Explores where AI helps in pen testing, current limits, and how to integrate AI with human oversight, data controls, and governance.

AI-enabled adversaries are compressing exploit timelines, multiplying attack capacity, and putting expert-grade capabilities within reach of lower-skilled attackers. Preparing for these threats ...

CISA's AA26-251A should end the fiction that confidential model weights are enough to protect frontier capabilities. On September 8, 2026, the Cybersecurity and Infrastructure Security Agency, ...

This report provides case‌ ‌study‌ ‌analyses‌ ‌for‌ last year’s ‌ The‌ ‌Egregious‌ ‌11:‌ ‌Top‌ ‌Threats‌ ‌to‌ ‌Cloud‌ ‌Computing and a relative security industry breach analysis. Using nine actual ...

The Cloud Security Alliance (CSA) created the Security, Trust, Assurance, and Risk (STAR) program in August of 2011 to improve transparency and security within cloud computing. This program was built ...

The STAR Level 1: Security Questionnaire (CAIQ v4.1) is what individuals will need to use to submit to the STAR Registry, and includes all the necessary features of CAIQ v4.1. You can read more about ...

This document by the CSA AI Technology and Risk Working Group describes the LLM security risks relevant to system design. After exploring the pitfalls in authorization and security, it also outlines ...

Identity security has officially overtaken all other risks as the top concern in cloud environments. According to CSA’s State of Cloud and AI Security 2025 survey report, insecure identities and risky ...

Stay connected with the cloud security community by attending local events, workshops, and global CSA conferences. Engage with industry leaders, gain new insights, and build valuable professional ...