CloudSecurityAlliance

@cloudsa

We lead in security of Cloud, AI and Zero Trust. Follow our research, education, certification and events.

Global

cloudsecurityalliance.org

Joined March 2009

CloudSecurityAlliance
@cloudsa
1h
CISO Daily Briefing: AI reasoning traces from OpenAI/Anthropic/Google got reverse-engineered, leaking 182 live credentials from agent logs; LiteLLM's supply chain was backdoored via a stolen Trivy token, hitting 2,100+ orgs; AI-assisted RCE chain hit SharePoint (CVE-2026-55040,
labs.cloudsecurityalliance.org
CISO Daily Briefing – August 12, 2026
CISO Daily Briefing Cloud Security Alliance Intelligence Report Report Date August 12, 2026 Intelligence Window 48 hours Topics Identified 5 Priority Items Papers Published 5 Overnight Executive Su…
CloudSecurityAlliance
@cloudsa
13h
It took roughly a decade after cloud adoption took off for real cloud security to catch up — CASBs, CSPM, all reactive. Agentic AI is on pace to outrun its guardrails in a fraction of that time: agents already wired into CRMs, billing, and prod pipelines while "secure agent
CSAI
From csai.foundation
CloudSecurityAlliance
@cloudsa
16h
A hotel keycard doesn't trust you because you checked in — it re-verifies at every single door, every single time, no matter how many times you've walked that hallway before. Most corporate networks still run on the old model: prove yourself once at the front desk and roam free
cloudsecurityalliance.org
Certificate of Competence in Zero Trust (CCZT) | CSA
Get the best Zero Trust certificate with the Cloud Security Alliance's CCZT. Learn Zero Trust principles, cloud security, and gain essential skills for protecting your organization. Enroll in Zero...
CloudSecurityAlliance
@cloudsa
20h
Pull up your vendor security questionnaire. It asks about encryption, access control, incident response — standard stuff. Now find the section on how a vendor's AI agents are governed. There isn't one, because most frameworks were written before agents could act on their own.
cloudsecurityalliance.org
AI Controls Matrix | Framework for Trustworthy AI | CSA
The AI Controls Matrix is a vendor-neutral framework for secure, responsible AI systems in the cloud. Based on CCM and aligned with ISO 42001, NIST AI, & more.
CloudSecurityAlliance
@cloudsa
Aug 11
CISO Daily Briefing: OpenAI's Astra neared its own 'Critical' autonomous-exploit threshold—closest any OpenAI model's come. Atlassian Rovo has two live prompt-injection chains (RovoBlast, PromptArmor) leaking Jira/Confluence data. ~800 AI-generated npm packages dodge typosquat
labs.cloudsecurityalliance.org
CISO Daily Briefing – August 11, 2026
CISO Daily Briefing Cloud Security Alliance Intelligence Report Report Date August 11, 2026 Intelligence Window 48 hours Topics Identified 5 Priority Items Papers Published 3 Overnight Executive Su…