MAESTRO analysis of OpenAI and Anthropic incidents reveals how per-layer failures, not just the model, shaped security outcomes.

In Darktrace’s honeypot environment, attackers achieved remote code execution. This enabled Darktrace to investigate activity ...

Examines Claude Tag's agent identity model, detailing risks from authorization laundering to channel visibility and per-action access governance.

A concise look at how GDPR, NIS 2, and DORA require ongoing vendor risk management, emphasizing visibility, costs, and ...

Learn ISO 9001 basics, requirements, benefits, and how it drives quality management and continuous improvement across ...

Explores how shorter certificate lifecycles demand DNS visibility, uncovering certificate sprawl, shadow certificates, and ...

The Cloud Security Alliance (CSA), the world's leading not-for-profit organization committed to AI, cloud, and Zero Trust ...

Explains agent-based vs. agentless cloud security and how a combined approach supports hybrid and multi-cloud deployments.

Explains why traditional cloud DR falls short against ransomware and how cyber-resilient recovery and resiliency posture ...

Stay informed about the latest best practices, reports, and solutions in cloud security with CSA research. Stay connected with the cloud security community by attending local events, workshops, and ...

Written by Marina Bregkou, Principal Research Analyst, Associate VP, CSA. The Cloud Security Alliance (CSA) recently announced the release of the AI Controls Matrix (AICM) v1.1, a significant update ...

The AI Controls Matrix (AICM) is a first-of-its-kind vendor-agnostic framework for cloud-based AI systems. Organizations can use the AICM to develop, implement, and operate AI technologies in a secure ...