[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:cloud-security-posture":3},{"control":4,"products":25,"stories":66,"lessons":110,"related":135,"compare":156},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.","Continuous checks of cloud accounts in AWS, Azure and Google Cloud against secure settings, plus a view of which workloads are exposed, vulnerable and reachable from the internet.","Cloud breaches are rarely clever: an open storage bucket, an exposed database, an over-privileged key. Posture management finds these within minutes of creation and ranks them by real exposure, which matters because cloud teams change settings many times a day.",[11,12,13,14],"Which cloud providers and services does it cover?","Does it show attack paths, for example an exposed machine with a role that reaches sensitive data?","Can findings go straight into the owning team's backlog?","Is it agentless, and what access does it need to our accounts?","Risk: data exposure through cloud misconfiguration. Control: continuous cloud posture monitoring, with findings routed to owners. Owner: cloud platform lead. Measure: critical misconfigurations open longer than 7 days.",[17,18,19,20],"NIS2 Art. 21(2)(e): security in acquisition, development and maintenance","DORA Art. 9: protection and prevention","CIS Control 4: secure configuration","ISO\u002FIEC 27001:2022 A.5.23 and A.8.9: cloud services and configuration management",{"name":22,"slug":23},"Configuration Management","configuration-management","2026-10-16T12:48:09.89199+00:00",[26,34,42,50,58],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"orca-security","Orca Security","\u002Fvendor-logos\u002Forca-security.png","orca-cloud-security-platform","Orca Cloud Security Platform","https:\u002F\u002Forca.security\u002Fplatform\u002F","Agentless cloud security platform for posture, vulnerabilities and data exposure.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"total":67,"last_days":68,"recent":69},428,144,[70,75,80,85,90,95,100,105],{"slug":71,"title":72,"published_at":73,"brief":74},"the-green-agent-pov-formulating-the-fix-for-an-internet-facing-container-with-se-43a4d5","The Green Agent POV: Formulating the Fix for an Internet-Facing Container with Sensitive Data Access","2026-11-13T17:05:02+00:00","Green Agent tool identifies and formulates fixes for internet-facing containers with vulnerabilities and sensitive data",{"slug":76,"title":77,"published_at":78,"brief":79},"new-mior-and-skyfall-attacks-let-rogue-cloud-hosts-steal-secrets-from-amd-sev-sn-d93f5e","New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs","2026-11-13T15:27:05+00:00","Two new attacks, Mior and Skyfall, allow malicious cloud hosts to steal data from AMD SEV-SNP protected VMs.",{"slug":81,"title":82,"published_at":83,"brief":84},"suspected-north-korean-it-workers-reached-onboarding-at-companies-with-open-data-71c043","Suspected North Korean IT workers reached onboarding at companies with open data","2026-11-13T06:00:22+00:00","North Korean IT workers infiltrated companies, reaching onboarding with access to sensitive data.",{"slug":86,"title":87,"published_at":88,"brief":89},"tsmc-data-breach-employee-data-exposed-via-third-party-cloud-provider-e36f61","TSMC Data Breach – Employee Data Exposed via Third-Party Cloud Provider","2026-11-13T05:25:43+00:00","TSMC confirms employee data exposed online via third-party cloud provider.",{"slug":91,"title":92,"published_at":93,"brief":94},"attackers-breached-10-organizations-with-an-open-source-ai-pentest-framework-5910ad","Attackers breached 10 organizations with an open-source AI pentest framework","2026-11-12T15:00:29+00:00","Chinese-speaking attackers used an AI pentest framework to breach 10 organizations.",{"slug":96,"title":97,"published_at":98,"brief":99},"aws-mcp-gateway-security-flaw-allowing-access-to-internal-networks-and-cloud-cre-c2ad66","AWS MCP Gateway Security Flaw Allowing Access to Internal Networks and Cloud Credentials","2026-11-12T13:51:59+00:00","AWS MCP Gateway registry flaw (CVE-2026-125926) allows authenticated attackers to access internal networks and cloud",{"slug":101,"title":102,"published_at":103,"brief":104},"ai-pentest-tool-antifox-abused-to-steal-aws-credentials-236b27","AI Pentest Tool AntiFox Abused To Steal AWS Credentials","2026-11-11T21:31:32+00:00","Attackers abuse AntiFox AI pentest tool to steal AWS credentials and target IIS servers.",{"slug":106,"title":107,"published_at":108,"brief":109},"antifox-ai-pentesting-platform-linked-to-attacks-that-accessed-aws-production-se-99d239","AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets","2026-11-11T15:34:27+00:00","AntiFox AI pentesting platform used in attacks to steal AWS production secrets.",[111,115,119,123,127,131],{"slug":112,"title":113,"published_at":114},"internet-facing-containers-with-sensitive-data-access-create-exploitable-attack-paths","Internet-Facing Containers with Sensitive Data Access Create Exploitable Attack Paths","2026-11-13T18:21:17.032+00:00",{"slug":116,"title":117,"published_at":118},"north-korean-fake-it-workers-reached-onboarding-and-accessed-sensitive-employee-data","North Korean Fake IT Workers Reached Onboarding and Accessed Sensitive Employee Data","2026-11-13T08:22:51.018+00:00",{"slug":120,"title":121,"published_at":122},"third-party-cloud-provider-exposes-46000-tsmc-employee-records","Third-Party Cloud Provider Exposes 46,000 TSMC Employee Records","2026-11-13T06:20:42.501+00:00",{"slug":124,"title":125,"published_at":126},"open-source-ai-pentest-tool-weaponized-against-critical-sector-organizations","Open-Source AI Pentest Tool Weaponized Against Critical-Sector Organizations","2026-11-12T16:21:40.466+00:00",{"slug":128,"title":129,"published_at":130},"ssrf-flaw-in-aws-mcp-gateway-exposed-internal-networks-and-cloud-credentials","SSRF Flaw in AWS MCP Gateway Exposed Internal Networks and Cloud Credentials","2026-11-12T14:21:00.195+00:00",{"slug":132,"title":133,"published_at":134},"antifox-tool-exploits-weak-iis-configs-to-steal-aws-credentials","AntiFox Tool Exploits Weak IIS Configs to Steal AWS Credentials","2026-11-11T23:20:43.287+00:00",[136,140,144,148,152],{"slug":137,"name":138,"problem":139},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",{"slug":141,"name":142,"problem":143},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",{"slug":145,"name":146,"problem":147},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":149,"name":150,"problem":151},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",{"slug":153,"name":154,"problem":155},"email-authentication","Email authentication (DMARC)","Nobody can send email that pretends to come from your domain.",{"wiz\u002Fwiz-cloud":157,"orca-security\u002Forca-cloud-security-platform":175,"crowdstrike\u002Ffalcon-cloud-security":186,"palo-alto-networks\u002Fcortex-cloud":203,"microsoft\u002Fdefender-for-cloud":220},{"hq_country":158,"also_provides":159,"reviews":160,"affected":173,"reported":174},"US",[],[161,164,167,170],{"label":162,"url":163},"PeerSpot: Wiz user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fwiz-reviews",{"label":165,"url":166},"Gartner Peer Insights: Wiz CNAPP user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fwiz-703120040",{"label":168,"url":169},"CSO Online: CNAPP buyer's guide: Top cloud-native app protection platforms compared (2025)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F573629\u002Fcnapp-buyers-guide-top-tools-compared.html",{"label":171,"url":172},"TechTarget: What the $32B Google-Wiz deal says about cloud-native security (2025)","https:\u002F\u002Fwww.techtarget.com\u002Fcybersecurity\u002Fopinion\u002FWhat-the-32B-Google-Wiz-deal-says-about-cloud-native-security",0,39,{"hq_country":176,"also_provides":177,"reviews":178,"affected":173,"reported":173},null,[],[179,182,185],{"label":180,"url":181},"Gartner Peer Insights: Orca Security user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Forca-security-1910019033",{"label":183,"url":184},"PeerSpot: Orca Security user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Forca-security-reviews",{"label":168,"url":169},{"hq_country":158,"also_provides":187,"reviews":188,"affected":201,"reported":202},[],[189,192,195,198],{"label":190,"url":191},"SE Labs enterprise endpoint test Apr-Jun 2026: CrowdStrike Falcon","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-crowdstrike-falcon-2026-07-factsheet.pdf",{"label":193,"url":194},"AV-Comparatives EPR test 2025: CrowdStrike Falcon Enterprise","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002FEPR_CrowdStrike_2025.pdf",{"label":196,"url":197},"Gartner Peer Insights: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcrowdstrike-falcon",{"label":199,"url":200},"PeerSpot: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcrowdstrike-falcon-reviews",4,23,{"hq_country":158,"also_provides":204,"reviews":205,"affected":218,"reported":219},[],[206,209,212,215],{"label":207,"url":208},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":210,"url":211},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":213,"url":214},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",{"label":216,"url":217},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",22,43,{"hq_country":158,"also_provides":221,"reviews":222,"affected":235,"reported":236},[],[223,226,229,232],{"label":224,"url":225},"AV-TEST: business results for Microsoft Defender","https:\u002F\u002Fwww.av-test.org\u002Fen\u002Fantivirus\u002Fbusiness-windows-client\u002Fmanufacturer\u002Fmicrosoft\u002F",{"label":227,"url":228},"ITPro: Microsoft Defender for Business review (2024)","https:\u002F\u002Fwww.itpro.com\u002Fcloud\u002Fcloud-security\u002Fmicrosoft-defender-for-business-review-feature-filled-enterprise-security-for-small-businesses",{"label":230,"url":231},"PeerSpot: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmicrosoft-defender-for-endpoint-reviews",{"label":233,"url":234},"Gartner Peer Insights: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fmicrosoft-defender-for-endpoint",311,128]