# Security & compliance, Cloud security Technical discipline addressing security challenges and requirements for cloud consumers adopting cloud-based solutions for information systems. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms DevFeed: [CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms]() Original publisher: [Read original article]() Author: Brett Shaw Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [workload protection](), [Security & compliance, Cloud security](), [Security](), [telemetry](), [Containers](), [Kubernetes](), [SOC]() Tags: [2026](), [cloud](), [cloud-application-security](), [cloud-security](), [containers](), [growth](), [innovation](), [kubernetes](), [real-time](), [security](), [soc](), [telemetry](), [workload-protection]() ### AI overview CrowdStrike says Frost & Sullivan named it the strongest overall leader in the 2026 Frost Radar for Cloud Workload Protection Platforms. The article highlights Falcon Cloud Security's focus on connecting risk, adversary intelligence, and real-time protection across containers, Kubernetes, identities, cloud control planes, endpoints, and SOC operations. ### Source excerpt Falcon Cloud Security earned the highest scores in both Innovation and Growth by connecting risk, adversary intelligence, and real-time protection to stop attacks. ## Agentic security: Detection and response at machine speed DevFeed: [Agentic security: Detection and response at machine speed]() Original publisher: [Read original article]() Author: Gee Rittenhouse Published: 2026-09-02T18:36:37Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Security & compliance, Cloud security](), [workload protection](), [AI Strategy]() Tags: [agentic](), [ai-agents](), [announcements](), [artificial-intelligence](), [autonomous](), [cloud](), [cloud-security](), [foundational-100](), [identity](), [security](), [security-blog](), [security-identity-compliance](), [zero-trust]() ### AI overview AWS discusses why autonomous AI agents require continuous security detection and response at machine speed. It outlines an enterprise framework that extends established practices such as identity governance, least privilege, defense in depth, and backup and recovery to agentic workloads. ### Source excerpt After talking with enterprise security leaders over the past year, one thing has become clear: the rise of autonomous AI agents is the most significant shift in security posture since the move to cloud. Organizations across every industry are adopting AI agents that authenticate on behalf of users, execute multistep workflows, and make decisions across [...] ## We invited a direct competitor into Security Hub Extended. Here's why. DevFeed: [We invited a direct competitor into Security Hub Extended. Here's why.]() Original publisher: [Read original article]() Author: Michael Fuller Published: 2026-08-31T19:00:07Z Content type: opinion Language: en Sources: [AWS Security Blog]() Topics: [AWS Security Hub](), [Security & compliance, Cloud security](), [workload protection](), [vulnerability scanning](), [eBPF](), [Linux Kernel]() Tags: [announcements](), [aws-security-hub](), [cloud-security](), [container](), [ebpf](), [foundational-100](), [linux-kernel](), [security](), [security-blog](), [security-identity-compliance](), [vulnerability-scanning](), [workload-protection]() ### AI overview AWS explains why it invited Upwind, a cloud security competitor, into Security Hub Extended. The post says the partnership responds to customer demand, expands choice between posture management and runtime-first protection, and simplifies integration through AWS billing, support, and operations. ### Source excerpt When customers keep pointing you to a solution that overlaps with parts of your own offering, you have a choice to make. This post is about the choice we made with Upwind, and why we'd make it again. AWS Security Hub Extended exists because customers told us what was working for them in enterprise security [...] ## Fast Track ISM-ready cloud environments and IRAP Assessments with Landing Zone Accelerator on AWS DevFeed: [Fast Track ISM-ready cloud environments and IRAP Assessments with Landing Zone Accelerator on AWS]() Original publisher: [Read original article]() Author: Kevin Donohue Published: 2026-08-25T21:53:49Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Security & compliance, Cloud security](), [Amazon Web Services](), [Cloud](), [Security](), [Deployment](), [configuration](), [Critical Infrastructure]() Tags: [announcements](), [architecture](), [australia](), [aws](), [cloud](), [cloud-security](), [compliance](), [critical-infrastructure](), [deployment](), [foundational-100](), [governance](), [government](), [infrastructure](), [irap](), [public-sector](), [security](), [security-best-practices](), [security-blog](), [security-identity-compliance]() ### AI overview This AWS security post announces an independent assessment report on Landing Zone Accelerator on AWS (LZA). It explains how LZA can automatically deploy multi-account AWS environments with coverage for Australian Government Information Security Manual (ISM) security controls, and describes configuration-drift testing and compliance documentation intended to support IRAP assessment readiness. ### Source excerpt This post announces the availability of a new independent assessment report available on AWS Artifact analyzing how Landing Zone Accelerator on AWS (LZA) can automatically deploy multi-account environments in Amazon Web Services (AWS) with Australian Government Information Security Manual (ISM) security controls coverage at scale. The report includes findings from an independent third-party analysis conducted [...] ## Vibe coded apps are the new shadow IT DevFeed: [Vibe coded apps are the new shadow IT]() Original publisher: [Read original article]() Author: Andy Gombar Published: 2026-08-13T00:00:00Z Content type: article Language: en Sources: [Webflow Blog]() Topics: [AI Agent](), [Security & compliance, Cloud security](), [AWS IAM](), [Amazon Web Services](), [cloud-infrastructure](), [App](), [Security]() Tags: [ai](), [ai-agent](), [aws](), [cloud-infrastructure](), [cloud-security](), [code](), [iam](), [policy](), [security]() ### AI overview Vibe-coded internal applications can become a new form of shadow IT when AI agents rapidly generate code, provision cloud infrastructure, and deploy resources without tickets or security review. The article describes the resulting risks, including exposed endpoints, overpermissioned IAM roles, and production blast radius, and calls for platform controls, review gates, and detection. ### Source excerpt Vibe-coded internal apps ship with IAM roles and no ticket filed. This baseline covers platform controls, review gates, and detection for what slips through. ## How we brought agentic workflows to Cloud SIEM with the Datadog MCP Server DevFeed: [How we brought agentic workflows to Cloud SIEM with the Datadog MCP Server]() Original publisher: [Read original article]() Author: Chelsea Xu; Eddie Cai; Romain Kirszbaum; Mohamed Hachem Ouertani Published: 2026-07-17T00:00:00Z Content type: article Language: en Sources: [Datadog | The Monitor blog]() Topics: [SIEM, Security](), [MCP Server](), [Model Context Protocol](), [Security & compliance, Cloud security](), [real user monitoring]() Tags: [agent-observability](), [agentic](), [ai](), [ai-impact](), [cloud-security](), [context-window](), [eval](), [mcp](), [mcp-server](), [real-user-monitoring](), [security](), [tool](), [workflows]() ### AI overview This article explains how Datadog built MCP tools for Cloud SIEM to support agentic security workflows. It covers tool scoping based on user behavior, progressive disclosure for managing a shared context window, custom evaluation of non-deterministic agent behavior, and governance of a growing multi-team toolset. ### Source excerpt See how we built MCP tools for Cloud SIEM, using usage data, progressive disclosure, and a custom eval framework to keep a multi-team agentic toolset reliable. ## Laravel Cloud security defaults behind every deploy DevFeed: [Laravel Cloud security defaults behind every deploy]() Original publisher: [Read original article]() Author: Laravel Team Published: 2026-07-08T10:56:00Z Content type: article Language: en Sources: [Laravel Blog]() Topics: [Laravel](), [Cloud](), [Security & compliance, Cloud security](), [Cloudflare](), [Amazon Web Services](), [vulnerability]() Tags: [aws](), [cloud](), [cloud-security](), [cloudflare](), [ddos](), [laravel](), [security](), [vulnerability]() ### AI overview This article explains how Laravel Cloud provides security defaults around every deployment. It describes Laravel's built-in protections, including CSRF validation, escaped output, safe Eloquent bindings, password hashing, mass-assignment protection, and signed URLs, then covers Cloudflare edge filtering, AWS-hosted compute, DDoS mitigation, runtime patching, audit logs, network isolation, and package vulnerability scanning. ### Source excerpt Laravel Cloud handles WAF, runtime patching, audit logs, network isolation, and package vulnerability scans by default. See what runs in the background. ## Pathfinding Labs: Deploy, test, and learn from 100+ intentionally vulnerable AWS environments DevFeed: [Pathfinding Labs: Deploy, test, and learn from 100+ intentionally vulnerable AWS environments]() Original publisher: [Read original article]() Author: Seth Art Published: 2026-05-18T00:00:00Z Content type: article Language: en Sources: [Datadog Security Labs]() Topics: [Amazon Web Services](), [AWS IAM](), [Terraform](), [Go Language](), [Command-line interface](), [Text-based user interface](), [ctf](), [Detection engineering](), [Security & compliance, Cloud security](), [Authorization]() Tags: [aws](), [aws-iam](), [cli](), [cloud](), [cloud-security](), [ctf](), [go](), [iam](), [sandbox](), [security](), [techniques](), [terraform](), [tool](), [tools](), [validation]() ### AI overview Pathfinding Labs is a collection of more than 100 intentionally vulnerable AWS environments for practicing and validating detection of IAM privilege-escalation and other cloud security misconfigurations. The project includes a web catalog with CTF-style hints and solutions, Terraform-based labs, and plabs, a Go CLI with an interactive terminal interface for deploying and exploiting the labs. ### Source excerpt Introducing Pathfinding Labs, a collection of intentionally vulnerable AWS environments for red teamers and blue teamers to deploy, exploit, and use for detection validation. ## Now Available: DigitalOcean Cloud Security Posture Management (CSPM) DevFeed: [Now Available: DigitalOcean Cloud Security Posture Management (CSPM)]() Original publisher: [Read original article]() Author: Grace Morgan Published: 2026-04-01T14:46:32Z Content type: release Language: en Sources: [DigitalOcean]() Topics: [Digital Ocean](), [Security & compliance, Cloud security](), [cloud-infrastructure](), [Security](), [dashboards]() Tags: [cloud](), [cloud-security](), [digitalocean](), [infrastructure](), [operational](), [operations](), [product-updates](), [security](), [services](), [visibility]() ### AI overview DigitalOcean launched Cloud Security Posture Management (CSPM), an agentless service that provides in-dashboard visibility into infrastructure risks, evaluates resources such as Droplets and Databases for misconfigurations, and guides remediation. Free scans are available to all DigitalOcean customers, while upgraded plans add advanced rules, automated guidance, and API integrations. ### Source excerpt Keeping cloud infrastructure secure at scale is challenging. Infrastructure drift, exposed services, and sprawling identities create risk, and teams don't always have the time or expertise to maintain a consistent security posture across their environments. To help teams operate reliably in production with clear visibility into potential security issues, today we're launching DigitalOcean Cloud Security Posture Management (CSPM). CSPM provides agentless, in-dashboard visibility into your infrastructure, helping you detect risks, prioritize what matters most, and fix issues fast with guided instructions--all without third-party tools or dedicated security teams. CSPM continuously evaluates DigitalOcean resources including Droplets and Databases to identify misconfigurations and posture risks. Whether you are running traditional applications or scaling AI inference workloads, CSPM helps you maintain visibility, reduce operational risk, and keep production systems secure. Unlimited free scans are now available for every DigitalOcean customer, and upgraded plans get access to advanced rules, automated guidance, and API integrations as your environment grows. Run your first scan in the DigitalOcean Cloud Console now. Addressing Common Security Challenges Teams managing infrastructure often struggle with security visibility, especially across complex architectures. Common challenges include visibility gaps across Droplets and Database services; alert overload with unclear priorities; and remediation friction from complex instructions or external tools. CSPM helps solve these challenges with a native, agentless experience that prioritizes findings, guides remediation, and integrates directly into the DigitalOcean dashboard and API--helping teams reduce interruptions and maintain predictable performance. Cloud Security Posture Management Features CSPM combines simplicity and power to help teams manage security without slowing down operations. Its agentless, integrated approac ## Figma achieves C5 accreditation, strengthening cloud security for customers across the DACH region DevFeed: [Figma achieves C5 accreditation, strengthening cloud security for customers across the DACH region]() Original publisher: [Read original article]() Author: Figma Published: 2026-02-03T14:00:00Z Content type: release Language: en Sources: [Figma Blog]() Topics: [Figma](), [Security & compliance, Cloud security](), [Security](), [Localization (l10n)]() Tags: [cloud-security](), [compliance](), [figma](), [finance](), [germany](), [government](), [government-public-sector](), [switzerland](), [visibility]() ### AI overview Figma announced that it achieved C5 accreditation, a German cloud-computing security and compliance standard. The accreditation applies to Figma's services for customers in Germany, Austria, and Switzerland and provides independent assessment of security, availability, confidentiality, risk management, and operational transparency. ### Source excerpt Figma is giving customers greater confidence in cloud security and compliance. ## Latacora Achieves AWS Advanced Tier Services Partner Status DevFeed: [Latacora Achieves AWS Advanced Tier Services Partner Status]() Original publisher: [Read original article]() Published: 2026-01-27T21:00:00Z Content type: release Language: en Sources: [Latacora]() Topics: [Amazon Web Services (AWS)](), [Security & compliance, Cloud security](), [Security](), [AWS IAM](), [Monitoring](), [threat detection]() Tags: [amazon-web-services-aws](), [cloud-security](), [compliance](), [iam](), [iso-27001](), [monitoring](), [security](), [soc](), [soc-2](), [threat-detection]() ### AI overview Latacora announces that it has achieved Amazon Web Services (AWS) Advanced Tier Services Partner status within the AWS Partner Network. The company says the designation reflects validated technical expertise, AWS-certified professionals, and a proven record of customer success in cloud security and compliance. ### Source excerpt We are thrilled to announce a major milestone for Latacora: we have achieved the Amazon Web Services (AWS) Advanced Tier Services Partner status within the AWS Partner Network (APN). This designation reflects Latacora's technical expertise and diligence in delivering exceptional cloud security and compliance solutions to our clients, and confirms that we have successfully completed a rigorous validation process demonstrating a proven track record of customer success delivered by a team of AWS-certified professionals with specialized technical capabilities. ## How AWS Is Helping Enterprises Build, Scale, and Innovate With AI DevFeed: [How AWS Is Helping Enterprises Build, Scale, and Innovate With AI]() Original publisher: [Read original article]() Author: TJ URGLAVITCH, CLOUD SERVICES PRACTICE LEAD @ TOPTAL Published: 2025-11-30T23:00:00Z Content type: article Language: en Sources: [Toptal Blog]() Topics: [Amazon Web Services](), [Artificial Intelligence](), [cloud-infrastructure](), [Security & compliance, Cloud security](), [AI Infrastructure]() Tags: [ai](), [ai-adoption](), [ai-infrastructure](), [aws](), [cloud](), [cloud-infrastructure](), [cloud-services](), [collaboration](), [governance](), [podcast](), [scale](), [security](), [transformation]() ### AI overview This Executive Guidance podcast discusses how AWS helps enterprises adopt AI, scale innovation, and modernize operations through cloud infrastructure, partner collaboration, responsible design, security, and governance. ### Source excerpt Discover how AWS's Head of Partner Solutions Architecture, Divyesh Shah, is helping enterprises scale responsibly and innovate faster through the power of cloud and AI. In this episode of the Executive Guidance podcast, Shah joins Toptal's Cloud Services Practice Lead, TJ Urglavitch, to discuss how AWS builds trust, empowers collaboration, and drives transformation across industries. ## How Seemplicity scaled real-time security analytics with Postgres CDC and ClickHouse DevFeed: [How Seemplicity scaled real-time security analytics with Postgres CDC and ClickHouse]() Original publisher: [Read original article]() Author: ClickHouse Published: 2025-05-29T00:00:00Z Content type: article Language: en Sources: [ClickHouse Blog]() Topics: [clickhouse](), [real-time](), [Application Security](), [vulnerability management](), [Security & compliance, Cloud security](), [dashboards](), [Architecture & Design](), [Back end]() Tags: [analytics](), [application-security](), [backend](), [clickhouse](), [cloud-security](), [dashboards](), [database](), [postgres](), [real-time](), [scale](), [speed](), [vulnerability-management]() ### AI overview The article explains how Seemplicity scaled its real-time security analytics platform by separating operational workloads in Postgres from analytical workloads in ClickHouse Cloud. Postgres CDC, using PeerDB now part of ClickPipes, replicates security findings into ClickHouse, enabling faster dashboards, vulnerability prioritization, and actionable remediation workflows as data volumes and customer requirements grow. ### Source excerpt "I knew a managed product built by engineers, whose goal in life is to transform bits from Postgres into ClickHouse, would be better than anything we could do ourselves." Tal Shargal, Chief Architect ## Consolidate Security Findings with Snyk and Google Security Command Center DevFeed: [Consolidate Security Findings with Snyk and Google Security Command Center]() Original publisher: [Read original article]() Author: Daniel Berman; David Schott Published: 2025-02-06T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Google](), [Security & compliance, Cloud security](), [Application Security](), [Google Cloud Platform (GCP)](), [Security](), [vulnerability](), [sdlc](), [Kubernetes]() Tags: [application-security](), [blog](), [cloud-infrastructure](), [cloud-native](), [cloud-security](), [co-created](), [code](), [community](), [executive](), [google](), [google-cdm](), [google-cloud](), [interest](), [kubernetes](), [sdlc](), [security](), [security-vulnerabilities](), [snyk](), [vulnerabilities]() ### AI overview Snyk's integration with Google Cloud Security Command Center gives CISOs and security teams a unified view of application security vulnerabilities, misconfigurations, and cloud security issues. The integration helps organizations correlate findings, improve visibility across cloud infrastructure and application workloads, and prioritize remediation by risk severity, including vulnerabilities detected in code repositories, container images, and production workloads. ### Source excerpt Snyk's integration with Google Cloud Security Command Center (SCC) enables CISOs and security teams to monitor and manage AppSec vulnerabilities and misconfigurations from Snyk alongside cloud security issues from Google Cloud, all within a single pane of glass. ## Introducing Snyk Accelerate with Accenture DevFeed: [Introducing Snyk Accelerate with Accenture]() Original publisher: [Read original article]() Author: Taylor Buie Published: 2025-01-28T05:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Security](), [code productivity](), [Security & compliance, Cloud security]() Tags: [accelerate](), [ai](), [application-security](), [blog](), [cloud](), [cloud-security](), [developer](), [executive](), [external](), [interest](), [productivity](), [related-content](), [security](), [shift-left](), [snyk]() ### AI overview Snyk and Accenture introduce Snyk Accelerate, an offering designed to help organizations scale developer-friendly application security. It combines program assessment, platform implementation, developer-environment integration, team training, and process education to reduce business risk while supporting developer innovation and productivity. ### Source excerpt Snyk Accelerate is a new offering from Snyk and Accenture that aims to help clients adopt a developer-friendly security program that both reduces business risk and speeds up developer innovation. ## Snyk Recognized as Trusted Partner and Innovator by JPMorganChase DevFeed: [Snyk Recognized as Trusted Partner and Innovator by JPMorganChase]() Original publisher: [Read original article]() Author: Ken Mellert Published: 2025-01-14T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Security & compliance, Cloud security](), [vulnerability management](), [CI/CD](), [Critical Infrastructure]() Tags: [application-security](), [blog](), [ci-cd](), [cloud](), [critical-infrastructure](), [customer](), [developer](), [executive](), [financial-services](), [finserv](), [innovation](), [interest](), [partner](), [partnership](), [real-time](), [related-content](), [security](), [shift-left](), [snyk](), [supply-chain](), [vulnerabilities](), [vulnerability-management]() ### AI overview Snyk was inducted into JPMorgan Chase's Hall of Innovation for its role as a cybersecurity partner helping modernize application security and protect financial-services infrastructure. The article highlights Snyk's support for secure application development, supply chain risk management, vulnerability management, cloud security, compliance, and CI/CD integration. ### Source excerpt Snyk joined JPMorgan Chase's Hall of Innovation for 2024, celebrating its impact on application security, market disruption, and overall partnership. Learn more about this collaboration. ## Announcing new Snyk AppRisk integration with Orca Security DevFeed: [Announcing new Snyk AppRisk integration with Orca Security]() Original publisher: [Read original article]() Author: Daniel Berman Published: 2024-09-11T13:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-apprisk](), [Application Security](), [Security & compliance, Cloud security](), [DevSecOps](), [Vulnerabilities]() Tags: [acquisition](), [application-security](), [aspm](), [awareness](), [blog](), [cloud-security](), [devops](), [devsecops](), [executive](), [integration](), [orca-security](), [pmm](), [related-content](), [snyk](), [snyk-apprisk](), [vulnerabilities]() ### AI overview Snyk announces an integration between Snyk AppRisk and Orca Security. The integration combines application security context and vulnerability prioritization from Snyk with Orca's cloud security and runtime visibility to help development and security teams identify, prioritize, and remediate business risks. ### Source excerpt We're excited to announce a new Snyk AppRisk integration with Orca Security that brings together application security from Snyk and leading cloud security from Orca. ## How to secure an S3 bucket on AWS? DevFeed: [How to secure an S3 bucket on AWS?]() Original publisher: [Read original article]() Author: Liran Tal Published: 2024-07-12T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Amazon S3](), [Security & compliance, Cloud security](), [Encryption](), [Vulnerabilities](), [Logging](), [Monitoring](), [Terraform]() Tags: [acquisition](), [aws](), [best-practices](), [blog](), [blog-post](), [cloud-security](), [devops](), [devrel](), [encryption](), [how-to](), [logging](), [monitoring](), [s3](), [security](), [snyk-cloud](), [snyk-iac](), [terraform](), [vulnerabilities]() ### AI overview This article explains how to secure Amazon S3 buckets on AWS. It covers risks from public or misconfigured permissions, unencrypted data, and insufficient logging and monitoring, along with practical security and compliance practices and automation with Snyk. ### Source excerpt In this blog post, we'll discuss practical steps to ensure your S3 buckets are secure and compliant with best practices. ## Making Insights-Driven Decisions in an Ecosystem of Ecosystems DevFeed: [Making Insights-Driven Decisions in an Ecosystem of Ecosystems]() Original publisher: [Read original article]() Author: Stephanie Shi Published: 2024-07-10T06:00:00Z Content type: article Language: en Sources: [Square Corner Blog RSS Feed]() Topics: [Security & compliance, Cloud security](), [Architecture & Design](), [data-processing](), [Monitoring]() Tags: [cloud](), [cloud-security](), [engineering](), [insights](), [monitoring](), [patterns](), [requirements]() ### AI overview Block describes a data-driven approach to securing and monitoring its diverse cloud environment. The approach uses data collection, contextualization, and validation to prioritize security and infrastructure initiatives, assess guardrails and detective controls across business units, and identify relevant stakeholders. ### Source excerpt Our approach to securing our cloud environments ## Marriott Deploys Cisco Umbrella DNS-Layer Security Across Nearly 5,000 Properties to Block Access to CSAM DevFeed: [Marriott Deploys Cisco Umbrella DNS-Layer Security Across Nearly 5,000 Properties to Block Access to CSAM]() Original publisher: [Read original article]() Author: Negisa Taymourian Published: 2024-03-12T08:00:00Z Content type: article Language: en Sources: [OpenDNS]() Topics: [Security](), [Cisco](), [Security & compliance, Cloud security]() Tags: [cisco](), [cisco-talos](), [cloud](), [cloud-security](), [customer-focus](), [deployment](), [dns](), [dns-layer-security](), [dns-security](), [scalability](), [security](), [security-service-edge](), [sse](), [threat-intelligence]() ### AI overview The article describes Marriott's deployment of Cisco Umbrella DNS-layer security across nearly 5,000 properties to block access to child sexual abuse materials and other malicious or unwanted domains. It highlights deployment speed, scalability, guest-network performance, manageability, and Cisco Talos threat intelligence. ### Source excerpt Marriott has rapidly deployed Cisco DNS-layer security across thousands of properties to advance human rights by limiting access to CSAM materials. The post Marriott Leads the Way in the Fight to Protect Children Online appeared first on Cisco Umbrella. ## New Chainguard Images for Selenium, Gotenberg and more DevFeed: [New Chainguard Images for Selenium, Gotenberg and more]() Original publisher: [Read original article]() Published: 2024-03-11T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Selenium](), [releases](), [container images](), [Security & compliance, Cloud security]() Tags: [argocd](), [chainguard-images](), [container-images](), [container-security](), [cve](), [gotenberg](), [security](), [selenium](), [sigstore]() ### AI overview Chainguard describes new Chainguard Images released in February, highlighting a minimal, CVE-free Selenium container image and additional images such as Gotenberg. The article explains Chainguard's approach to rebuilding open source packages and propagating updates. ### Source excerpt Unlock the latest Chainguard Images for Selenium, Gotenberg, and more, boosting your cloud security with zero-CVE, minimal container solutions. ## Cisco Umbrella Announces Migration from Umbrella Roaming Client to Cisco Secure Client DevFeed: [Cisco Umbrella Announces Migration from Umbrella Roaming Client to Cisco Secure Client]() Original publisher: [Read original article]() Author: Negisa Taymourian Published: 2024-02-15T09:00:00Z Content type: release Language: en Sources: [OpenDNS]() Topics: [Cisco](), [migration](), [Security & compliance, Cloud security](), [Security](), [Cisco Secure Access]() Tags: [cisco](), [cisco-secure-access](), [cisco-secure-client](), [cloud-security](), [dns-layer-security](), [end-of-life](), [migration](), [products-services](), [secure-web-gateway](), [security](), [security-service-edge](), [sse](), [umbrella-roaming-client](), [vpn](), [ztna]() ### AI overview Cisco Umbrella recommends that customers migrate from the standalone Umbrella Roaming Client to Cisco Secure Client, which includes the Umbrella Roaming Security Module and additional security capabilities. Eligible customers can migrate at no charge, while the existing client is scheduled to reach end of life with support ending April 2, 2025. ### Source excerpt More than ever modern cybersecurity leaders need to strengthen their protection for their remote users with advanced cloud security. Cisco Umbrella provides always-on security on and off the corporate network. If you're an existing Cisco Umbrella customer, you're already familiar with the robust protection it provides. We are excited to announce updates to our roaming [...] The post Your Free Upgrade to Cisco Secure Client Awaits appeared first on Cisco Umbrella. ## Streamline your FedRAMP certification with this container security checklist DevFeed: [Streamline your FedRAMP certification with this container security checklist]() Original publisher: [Read original article]() Published: 2024-02-15T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [container-security](), [Docker Hardened Images](), [Security & compliance, Cloud security](), [chainguard images](), [vulnerability management](), [sdlc]() Tags: [chainguard-images](), [compliance](), [container-security](), [federal-compliance](), [fedramp](), [sdlc](), [security](), [vulnerability-management]() ### AI overview This article presents a preview of a container security checklist for organizations pursuing FedRAMP certification. It covers asset management, container supply-chain hardening, and continuous vulnerability management within the accreditation boundary. ### Source excerpt Explore our FedRAMP container security compliance checklist. Tailored for CISOs and developers, it simplifies FedRAMP certification, ensuring robust compliance. ## Blog: Introducing the new Falco training course, by CNCF, Linux Foundation, and Sysdig DevFeed: [Blog: Introducing the new Falco training course, by CNCF, Linux Foundation, and Sysdig]() Original publisher: [Read original article]() Published: 2023-11-06T00:00:00Z Content type: release Language: en Sources: [Falco - Falco](), [Falco - The Falco blog]() Topics: [Falco](), [Security & compliance, Cloud security](), [linux foundation](), [container-security]() Tags: [blog](), [cloud-security](), [cncf](), [course](), [falco](), [linux-foundation](), [runtime-security](), [training]() ### AI overview The article introduces Detecting Cloud Runtime Threats with Falco (LFS254), a 20-hour, self-paced training course created by CNCF, the Linux Foundation, and Sysdig. It covers runtime security, Falco's history, design, architecture, setup, operation, system call data, and other data sources. ### Source excerpt Detecting Cloud Runtime Threats with Falco (LFS254) is the new Falco training course created by CNCF, Linux Foundation, and Sysdig. We're very excited about this new immersive course designed to enhance your expertise in securing cloud-native applications through hands-on learning. Detecting Cloud Runtime Threats with Falco (LFS254) is a 20-hour course focused on runtime security. It covers what is runtime security and how Falco is a powerful tool designed to detect anomalous activity in applications. From Falco's history and design principles to its architecture, to how it addresses cloud security challenges. This course is designed for IT professionals, security analysts, DevOps engineers, and anyone interested in cloud security. Why? In a rapidly evolving digital landscape with a surge in cloud adoption, the importance of comprehending and deploying robust security solutions, such as Falco, cannot be overstated. Regrettably, cloud-native technologies, particularly cloud-native security, are relatively novel, and there exists a gap in knowledge and expertise for addressing these emerging challenges. Our mission is to bridge this knowledge gap and empower individuals to tackle cloud and container security complexities effectively. Through accessible training, we aspire to contribute to narrowing the talent deficit in these pivotal domains. How? In this course, you'll embark on a journey of securing cloud-native environments. The course breaks down complex concepts, making them accessible and actionable. Its self-paced nature provides the flexibility to learn at your own rhythm, accommodating your personal and professional commitments. This structure allows you to digest intricate concepts and apply them bit by bit, ensuring a deeper and more lasting comprehension. Course Structure The course begins with an introduction to Falco, encompassing its history, design principles, and its broader role in cloud security. It then delves into the core components of Falco, exp [Next page]()