Prisma Clud

AUGUST 30, 2023

In today’s post, we look at action pinning, one of the profound mitigations against supply chain attacks in the GitHub Actions ecosystem. Action Pinning GitHub Actions offers a powerful way to automate your software development workflow, including running tests, linting code, deploying applications and more.

Software Review 98

Software Review Systems Review Open Source Resources 98

Prisma Clud

SEPTEMBER 14, 2023

Initial Attack Vectors In recent supply chain attacks, we see attackers repeatedly executing the same scheme, ultimately compromising a repository or a software library and infecting it with a malicious payload targeting its direct dependents. rev-action is the weakest link of the chain. That’s still not all, though.

Malware 144

Malware Open Source Research Software 144

Palo Alto Networks

OCTOBER 19, 2021

Enterprise-Grade Security with Consumer Simplicity for Homes and Small Businesses. Companies and governments alike are concerned about the state of security in offices and homes, as well as the digital well-being of their employees and family members. Legacy security offerings are complex and filled with fragmented products.

Small Business 52

Small Business Network Government Insurance 52

Prisma Clud

OCTOBER 18, 2023

Cloud applications power the modern enterprise. 1 But applications aren’t without risks — not surprising when you consider that they’re built from a complex combination of software packages assembled across multiple delivery pipelines, which also present sources of risk. Security issues aren’t just identified.

Software Review 141

Software Review Cloud Innovation Applications 141

Prisma Clud

APRIL 17, 2024

Prisma Cloud has added the Telecommunications Security Act to its list of out-of-the-box compliance standards. With this release, public electronic communications networks and services in the UK can assess their multicloud security posture against requirements defined in the Telecommunications Security Act Code of Practice.

Telecommunications 59

Telecommunications Compliance Cloud Policies 59

Prisma Clud

NOVEMBER 17, 2022

As part of the rapid shift to public cloud, companies everywhere have worked hard to enable engineers to quickly develop and enhance their applications through the use of continuous integration and continuous development (aka CI/CD) infrastructure and processes. The Plight of the Software Supply Chain.

Cloud 121

Cloud Open Source Software Applications 121

Prisma Clud

MAY 24, 2023

Prisma Cloud helps accelerate time-to-market securely with our support for Azure Linux container host for Azure Kubernetes Service (AKS). With container-security optimization and acceleration in mind, Prisma Cloud by Palo Alto Networks is delighted to announce our support for container-optimized Azure Linux by Microsoft.

Linux 96

Linux Azure Cloud Software Review 96

Palo Alto Networks

OCTOBER 11, 2021

The most recent Unit 42 Cloud Threat Report contains the high-level results of a red team exercise performed against a SaaS customer’s continuous integration and continuous development (CI/CD) pipeline. The organization did not have these security measures enabled on their other 49+ AWS accounts.

Cloud 75

Cloud Exercises Weak Development Team AWS 75

Palo Alto Networks

DECEMBER 13, 2021

Customers already aligned with our security best practices gain automated protection against these attacks with no manual intervention. Our Advanced URL Filtering security service is constantly monitoring and blocking new, unknown and known malicious domains (websites) to block those unsafe external connections.

Network 96

Network Firewall Cloud Linux 96

Prisma Clud

MARCH 17, 2023

DevSecOps, or shift left security, is top of mind for many cloud-native teams today. But all these new additions to the market make it challenging to decide which DevSecOps tools you need to empower your team with frictionless, consolidated code security. Generate an SBOM from Prisma Cloud’s Supply Chain page.

Tools 52

Tools Weak Development Team Resources Cloud 52

Palo Alto Networks

FEBRUARY 14, 2020

When I hear the term “supply chain” in reference to software development, I immediately think about the interlocking steps linking raw materials, refinement processes and consumption. The software development supply chain is, conceptually, much like the wheat supply chain where bread fit for consumption is the goal.

Software Development 58

Software Development Weak Development Team Software Development 58

Prisma Clud

MAY 17, 2023

Due to the interconnected nature of Kubernetes, embracing Kubernetes security involves some unique considerations. Understanding the connections between components is a critical first step to maintaining Kubernetes security. Figure 1: Connections between components in Kubernetes can result in overlooked security issues.

Policies 52

Policies How To Software Review Resources 52

Prisma Clud

DECEMBER 6, 2022

Open-source software licenses present a major source of risk because even one noncompliant license in your software can result in legal action, time-consuming remediation efforts, and delays in getting your product to market. As of 2016, the most popular free-software license is the permissive MIT license. Copyleft Licenses.

Open Source 98

Open Source Compliance Software Review Development Team Review 98

Palo Alto Networks

NOVEMBER 16, 2021

Delivering the Industry’s First Integrated Platform to Secure the Full Application Lifecycle. New innovations enable organizations to integrate security from code to runtime with a single solution. The challenge in securing these cloud environments stems from the nature of the cloud itself.

Network 75

Network Cloud Azure Infrastructure 75

Palo Alto Networks

JULY 28, 2021

Cloud spending in the U.S. Many of the cloud initiatives that federal agencies are actively pursuing around IT modernization are cyber-related. They include meeting information security mandates, ensuring consistent security across clouds at runtime and the application lifecycle as well as addressing skill gaps in cloud security.

Security 52

Security Cloud Weak Development Team Study 52