Nathaniel Quist

Researchers identify 10 security risks that require an architectural and operational focus to ensure the detection of advanced threats within cloud environments.

On January 4, 2023 CircleCI reported a security incident had occurred. CircleCI recommended, “out of an abundance of caution … to immediately rotate any and all secrets stored in CircleCI.” It was …

CVE-2022-22965 (SpringShell), a Remote Code Execution (RCE) affecting the Spring Framework was published on March 31, 2022. This blog details Prisma Cloud’s mitigations capabilities for SpringShell

Learn how and why attackers would target an organization's CI/CD pipeline, as well as best practices for how to stop an attempt.

Enabling multi-factor authentication for root accounts must be a priority for organizations, along with the principle of Least-Privilege.