Mythos reveals that cybersecurity progress hinges on closing the discovery-to-remediation gap and using frontier AI ...

Explores how cloud security is evolving under shared responsibility, IAM, and hybrid/multi-cloud, with security teams taking ...

Explains how dangling CNAMEs enable attackers to hijack trusted subdomains, creating cloud security risks and the need for ...

The Guide to the IoT Security Controls Framework Version 2 provides instructions for using the companion CSA IoT Security Controls Framework v2. This guide explains how to use the framework to ...

Gartner predicts over 60% of organizations will embrace Zero Trust principles for security by 2025. Become an accredited Zero Trust professional with the first, independent training and certificate ...

An IEEE standard for local and metropolitan area networks–Port-Based Network Access Control. IEEE 802 LANs are deployed in networks that convey or provide access to critical data, that support mission ...

STAR-Enabled Solutions are Organizations that have licensed the CSA Cloud Controls Matrix (CCM) or Consensus Assessments Initiative Questionnaire (CAIQ) to be used in their publicly available product ...

The CSA Security, Trust, Assurance, and Risk (STAR) program is the most complete and largest cloud assurance program in the world that constitutes an ecosystem of the best practices, standards, ...

Retrieval augmented generation (RAG) is an effective technique used by AI engineers to develop large language model (LLM) powered applications. However, the lack of security controls in RAG-based LLM ...

This study and report provides practical, data-driven evidence that AI can significantly enhance SOC analyst performance. AI tools can reduce alert fatigue, improve investigative rigor, and deliver ...