Columbia's 2025 breach highlights the need for unified cloud and SaaS security to protect data across campuses.

The SaaS Security Capability Framework (SSCF) v1.0 introduces practical, actionable controls for SaaS security, guiding ...

Salesloft breach shows how OAuth tokens abused by trusted apps enable data exposure, underscoring the need for Zero Trust and ...

Retailers face rising ransomware targeting ESXi hypervisors; guidance on securing virtualization and preventing outages.

Learn how AI log analysis enhances security. Reduce the load on SOC teams so they can focus on judgment, context, and ...

Explores key security indicators as a modern alternative to controls in FedRAMP, their benefits, differences, and automation ...

Regional analysis of BEC and VEC engagement, post-read behavior, and reporting gaps, highlighting the need for targeted ...

RiskRubric provides a six-pillar framework to quantify AI model risk, guiding secure, compliant adoption with evidence-based ...

Overview of NIS2, CRA, and DORA status, implications, and compliance strategies for EU organizations and the financial sector ...

Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, ...

Identity security has officially overtaken all other risks as the top concern in cloud environments. According to CSA’s State of Cloud and AI Security 2025 survey report, insecure identities and risky ...

SEATTLE – June 12, 2025 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud ...