Benvenuto in CloudSec Academy, la tua guida per navigare nella zuppa alfabetica degli acronimi sulla sicurezza del cloud e del gergo del settore. Elimina il rumore con contenuti chiari, concisi e realizzati da esperti che coprono i fondamenti e le best practice.
Generative AI (GenAI) security is an area of enterprise cybersecurity that zeroes in on the risks and threats posed by GenAI applications. To reduce your GenAI attack surface, you need a mix of technical controls, policies, teams, and AI security tools.
In this article, we’ll take a closer look at how you can leverage SAST for code security. We’ll also explore key features of open-source SAST tools, such as language support, integration capabilities, and reporting functionalities.
LLM models, like GPT and other foundation models, come with significant risks if not properly secured. From prompt injection attacks to training data poisoning, the potential vulnerabilities are manifold and far-reaching.
Cloud Security Posture Management (CSPM) descrive il processo di rilevamento e correzione continui dei rischi negli ambienti e nei servizi cloud (ad esempio bucket S3 con accesso di lettura pubblico). Gli strumenti CSPM valutano automaticamente le configurazioni cloud rispetto alle best practice del settore, ai requisiti normativi e alle policy di sicurezza per garantire che gli ambienti cloud siano sicuri e gestiti correttamente.
Wiz collega i punti nel tuo cloud, dal codice al Runtime.
Attack path analysis (APA) is a cybersecurity technique that identifies and maps how potential attackers could infiltrate your network and systems
A threat intel feed, or threat intelligence feed, provides a continuous incoming flow of data related to cyber threats and risks.
Nodes are the physical or virtual machines that provide computing resources in a Kubernetes cluster, while pods are the smallest deployable units that contain one or more containers
The Kubernetes control plane is the cluster’s management layer that exposes the API, stores cluster state, and continuously reconciles desired configuration—scheduling, scaling, and replacing pods as needed—to keep applications healthy and consistent across nodes.
A memory leak is when a program allocates memory but never releases it back to the system. This means your computer gradually runs out of available memory, like borrowing books from a library but never returning them.
API attack surface management is focused on discovering, inventorying, analyzing, and continuously monitoring all APIs within an organization’s cloud environment. This enables identification and mitigation of points of exposure that could lead to a breach.
Zero-day exploits target unknown vulnerabilities before patches exist, which often makes traditional signature-based defenses ineffective.
Incident response plan testing is essential for cloud-native organizations because it goes far beyond checking a box—it’s about proving your team’s ability to handle the unpredictable nature of real attacks.
La gestione del comportamento di sicurezza SaaS (SSPM) è un set di strumenti progettato per proteggere le app SaaS identificando configurazioni errate, gestendo le autorizzazioni e garantendo la conformità alle normative in tutto il patrimonio digitale dell'organizzazione.
Incident response certifications are professional credentials that prove you can handle security breaches when they happen. These certifications show employers that you know how to detect threats, contain damage, and get systems back to normal after an attack.
Incident response metrics are critical for understanding how efficiently your security team can identify, respond to, and recover from threats in cloud-native environments.
Incident response services are specialized teams and tools that help you detect, contain, and recover from cyberattacks
Effective shadow API security requires continuous discovery, runtime context, and code-to-cloud visibility to identify unsanctioned APIs before they’re exploited by attackers.
An incident response checklist is a step-by-step guide that tells your security team exactly what to do when a cyberattack happens.
Discover Cloud Custodian, the policy-as-code engine for multi-cloud compliance, cost optimization, and automated cloud governance.
