Explains how dangling CNAMEs enable attackers to hijack trusted subdomains, creating cloud security risks and the need for ...

AI-speed risk requires identity-defined reachability within Zero Trust, reducing exposure and enabling continuous policy ...

Explains why speed alone can't secure defenses. It covers attacker defender timelines, AI's uneven impact, and path deletion ...

SEATTLE – June 30, 2026 – The Cloud Security Alliance (CSA), the world's leading not-for-profit organization committed to AI, cloud, and Zero Trust cybersecurity education, today announced a ...

Gartner predicts over 60% of organizations will embrace Zero Trust principles for security by 2025. Become an accredited Zero Trust professional with the first, independent training and certificate ...

An IEEE standard for local and metropolitan area networks–Port-Based Network Access Control. IEEE 802 LANs are deployed in networks that convey or provide access to critical data, that support mission ...

STAR-Enabled Solutions are Organizations that have licensed the CSA Cloud Controls Matrix (CCM) or Consensus Assessments Initiative Questionnaire (CAIQ) to be used in their publicly available product ...

The management of cloud security in the following areas: The provision of Alibaba cloud’s cloud computing services, including: Cloud Computing Infrastructure Services, Big Data, Security, Enterprise, ...

Stay connected with the cloud security community by attending local events, workshops, and global CSA conferences. Engage with industry leaders, gain new insights, and build valuable professional ...

Software-as-a-Service (SaaS) applications have become foundational to modern business operations. However, organizations are also facing a rising tide of security challenges, including visibility gaps ...

This publication by the CSA Zero Trust Working Group provides guidance on iteratively executing the first step of the Zero Trust implementation process, “Defining the Protect Surface.” Defining the ...