094) and read the threat brief Palo Alto Networks Unit 42 posted.

Apr 03, 2024

By Mohit Bhasin, Alexandre Cezar and Nils Jannasch

Data Security, Data Security Posture Management

Redshift Security: Data Backups and Encryption Best Practices

In this blog post, second in a series, we focus on risks that come from a misconfigured Redshift, like encryption, backups and logs. We’ll explore sec...

Apr 02, 2024

By Ofir Shaty and Ofir Balassiano

Announcement, Data Security Posture Management

Prisma Cloud DSPM Wins in Cloud-Native Data Security

The 2024 Globee Security Awards Gives Top Honors to Prisma Cloud Data Security Posture Management (DSPM) Solution in Multiple Categories

Mar 27, 2024

By Sharon Farber

Data Detection and Response, Data Security, Data Security Posture Management

Redshift Security: Access and Data Flows Explained

This blog post is the first in a series that exposes security risks, possible attack vectors, and how to hunt and prevent them using data detection and response (DDR).

Mar 26, 2024

By Ofir Shaty and Ofir Balassiano

Announcement, Cloud Infrastructure Entitlement Management, Reports

A CIEM Leader and Outperformer

GigaOm named Prisma Cloud a Leader in Cloud Security Posture Management (CSPM), Container Security, and now Cloud Infrastructure Entitlement Management (CIEM).

Mar 20, 2024

By Cameron Hyde

Data Detection and Response, Data Security Posture Management, DLP, Incident Response

An Incident Response Framework for Cloud Data Security

How do you respond to a security incident? In some cases, the answer might be ‘block first, ask questions later.’ That was common a decade ago in the centralized IT infrastructure....

Mar 20, 2024

By Yotam Ben-Ezra

Announcement, Cloud Security, Partners

Prisma Cloud’s Code to Cloud Security Featured at Google Cloud Next '24

Planning your schedule for the Google Cloud Next ‘24 event coming to the Mandalay Bay Convention Center in Las Vegas April 9–11? Please make some time...

Mar 18, 2024

By Derek Rogerson

Cloud Security Posture Management, Data Detection and Response, Data Security

Achieving Cloud Data and Compliance: How You Can Make It Work

When it comes to sensitive data, the ‘wild west’ approach that characterized the early 2000s is gone. Dozens of data protection frameworks have emerge...

Mar 14, 2024

By Benny Rofman

Data Detection and Response, Data Security, Data Security Posture Management, DLP

Data Security Platforms: 9 Key Capabilities and Evaluation Criteria

Recent years have seen a flurry of new technologies and vendors — first in CSPM, and then DSPM. Dozens of products have emerged, in addition to existi...

Mar 12, 2024

By Yotam Ben-Ezra

Data Detection and Response, Data Security, Data Security Posture Management

Cloud Data Security & Protection: Everything You Need to Know

Data is currency for modern businesses. Organizations use data analytics to make decisions about new products and services or to provide better custom...

Mar 06, 2024

By Sharon Farber

Data Detection and Response, Data Security, Data Security Posture Management

Prisma Cloud Data Security Vs. Other CSPM Vendors

Closing the gap on cloud data security is a top priority for today’s enterprises. To answer this need, data security posture management (DSPM) has emerged as one of the most in-dem...

Mar 01, 2024

By Sharon Farber

Cloud Native Application Protection Platform, Cloud Workload Protection Platform

Agent Vs Agentless: Determining the Right Deployment Option for Cloud Workl...

Organizations are embracing the cloud to facilitate digital transformation, from lifting and shifting to building cloud-native applications. Utilizing...

Feb 29, 2024

By Mohit Bhasin and Omri Cohen

Data Detection and Response, Data Loss Prevention, Data Security Posture Management

5 Essential Components of a Cloud DLP Solution

The data loss prevention (DLP) landscape has taken a long while to catch up with the realities of the public cloud. In this post, we’ll explain why this tooling, developed in the o...

Feb 20, 2024

By Benny Rofman

Data Security, Data Security Posture Management, DevOps, Research

OpenAI Custom GPTs: What You Need to Worry About

The integration of OpenAI's Custom GPTs with personal data files and third-party APIs offers new opportunities for organizations looking for custom LLMs for a variety of needs. The...

Feb 15, 2024

By Ofir Balassiano and David Nir Orlovsky

Data Security, Data Security Posture Management, Research

Mastering Data Flow: Enhancing Security and Compliance in the Cloud

Many organizations struggle to determine their data’s precise locations and pathways, making it challenging to ensure security and compliance througho...

Feb 14, 2024

By Sharon Farber

Cloud Security Posture Management, Cloud Workload Protection, Research

Container Escape: New Vulnerabilities Affecting Docker and RunC

A recent discovery identifies critical vulnerabilities affecting Docker and other container engines. Collectively called "Leaky Vessels", the vulnerab...

Feb 05, 2024

By Shaul Ben Hai and Artur Oleyarsh

Load more blogs

More Blogs

Displaying 1—16 of

363 results

Sort By:

Application Security, AppSec

Protecting Your Delivery Pipeline: Extensive CI/CD Security with Prisma Clo...

With the rise in attacks on continuous integration and continuous delivery (CI/CD) environments, it’s no surprise that the U.S. Government recently released guidance to help organi...

Jul 27, 2023

By Jonathan Bregman

Cloud Security Posture Management, Cloud Workload Protection, Research

Container Escape: New Vulnerabilities Affecting Docker and RunC

A recent discovery identifies critical vulnerabilities affecting Docker and other container engines. Collectively called "Leaky Vessels", the vulnerab...

Feb 05, 2024

By Shaul Ben Hai and Artur Oleyarsh

Incident Response, New CVE, Vulnerability Management

Find and Fix XZ Utils in Just a Few Clicks

Apr 03, 2024

By Mohit Bhasin, Alexandre Cezar and Nils Jannasch

Data Security, Data Security Posture Management, DevOps, Research

OpenAI Custom GPTs: What You Need to Worry About

The integration of OpenAI's Custom GPTs with personal data files and third-party APIs offers new opportunities for organizations looking for custom LLMs for a variety of needs. The...

Feb 15, 2024

By Ofir Balassiano and David Nir Orlovsky

Announcement, Announcement, Cloud Security, CNAPP, Products and Services

Prisma Cloud: Darwin Release Introduces Code to Cloud Intelligence

Cloud applications power the modern enterprise. Still, today’s app economy — propelled by AI-led development — will seem inaugural in retrospect. By...

Oct 18, 2023

By Ankur Shah

Cloud Native Application Protection Platform, Cloud Workload Protection Platform

Agent Vs Agentless: Determining the Right Deployment Option for Cloud Workl...

Organizations are embracing the cloud to facilitate digital transformation, from lifting and shifting to building cloud-native applications. Utilizing...

Feb 29, 2024

By Mohit Bhasin and Omri Cohen

Announcement, Cloud Security, Partners

Prisma Cloud’s Code to Cloud Security Featured at Google Cloud Next '24

Planning your schedule for the Google Cloud Next ‘24 event coming to the Mandalay Bay Convention Center in Las Vegas April 9–11? Please make some time...

Mar 18, 2024

By Derek Rogerson

Data Detection and Response, Data Security, Data Security Posture Management

Cloud Data Security & Protection: Everything You Need to Know

Data is currency for modern businesses. Organizations use data analytics to make decisions about new products and services or to provide better custom...

Mar 06, 2024

By Sharon Farber

Announcement, Cloud Native Application Protection Platform, DSPM

CNAPP, DSPM and DDR: A New Age in Cloud Security

It’s clear that organizations need more robust capabilities for detecting sensitive data, monitoring access and usage, and tackling misconfigurations and vulnerabilities.

Dec 05, 2023

By Dan Benjamin

Data Detection and Response, Data Loss Prevention, Data Security Posture Management

5 Essential Components of a Cloud DLP Solution

The data loss prevention (DLP) landscape has taken a long while to catch up with the realities of the public cloud. In this post, we’ll explain why this tooling, developed in the o...

Feb 20, 2024

By Benny Rofman

Announcement, Cloud Native Application Protection Platform, Cloud Workload Protection Platform

Forrester Names Prisma Cloud a Leader in Cloud Workload Security

Forrester has named Palo Alto Networks a Leader in The Forrester Wave™: Cloud Workload Security, Q1 2024. To us, this re...

Jan 30, 2024

By Jason Williams

Cloud Workload Protection Platform, DevSecOps

Announcing Checkov 2.0: Deepening Open Source IaC Security

The Bridgecrew team is excited to announce the release of Checkov 2.0, further enhancing one of the most popular open source IaC security scanners ava...

Apr 08, 2021

By Matt Johnson

Code Security, DevSecOps

Checkov 3.0: Upgraded Open-Source Infrastructure-as-Code Security

Version 3.0 of Checkov — Prisma Cloud’s open-source infrastructure-as-code (IaC) security scanner — is now available. Checkov 3.0 is a result of over 11 thousand new commits since...

Oct 25, 2023

By Matt Johnson

AppSec, CI/CD, DevOps, Research

The GitHub Actions Worm: Compromising GitHub Repositories Through the Actio...

Learn how a novel attack vector in GitHub Actions allows attackers to distribute malware across repositories using a technique that exploits the actio...

Sep 14, 2023

By Asi Greenholts

Announcement, Cloud Infrastructure Entitlement Management, Reports

A CIEM Leader and Outperformer

GigaOm named Prisma Cloud a Leader in Cloud Security Posture Management (CSPM), Container Security, and now Cloud Infrastructure Entitlement Management (CIEM).

Mar 20, 2024

By Cameron Hyde

Announcement, CNAPP, Government

Prisma Cloud Achieves “In Process” for FedRAMP High

Prisma Cloud takes the next step in working toward Federal Risk and Authorization Management Program (FedRAMP) High authorization and has achieved the "in process" milestone on the FedRAMP Marketplace.

Jan 23, 2024

By Cameron Hyde

Load more blogs