Cloud Cybersecurity and the Modern Applications (part 1)
Blog Published: 05/26/2020
By Francesco Cipollone, Chair at Cloud Security Alliance UK Chapter and Director at NSC42 Ltd.Modern enterprises tend to utilize a mix or hybrid of cloud services like IaaS, PaaS and SaaS (Infrastructure/Platform/Software as a Service) to develop cloud applications. In a hybrid situation desi...
Cloud Cybersecurity and the Modern Applications (part 2)
Blog Published: 05/27/2020
By Francesco Cipollone, Chair at Cloud Security Alliance UK Chapter and Director at NSC42 Ltd. Use cases and common pitfallsSecurity appliance vendors are still updating their appliances to include typical cloud architecture that integrates into the cloud provider fabric more efficiently. Some...
Cloud Cybersecurity and the Modern Applications (part 3)
Blog Published: 05/28/2020
By Francesco Cipollone, Chair at Cloud Security Alliance UK Chapter and Director at NSC42 Ltd.Hybrid Patterns in AzureIn new cloud deployment, it is common to see organizations using a combination of multiple cloud environments or methodologies. Managing access control in a single appliance is...
Pen Testing in the Age of Cloud
Blog Published: 05/26/2020
By Josh Stella, CTO and co-founder of FugueLately, we at Fugue have been demonstrating live hacks against cloud infrastructure based on real events in the news. We often walk through a theft of data from Amazon S3 by exploiting little-known misconfigurations of Security Groups, EC2, IAM, and S...
Detect and Track Threats Through UEBA and Incident Governance
Blog Published: 06/02/2020
By Ishani Sircar, Product Marketing Manager at CipherCloudThe Rise of the Unmanaged DevicesMost organizations are predicting an increased remote workforce and adoption of SaaS apps in the coming years. Remote work environments have led to a rapid adoption of data sharing and collaboration apps...
Cloud Security Alliance Announces Phoenix One as Authorized CCSK Training Partner in the Philippines
Press Release Published: 05/28/2020
Training the next generation of cybersecurity professionals in the PhilippinesManila, May 28, 2020 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secure cloud computing environment, today...
New Paper Offers Practical Guidance on Automating Security in DevSecOps
Blog Published: 07/07/2020
By Souheil Moghnie, NortonLifeLock Today, SAFECode is excited to join the Cloud Security Alliance in sharing a new report offering practical guidance on integrating security automation into the software development lifecycle. The paper, The Six Pillars of DevSecOps: Automation, was developed i...
Cloud Security Alliance Announces Availability of Key Cloud Security Assessment and Guidance Documents in 10 Additional Languages
Press Release Published: 06/23/2020
Cloud Controls Matrix, Consensus Assessments Initiative Questionnaire, and PLA Code of Conduct for GDPR Compliance available to global audienceSEATTLE – June 23, 2020 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best...
General James Mattis, Secretary of Defense (2017-2018), to Headline Cloud Security Alliance’s SECtember Premier Event
Press Release Published: 06/22/2020
Andy Kirkland, Joe Schatz join Mattis to provide a global perspective on strategic cloud, cybersecurity issuesSEATTLE – June 22, 2020 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secur...
Cloud Security Alliance Partners with Digital Economy Promotion Agency in National Support Initiative for Learning During COVID-19
Press Release Published: 06/03/2020
Keeping the doors of learning open and continuing education in cloud securityBangkok, June 3, 2020 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, announced ...
New Data Protection Law Enacted in Dubai Emirate
Blog Published: 06/08/2020
By Francoise Gilbert, Cybersecurity and Privacy Expert, Cloud Security AllianceDubai has enacted a new data protection law that replaces the current privacy law, law N. 1 of 2007. The new 50-page law, which modernizes the current data protection law, will come into effect on July 1, 2020, at w...
The Octopus Scanner Malware: Attacking the open source supply chain
Blog Published: 06/10/2020
By Alvaro Muñoz at GitHubSecuring the open source supply chain is an enormous task. It goes far beyond a security assessment or just patching for the latest CVEs. Supply chain security is about the integrity of the entire software development and delivery ecosystem. From the code commits thems...
Cloud Security Alliance Announces KORNERSTONE as Authorized CCSK Training Partner
Press Release Published: 06/08/2020
Training the next generation of cybersecurity professionals Hong Kong, June 8, 2020 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secure cloud computing environment, today announced that...
Five Step UEBA to Detect and Stop Insider Attacks
Blog Published: 06/16/2020
By Ishani Sircar, Manager, Product Marketing at CipherCloudEvery year, more than 34% of businesses worldwide are affected by insider threats. (Source: Sisa Infosec)Despite various investments in security, most organizations are still susceptible to data breaches due to bad actors. The losses ...
3 Big Amazon S3 Vulnerabilities You May Be Missing
Blog Published: 06/18/2020
By Drew Wright, Co-Founder Fugue, Inc. When there’s a data breach involving Amazon Web Services (AWS), more often than not it involves the Amazon S3 object storage service. The service is incredibly popular. Introduced way back in 2006 when few knew what the cloud was, S3 is highly scalable, r...
Cloud Security Alliance Issues Call for Papers for EMEA Congress 2020
Press Release Published: 06/11/2020
Papers examining new frontiers accelerating change in information security are soughtBerlin, Germany – June 11, 2020 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secure cloud computing ...
CSA Federal Summit 2020 Announces New Venue, Enhanced Safety Measures for Attendees
Press Release Published: 06/16/2020
SEATTLE – June 16, 2020 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secure cloud computing environment, announced that in response to the ongoing concerns surrounding COVID-19, its ann...
Cloud Security Alliance Offers Guidance on Adhering to Privacy, Security Protocols for Telehealth Data in the Cloud
Press Release Published: 06/18/2020
Paper addresses privacy, security concerns related to processing, storing, and transmitting patient data in the cloudSEATTLE – June 18, 2020 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure ...
How to secure cloud-based collaboration, emails, and messaging apps
Blog Published: 06/23/2020
By Ishani Sircar, Product Marketing Manager at CipherCloudWe can secure information across multiple enterprise cloudsData leaks. Data breaches. Tighter security controls. Yet more breaches. A continuing cat-and-mouse-game. As both the way we do business in a distributed environment and apps ma...
Cloud Security Alliance Announces PT Mitra Integrasi Informatika as an Authorized CCSK Training Partner
Press Release Published: 06/23/2020
Training the next generation of cybersecurity professionalsJakarta, June 23, 2020 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secure cloud computing environment, today announced that P...
