All The Latest!
Keeping up with cyber-news is hard. Enjoy our specially curated collection of various RSS feeds to help make finding relevant news a little less tedious. If you have something to share, be sure to let us know!
CSA Feed
- The Model Did Exactly What We Asked
July 21, 2026An AI "went rogue" last week, just like out of a science fiction movie. Not because it turned on us, but to achieve its defined objective. Just as we were planning our CISO huddle on the Hug …
- AI Controls Matrix v1.1: Strengthening the Foundation for Trustworthy AI
July 14, 2026The Cloud Security Alliance (CSA) recently announced the release of the AI Controls Matrix (AICM) v1.1, a significant update to our comprehensive framework for secure and trustworthy AI systems. Build …
- Implementing CCM: Universal Endpoint Management Controls
July 9, 2026The Cloud Controls Matrix (CCM) is a framework of controls that are essential for cloud computing security. Created by CSA, the CCM aligns with CSA best practices. You can use CCM to assess and guide …
- When "Who Are You?’ Is No Longer Enough: The Case for Intent-Based Access Control in the Age of AI Agents
July 9, 2026It keeps coming back to a conversation I had about six months ago. I sat with the CISO of a fortune 50 retail organization to review an incident that had kept the security team up for two straight nig …
- Why M2M Authentication and API Security Must Work Together
July 8, 2026TL;DR: Non-human identities are calling APIs across cloud environments every day. Securing those interactions requires two layers of control: Machine-to-machine authentication to prove the caller is l …
Tech Target
- Guide to cloud container security risks and best practices
December 12, 2025Containers are an integral part of a growing number of production environments. But they can become security risks if not managed correctly.
- What is a cloud access security broker (CASB)?
October 15, 2025A cloud access security broker (CASB) is a software tool or service that sits between an organization's on-premises infrastructure and a cloud provider's infrastructure.
- Guide to creating a cloud migration testing strategy
December 27, 2024Follow these guidelines to craft a strategy for cloud migration testing, from key tests to common challenges and best practices — and understand why everything involves security.
- The 10 best cloud security certifications for IT pros in 2025
December 17, 2024Certifications can help security pros prove their baseline knowledge of infosec topics. Consider adding these top cloud security certifications to your arsenal.
- click-wrap agreement (click-through agreement)
July 1, 2024A click-wrap agreement (click-through agreement) is an online agreement in which the user signifies their acceptance by clicking a button or checking a box that states, 'I agree.'
Schneier On Security
- Friday Squid Blogging: Illex Squid Catch in the Falklands
July 24, 2026Lower catch this year. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
- Why AI Needs a “Genie Coefficient”
July 24, 2026This essay was written with Barath Raghavan, and originally appeared in IEEE Spectrum. Major benchmarks measure what AI can do. None measure whether it does what you mean: the distance between what yo …
- End-to-End Encryption and “Going Dark”
July 23, 2026New paper: “Encryption and Globalization 15 Years Later: End-to-End Encryption and the Third Round of the ‘Going Dark’ Debate“: Abstract: This Article updates and expands on 2012 research on encryptio …