Prisma Clud

MARCH 9, 2023

Come to San Francisco or join us online as we showcase the industry’s most comprehensive cloud-native application protection platform (CNAPP) at RSA Conference from Apr. RSA Conference is happening April 24 - 27 in San Francisco, California, and Prisma Cloud by Palo Alto Networks will be there!

Conference 52

Conference Cloud Weak Development Team Hotels 52

Palo Alto Networks

APRIL 28, 2021

The April 2021 Release for Prisma Cloud Propels Container Security Forward and Extends Our Workload Security Vision. The April 2021 release for Prisma Cloud propels container security forward and extends our workload security vision. The industry’s first cloud native-focused Attack framework.

Cloud 69

Cloud Malware Serverless Compliance 69

Prisma Clud

NOVEMBER 14, 2023

The issue was titled “ SECURITY: Azure/login in some cases leaks Azure Application Variables to the GitHub build log ”. Figure 1: Security issue reported in the Azure/login project Well this is pretty straight forward, I thought. For private repositories you may get a false sense of security due to the “private” title.

Azure 143

Azure Software Review Report Tools 143

Prisma Clud

AUGUST 2, 2023

Come to Las Vegas — as we showcase the industry’s most comprehensive cloud-native application protection platform (CNAPP) at Black Hat, BSides and Defcon. The platform delivers comprehensive security with both continuous visibility and proactive threat prevention throughout the application lifecycle. Fight Unfairly.

Cloud 52

Cloud Malware Software Review AWS 52

Prisma Clud

DECEMBER 5, 2023

The rise of AI, machine learning and surging interest in generative AI have increased the volume of data that organizations store in the cloud, creating new risk vectors related to the models themselves. Cloud service sprawl and multicloud deployments add complexity and create fluid environments where sensitive data is hard to monitor.

Cloud 52

Cloud Software Review Malware Analysis 52

Palo Alto Networks

MARCH 11, 2020

Why does it seem so hard to consistently deploy secure application infrastructure in the public cloud? Gartner predicts that by 2025, 99% of cloud security breaches will be the customer’s fault. Introducing Prisma Cloud DevOps Plugins. Fig 1: Integrated Plugins to Secure the Entire Application Lifecycle.

DevOps 54

DevOps Cloud Development Serverless 54

Palo Alto Networks

JUNE 9, 2020

Infrastructure as Code (IaC) has become the most common method for building cloud environments – and for obvious reasons. However, it’s essential to implement visibility and real-time feedback for developers using IaC before deploying cloud environments containing security or compliance flaws. Build Policies in Prisma Cloud.

Policies 52

Policies Cloud DevOps Azure 52

Prisma Clud

JUNE 22, 2023

Enterprises taking advantage of cloud-native architectures now have 53% of their cloud workloads hosted on public clouds, according to our recent State of Cloud-Native Security Report 2023. But, the sheer complexity of cloud technology can dramatically expand an organization’s attack surface.

Malware 76

Malware Linux Windows Operating System 76

Palo Alto Networks

OCTOBER 9, 2020

I propose that there are three fundamental and concrete practices DevOps and security teams can adopt to add security into the CI/CD pipeline and secure critical applications, involving: Infrastructure-as-Code (IaC). DevOps Teams Do Not Need to Be Security Experts. Kubernetes application manifests.

DevOps 94

DevOps Software Review Compliance Technical Review 94

Prisma Clud

APRIL 27, 2023

Since the term was first coined in 2017, GitOps has provided a new operating model for developing, delivering, testing, and deploying cloud-native infrastructure. Developers pushing code to the repository that ultimately gets deployed do not need access to the CI or CD platforms, nor the production environment.

Cloud 52

Cloud Infrastructure Policies Continuous Integration 52

Palo Alto Networks

SEPTEMBER 8, 2021

Developers and DevOps Teams Can Now Use Prisma Cloud’s Advanced Machine Learning to Prevent Dynamic Threats Before They are Deployed Into Operational Environments. Simultaneously, today’s cybercriminals continue to adapt as our threat researchers show in the Unit 42 Cloud Threat Report — cloud security incidents are on the rise.

Google Cloud 80

Google Cloud Serverless Azure Weak Development Team 80

Prisma Clud

JANUARY 10, 2023

You’ve decided to shift your cloud security left. You researched vendors, evaluated solutions, did a proof of concept and now you’re off the IaC security races. You know what your efficient, secure-by-default future holds, but how do you get there? Path 3 enables the most complete adoption of IaC security.

Programming 52

Programming Development Team Review Software Review Policies 52

TechCrunch

OCTOBER 10, 2022

A number of vendors are tackling the issue of open source security, offering tools that scan the metadata and descriptors of packages to find known exploits. Meanwhile, security teams lack true visibility … While the issue appears technical, in this app-driven era, it affects every facet of operations.”

Software 186

Software Open Source Survey Network 186

Prisma Clud

SEPTEMBER 14, 2023

As the premier platform for hosting open-source projects, GitHub’s popularity has boosted the popularity of its CI/CD platform — GitHub Actions. The 100-clone security measure, though, often proves inadequate for repositories hosting actions. Next, we see the execution of the CI workflow of the random-action action.

Malware 144

Malware Open Source Research Software 144

Palo Alto Networks

FEBRUARY 9, 2023

The Key to IT Org Success in the Cloud Great things happen when an IT organization moves to the cloud. Yet, many public sector organizations are apprehensive to move to the cloud, or they have been wondering why their organizations are still struggling in the cloud. We are going to learn something today!

Cloud 48

Cloud Weak Development Team Scalability Infrastructure 48

Prisma Clud

AUGUST 30, 2023

.” — GitHub Pinning the action to a particular SHA also serves the important recommendation of CICD-SEC-9: Improper Artifact Integrity Validation from the OWASP Top 10 CI/CD Security Risks to ensure integrity across the pipeline. Figure 1: GitHub Actions workflow consumes a secure, pinned version of a third-party action.

Software Review 98

Software Review Systems Review Open Source Resources 98

CircleCI

NOVEMBER 18, 2020

This blog is for teams that have already implemented security best practices and are looking for further information on how to continue to monitor security. If you’re looking for information on how to implement automated security practices read our ebook, Vulnerability Management and DevSecOps with CI/CD.

eBook 72

eBook Open Source AWS DevOps 72

Palo Alto Networks

NOVEMBER 20, 2019

As Kubernetes adoption increases, enterprise architects and security professionals are looking for new compute offerings to better power this modern application, while also offering a seamless developer experience. . Anthos and Cloud Run: Architecture and Security. How Prisma Cloud Secures Cloud Run Environments.

Google Cloud 41

Google Cloud Cloud Serverless Compliance 41

Palo Alto Networks

OCTOBER 13, 2021

Reminiscences aside, I thought this would be a good place to begin a discussion around container security because we’re in a multi-compute world now, and it’s important to have a working knowledge of what that means. What Considerations Do We Need with Container Security?

Software Review 80

Software Review Data Center Cloud Virtualization 80

Prisma Clud

APRIL 18, 2024

Security breaches can cost millions. They’re going to want to know how security teams are protecting their infrastructure. Prologue : Intro to Security Theater Security theater. Security theater is essentially the illusion of security. Security theater is essentially the illusion of security.

Compliance 59

Compliance Culture Cloud Strategy 59

Prisma Clud

JULY 27, 2023

With the rise in attacks on continuous integration and continuous delivery (CI/CD) environments, it’s no surprise that the U.S. CI/CD pipelines are critical to cloud-native software development and host highly sensitive data and credentials.

Cloud 52

Cloud Analysis Applications Continuous Delivery 52

Prisma Clud

JANUARY 17, 2023

Eliminating hardcoded credentials and adopting best practices, such as employing secrets vaults, is the best way to adopt proactive secrets security and avoid the risks of credentials exposure. But in reality, not all secrets scanners offer the depth and breadth you need to secure your secrets. Files can still become public.

Weak Development Team 52

Weak Development Team Firewall Applications Authentication 52

Palo Alto Networks

MAY 27, 2021

While sitting in a security operations center (SOC) in the middle of a high-severity incident, you realize Secure Shell Protocol (SSH) (port 22) is open to the world. To make that process easier to navigate, many organizations leverage cloud tagging as a scalable way to attribute cloud resources to organizational owners.

Open Source 76

Open Source Innovation Serverless Cloud 76

Palo Alto Networks

MARCH 6, 2020

How about the security team? If development starts moving at the speed of light, how does security keep up? No one is a fan of being told they can’t wear their favorite superhero costume at school, and I’m sure the security team doesn’t want to feel like a scolding parent with hands on their hips. Compute Security .

DevOps 52

DevOps Serverless Cloud Compliance 52

Palo Alto Networks

SEPTEMBER 16, 2021

Migration to the cloud and the arrival of 5G have digitally transformed both how we do business and how we live our lives, while Zero Trust has presented us with the opportunity to transform how we view cyber defense. The migration of applications and network functions to the cloud opens new attack surfaces.

Firewall 77

Firewall IoT Artificial Inteligence Software Review 77

Prisma Clud

NOVEMBER 17, 2022

As part of the rapid shift to public cloud, companies everywhere have worked hard to enable engineers to quickly develop and enhance their applications through the use of continuous integration and continuous development (aka CI/CD) infrastructure and processes. Cider Helps Ensure Cloud Apps Are Developed Securely.

Cloud 121

Cloud Open Source Software Applications 121

Perficient

JANUARY 27, 2023

DevSecOps is an approach to software development that emphasizes security as a critical aspect of the development process. It is a combination of development (Dev), security (Sec), and operations (Ops) practices that work together to build, test, and deploy secure software.

Tools 111

Tools Software Review Open Source SDLC 111

Prisma Clud

APRIL 17, 2024

Prisma Cloud has added the Telecommunications Security Act to its list of out-of-the-box compliance standards. With this release, public electronic communications networks and services in the UK can assess their multicloud security posture against requirements defined in the Telecommunications Security Act Code of Practice.

Telecommunications 59

Telecommunications Compliance Cloud Policies 59

Prisma Clud

JUNE 20, 2023

Over the last 5 years, our team at Prisma Cloud has witnessed an extraordinary surge in the adoption of cloud-native technologies. One trend that stands out is the ongoing migration to the public cloud. That number speaks for itself, showcasing the increasing reliance on the public cloud as the infrastructure of choice.

Cloud 105

Cloud Development Team Review Serverless Linux 105

Palo Alto Networks

MARCH 4, 2020

As an example, services such as AWS Fargate and Google Cloud Run are being referred to as “serverless containers.” . Chief among them is security. . Why Is Serverless Security Different? This means that there is no network to inspect, no image to scan and no server to deploy agent-based security on. Visibility.

Serverless 11

Serverless Applications Cloud Lambda 11

Prisma Clud

OCTOBER 26, 2023

3 Security and InfoSec teams are in a race with malicious actors. They need full visibility into all assets, the compute workloads of their cloud environment — and that includes easy access to meaningful, actionable data. But without code-to-cloud context, developers can’t discern what's most important.

Cloud 69

Cloud Open Source Serverless Analysis 69

Palo Alto Networks

DECEMBER 6, 2019

Many organizations are able to push the boundaries of software innovation to new levels through cloud native adoption. But security teams are challenged by cloud native. With a growing number of apps running on more platforms in more places than ever before, cloud native is an ever-expanding, omnipresent multiverse.

Cloud 11

Cloud Survey DevOps Industry 11

Prisma Clud

MARCH 18, 2024

Planning your schedule for the Google Cloud Next ‘24 event coming to the Mandalay Bay Convention Center in Las Vegas April 9–11? Please make some time to learn about how Prisma Cloud can help you reduce risk and eliminate breaches in your Google Cloud environment. Check out our full schedule below.

Google Cloud 72

Google Cloud Cloud Network Infrastructure 72

Prisma Clud

JULY 3, 2023

Cloud data breaches are on the rise. In this post I’ll walk you through recent cloud threat data from Unit 42’s Cloud Threat Report, Volume 7: Navigating the Expanding Attack Surface. Key Findings ( Cloud Threat Report Volume 6 ) 66% of organizations use access keys for more than 90 days. There’s no hiding from it.

Cloud 52

Cloud Authentication Azure Policies 52

Prisma Clud

MAY 24, 2023

Prisma Cloud helps accelerate time-to-market securely with our support for Azure Linux container host for Azure Kubernetes Service (AKS). With container-security optimization and acceleration in mind, Prisma Cloud by Palo Alto Networks is delighted to announce our support for container-optimized Azure Linux by Microsoft.

Linux 96

Linux Azure Cloud Software Review 96

Prisma Clud

JULY 26, 2023

Base images are generally made up of a specific OS build and patch level, along with any software, configuration and security settings required by the organization or a specific use case. As time goes on, the requirements may change — security patches need to be applied or configuration settings have been updated.

Cloud 52

Cloud Compliance AWS Policies 52

Prisma Clud

OCTOBER 20, 2023

Peek into the future of distributed development and what’s next in Kubernetes security at KubeCon North America, taking place at McCormick Place West in Chicago, IL, from Nov. This Cloud Native Computing Foundation flagship conference gathers adopters and technologists from leading open-source and cloud-native communities.

Cloud 52

Cloud Software Review Open Source Conference 52