CloudSecurityAlliance

@cloudsa

We lead in security of Cloud, AI and Zero Trust. Follow our research, education, certification and events.

Global

cloudsecurityalliance.org

Joined March 2009

CloudSecurityAlliance
@cloudsa
2h
Every major cloud platform has a control plane with real governance behind it — standards bodies, benchmarks, years of scrutiny. Agentic AI doesn't have that yet. Agents are authenticating, acting, and handing off tasks to each other with no dedicated body setting the rules. CSAI
CSAI
From csai.foundation
CloudSecurityAlliance
@cloudsa
6h
Sandworm's latest trick hides malware in a VPN config file, not an executable. UAC-0145 poses as recruiters (Sopra Steria, ATLAS Business Group), runs candidates through weeks of Zoom "interviews," then has them install a "corporate VPN" for a technical assignment. It's
CloudSecurityAlliance
@cloudsa
7h
CISO Daily Briefing: VMware vCenter CVE-2026-59310 (CVSS 9.8) is under active exploit in 47 countries, no workaround — patch now. Lazarus is weaponizing a new afd.sys kernel 0-day (CISA deadline Aug 25). Gov: NIST joined the $5B+ Genesis Mission, pushing AI agents into critical
labs.cloudsecurityalliance.org
CISO Daily Briefing – August 13, 2026
CISO Daily Briefing Cloud Security Alliance Intelligence Report Report Date August 13, 2026 Intelligence Window 48 Hours Topics Identified 5 Priority Items Papers Published 5 Overnight Executive Su…
CloudSecurityAlliance
@cloudsa
22h
Genuine question: could you walk a new security hire through where your cloud provider's job ends and your team's begins — without pulling up a diagram? A surprising number of people who use cloud daily have never actually mapped that line. CCSK exists to make it second nature:
cloudsecurityalliance.org
Certificate of Cloud Security Knowledge (CCSK) | CSA
The CCSK is an open-book, online exam, completed in 90 minutes with 60 multiple-choice questions selected randomly from the CCSK question pool.
CloudSecurityAlliance
@cloudsa
Aug 12
Vendor risk teams still send the same 200-question security survey to every cloud provider, then wait weeks for answers nobody fully verifies. Skip it: STAR Registry already has thousands of providers listed with self-assessments, third-party audits, or continuous monitoring
cloudsecurityalliance.org
STAR | Cloud Security Alliance (CSA)
The Security Trust Assurance and Risk (STAR) Program encompasses key principles of transparency, rigorous auditing, and harmonization of standards. Companies who use STAR indicate best practices and...