Explores where AI helps in pen testing, current limits, and how to integrate AI with human oversight, data controls, and governance.

The report presents each security incident as both a detailed narrative and a threat model. This includes an attack-style synopsis with the relevant cloud security risks, CCM controls, and mitigations ...

To better understand the current state of the industry, Thales commissioned CSA to develop a survey and report. The report aims to illuminate current data security risk assessment practices and areas ...

AI-enabled adversaries are compressing exploit timelines, multiplying attack capacity, and putting expert-grade capabilities within reach of lower-skilled attackers. Preparing for these threats ...

CISA's AA26-251A should end the fiction that confidential model weights are enough to protect frontier capabilities. On September 8, 2026, the Cybersecurity and Infrastructure Security Agency, ...

This report provides case‌ ‌study‌ ‌analyses‌ ‌for‌ last year’s ‌ The‌ ‌Egregious‌ ‌11:‌ ‌Top‌ ‌Threats‌ ‌to‌ ‌Cloud‌ ‌Computing and a relative security industry breach analysis. Using nine actual ...

The launch of CSAI marks the next evolution of CSA’s AI Safety Initiative, which has produced over 30 research white papers, several open source projects, the Trusted AI Safety Expert (TAISE) ...

The AI Controls Matrix (AICM) is a first-of-its-kind vendor-agnostic framework for cloud-based AI systems. Organizations can use the AICM to develop, implement, and operate AI technologies in a secure ...

The STAR Level 1: Security Questionnaire (CAIQ v4.1) is what individuals will need to use to submit to the STAR Registry, and includes all the necessary features of CAIQ v4.1. You can read more about ...

Zero Trust has been the foundation of cloud security, focusing on principles like least privilege access, continuous verification, and micro-segmentation. These principles have helped protect against ...