Cloud Security

AppSec

How Cortex Cloud and Semgrep Are Redefining AI-Driven Application Security

Modern AppSec demands context. Cortex Cloud and Semgrep integrate to unify code, runtime, and infrastructure visibility, helping teams prioritize exploitable risks and ship faster.

Application Security

AppSec

Cloud Security

Partners

Oct 09, 2025

By Cameron Hyde

Cloud Security

Application Security

Cloud Posture Security

Cloud Runtime Security

AI Security Posture Management

Cloud Native Application Protection Platform

AppSec, ASPM, Cloud Security

Breakdown: Widespread npm Supply Chain Attack Puts Billions of Weekly Downl...

npm supply chain attack exposed billions of downloads to risk. Learn how malicious packages spread and how to prevent threats with Cortex Cloud.

Sep 10, 2025

By Asaf Henig and Cameron Hyde

AppSec, Cloud Security, Partners

Accelerate Secure Development by Automating Delivery of a Compliant Cloud I...

Cortex Cloud and HashiCorp Terraform integration secures cloud infrastructure by default, enabling fast, compliant provisioning and reduced risk.

Sep 09, 2025

By Cameron Hyde

Announcement, AppSec, CI/CD

GigaOm Names Prisma Cloud a Leader in Software Supply Chain Security

Secure your software supply chain with Prisma® Cloud, the top-ranked leader in GigaOm's Radar, offering end-to-end protection for cloud-native applications.

Dec 17, 2024

By Emily Rodenhuis

AppSec, Cloud Security

Security Theater: Your AppSec Success Metrics Are Misleading

Shift from security theater to effective application security by replacing metrics that incentivizes poor development habits with those that optimize AppSec.

Aug 20, 2024

By Cameron Hyde

AppSec, CI/CD, Research

ArtiPACKED: Hacking Giants Through a Race Condition in Github Actions Artif...

Research reveals how GitHub Actions artifacts in CI/CD workflows can leak tokens, granting malicious actors high-level cloud access and enabling severe consequences.

Aug 13, 2024

By Yaron Avital

AppSec, AppSec, Cloud Native Application Platform

Inject Security into Your AWS Development Pipeline

Integrate Code to Cloud security for visibility and control of the systems, technologies, configurations and CI/CD pipelines making up the AWS CodeCommit platform.

Jun 26, 2024

By Cameron Hyde

AppSec, CI/CD, Cloud Native Application Protection Platform

Drive Towards Preventing Breaches and Pipeline Attacks with Prisma Cloud

CI/CD pipeline and developer-friendly code security integrated into an intelligent code-to-cloud CNAPP provides unmatched visibility and control for A...

Nov 14, 2023

By Taylor Smith

Application Security, AppSec, Cloud Workload Protection

Agentless Secrets Scanning with Prisma Cloud

Find passwords, encryption keys, and API tokens hidden in workloads to prevent unauthorized access to your cloud environments with agentless secrets scanning.

Oct 10, 2023

By Omri Cohen

AppSec, CI/CD, DevOps, Research

The GitHub Actions Worm: Compromising GitHub Repositories Through the Actio...

GitHub Actions worm compromises GitHub repositories via action dependencies in a novel attack vector allowing attackers to distribute malware across r...

Sep 14, 2023

By Asi Greenholts

AppSec, DevSecOps

OpenID Connect: Let’s Talk Security

Learn how OpenID Connect (OIDC) helps reduce the impact of data breaches and get practical tips to address OIDC security issues like IAM policy misconfigurations.

Sep 12, 2023

By Steve Giguere

AppSec, CI/CD, Research

Third-Party GitHub Actions: Effects of an Opt-Out Permission Model

Secure GitHub Actions with new research showing high-risk practices and get expert tips to prevent overly permissive workflows in your CI/CD pipeline.

Aug 16, 2023

By Yaron Avital

Application Security, AppSec

The Evolution of Cloud-Native Application Security

Discover how application security has evolved and learn how to adapt your AppSec program to address cloud-native security issues relating to code, container, cluster, and CI/CD pipeline security.

Aug 09, 2023

By Steve Giguere

Application Security, AppSec

Protecting Your Delivery Pipeline: Extensive CI/CD Security with Prisma Clo...

Learn how Prisma Cloud’s CI/CD Security enables organizations with pipeline posture management, visibility into their engineering ecosystem, attack path analysis and more.

Jul 27, 2023

By Jonathan Bregman

Application Security, AppSec

Poisoned Pipeline Execution (PPE): A Technical Deep Dive

Learn about the three most common types of poisoned pipeline execution (PPE) attacks and discover practical tips to protect your organization from these CI/CD-based attacks.

Jun 14, 2023

By Omer Gil

Application Security, AppSec

Visualizing Your CI/CD Ecosystem From an Attacker’s Perspective

Discover key CI/CD security insights and challenges our threat researchers uncovered as they explored the interconnected nature of CI/CD ecosystems and engineered CI/CD graphs.

Jun 07, 2023

By Leon Goldberg

Application Security, AppSec, DevSecOps

Application Security in the Cloud: Introducing a Modern Framework

Discover a 3-step framework to help you build a scalable cloud AppSec program that addresses the unique security needs of your cloud-native organizati...

Jun 06, 2023

By Daniel Krivelevich

Load more blogs

Cloud Security

AppSec

How Cortex Cloud and Semgrep Are Redefining AI-Driven Application Security

Cloud Security

Subscribe to Cloud Security Blogs!

Get the latest news, invites to events, and threat alerts