CloudSec 아카데미

Greg Zemlin

5월 16, 2025

Learn use cases, tactics, and the foundations of the MITRE ATTACK (also known as MITRE ATT&CK) framework and how to leverage it for improved cloud security.

To defend against malware in the cloud, businesses need a detection and response solution that’s built for the cloud, fluent in cloud-based indicators of compromise (IOCs), and enriched by cloud threat intelligence.

Credential stuffing attacks can cost a breached organization millions in fines per year. Learn more about foundations, solutions, and real-life cases.

There are many sneaky AI security risks that could impact your organization. Learn practical steps to protect your systems and data while still leveraging AI's benefits.

Data exfiltration is when sensitive data is accessed without authorization or stolen. Just like any data breach, it can lead to financial loss, reputational damage, and business disruptions.

Greg Zemlin

3월 18, 2025

Privilege escalation is when an attacker exploits weaknesses in your environment or infrastructure to gain higher access and control within a system or network.

Lateral movement is a cyberattack technique used by threat actors to navigate a network or environment in search of more valuable information after gaining initial access.

A brute force attack is a cybersecurity threat where a hacker attempts to access a system by systematically testing different passwords until a correct set of credentials is identified.

An attack surface is refers to all the potential entry points an attacker could exploit to gain unauthorized access to a system, network, or data.

Greg Zemlin

3월 15, 2025

Cryptojacking is when an attacker hijacks your processing power to mine cryptocurrency for their own benefit.

Remote code execution refers to a security vulnerability through which malicious actors can remotely run code on your systems or servers.

Malicious code is any software or programming script that exploits software or network vulnerabilities and compromises data integrity.

Shadow AI is the unauthorized use or implementation of AI that is not controlled by, or visible to, an organization’s IT department.

A security misconfiguration is when incorrect security settings are applied to devices, applications, or data in your infrastructure.

섀도우 IT는 조직의 IT 부서에서 제어하거나 볼 수 없는 IT 서비스, 애플리케이션 및 리소스를 직원이 무단으로 사용하는 것입니다.

Uncover the top cloud security issues affecting organizations today. Learn how to address cloud security risks, threats, and challenges to protect your cloud environment.

Shaked Rotlevi

10월 25, 2024

Cross-site request forgery (CSRF), also known as XSRF or session riding, is an attack approach where threat actors trick trusted users of an application into performing unintended actions.

Shaked Rotlevi

10월 25, 2024

Data sprawl refers to the dramatic proliferation of enterprise data across IT environments, which can lead to management challenges and security risks.

In this blog post, we’ll explore security measures and continuous monitoring strategies to prevent these leaks, mitigating the risks posed by security vulnerabilities, human error, and attacks.

LLM models, like GPT and other foundation models, come with significant risks if not properly secured. From prompt injection attacks to training data poisoning, the potential vulnerabilities are manifold and far-reaching.

Shaked Rotlevi

9월 19, 2024

데이터 유출은 조직 데이터를 제3자에게 무단으로 반출하는 것입니다. 잘못 구성된 데이터베이스, 제대로 보호되지 않은 네트워크 서버, 피싱 공격 또는 부주의한 데이터 처리와 같은 다양한 수단을 통해 발생합니다.

Shaked Rotlevi

9월 13, 2024

ChatGPT security is the process of protecting an organization from the compliance, brand image, customer experience, and general safety risks that ChatGPT introduces into applications.

Adversarial artificial intelligence (AI), or adversarial machine learning (ML), is a type of cyberattack where threat actors corrupt AI systems to manipulate their outputs and functionality.

Shaked Rotlevi

8월 5, 2024

LLM jacking is an attack technique that cybercriminals use to manipulate and exploit an enterprise’s cloud-based LLMs (large language models).

Credential access is a cyberattack technique where threat actors access and hijack legitimate user credentials to gain entry into an enterprise's IT environments.