Palo Alto Networks

DevOps

Drive Towards Preventing Breaches and Pipeline Attacks with Prisma Cloud

In today’s dynamic software development landscape, the agility of engineers and their tools evolve at an unprecedented rate, calling for a paradigm shift in our security approach.

AppSec

CI/CD

Cloud Native Application Protection Platform

Nov 14, 2023

By Taylor Smith

Palo Alto Networks

Products and Services

Partners

Application Security, CI/CD

All the Small Things: Azure CLI Leakage and Problematic Usage Patterns

The issue reported by @NoCopy stated that “azure/login in some cases leaks Azure Application Variables to the GitHub build log.” The user included an example workflow, a relevant a...

Nov 14, 2023

By Aviad Hahami

Announcement, Cloud Native Application Platform, Cloud Security, DevOps, DevSecOps, Must-Read Articles

Cloud-Native Security Survey: Patterns and Tipping Points in New Report

Did you know that 72% of organizations from around the world moved 30% or more of their workloads to the cloud in the la...

Mar 07, 2023

By Bob West

DevSecOps

How to Think About DevSecOps for a Secure Future

Despite the technological advances of recent years (or perhaps because of them), the number of threats on the internet continues to rise. In fact, a 2022 survey from ThoughtLab found that the number of breaches...

Feb 16, 2023

By Glenn Wilson

Code Security, DevSecOps

It’s Not All Bad! Using Cloud Drift for Teachable Moments

Stack Overflow’s 2021 Developer Survey found that 54% of developers use AWS, yet only 7% use Terraform. That means that far more developers have adopted provisioning, managing and decommissioning cloud infrastr...

Feb 14, 2023

By Taylor Smith

Code Security, DevSecOps

From Manifest to Workload: Embedding Kubernetes Security at Each Phase of t...

Part of the answer is to identify and address security risks within the various components of Kubernetes itself as well as their configurations. You can do this by, for example, va...

Jan 24, 2023

By Chris Tozzi

Hybrid Cloud Data Center, Next-Generation Firewalls

New: More Cloud NGFW Scalability Across Multiple AWS VPCs

We are excited to announce the availability of the Multi-VPC Cloud NGFW for AWS resource, the managed firewall that provides best-in class Palo Alto Networks security with AWS cloud native ease of use. By intro...

Dec 19, 2022

By Vijay Arumugam Kannan

Next-Generation Firewalls

See The Latest Software Firewall Developments at AWS re:Invent 2022

Join us in-person in Las Vegas from November 28 through December 2 for AWS re:Invent - you won’t want to miss software firewall best practices for securing applications and workloa...

Nov 28, 2022

By Keshav Thyagarajan

Cloud Computing, DevSecOps

Addressing Security Throughout the Infrastructure DevOps Lifecycle

No, this isn’t another post about the Secure Development Lifecycle. This is a practical post on why and how to address cloud security at each step of the infrastructure development...

Aug 30, 2022

By Barak Schoster

Next-Generation Firewalls, Uncategorized

CN-Series Container Firewall Now Supported on Oracle Kubernetes Engine

We’re pleased to announce the availability of CN-Series Container Firewalls on Oracle Cloud Infrastructure. With this release, customers can use CN-Se...

Jul 06, 2022

By Chintan Udeshi and Arun Poonia

Guest Post, Partners, Points of View, Products and Services

How Cybersecurity Transformation Unlocks Innovation and Brand Growth

In their urgent efforts to defend themselves against cyber threats that are growing in frequency and severity, many organizations find themselves trap...

Feb 03, 2022

By Rick Congdon and Ryan LaSalle

Cloud Computing, DevSecOps, Secure the Cloud

How Does DevSecOps Fit Into Your Digital Transformation?

"Going digital" is a huge challenge in the best of times, but thanks to increasingly competitive markets, more technically savvy customers, and a few... black swan events sprinkled around, it can feel more comp...

Dec 08, 2021

By Zachary Flower

Data Security, DevSecOps

The DevSecOps Revolution Is Here: What Is DevSecOps & How Can It Boost ...

The DevOps integration merges Software Development and IT Operations to deliver software in an effective and streamlined way. Despite a high level of efficiency, there is one promi...

Jun 16, 2021

By Mariya Harris

Cloud Workload Protection Platform, DevSecOps, Secure the Cloud, Secure the Enterprise

3 Simple Techniques to Add Security Into the CI/CD Pipeline

I propose that there are three fundamental and concrete practices DevOps and security teams can adopt to add security into the CI/CD pipeline and secu...

Oct 09, 2020

By Vinay Venkataraghavan

Secure the Cloud

Cloud Native Security: Intention vs. Practice

Cloud native. What does this mean to you? My personal definition goes something like this: An application is cloud native when it is crafted from day one to organically make use of API-driven platforms. This is...

Jul 01, 2020

By Matthew Chiodi

DevSecOps, Secure the Cloud

How Prisma Cloud Secures Cloud Native App Development with DevOps Plugins

Why does it seem so hard to consistently deploy secure application infrastructure in the public cloud? Gartner predicts that by 2025, 99% of cloud security breaches will be the cus...

Mar 11, 2020

By Pradnesh Patil

Secure the Cloud

Uniting Dev and Sec Teams by Putting Security First

From product teams to architects to developers, “shift left” security is becoming more an integral part of everyday vocabulary. It is generally understood across technology departments that the old way of doing...

Aug 21, 2019

By Rick Collette

Secure the Cloud

4 Practical Steps for 'Shift Left' Security

Since the beginning of modern computing, security has largely been divorced from software development. Recent vulnerability research confirms this. Consider that over the past five years, out of all published v...

Jul 23, 2019

By Matthew Chiodi

Secure the Cloud

How Are You Tackling Cloud Compliance?

In the race to the cloud, I’ve noticed a disturbing trend. Daily, I speak to organizations that have moved production workloads over to cloud IaaS providers but haven’t yet addressed how they will manage, measure and report on regulatory compliance controls. Amid all th...

May 14, 2019

By John Martinez

Products and Services, Secure the Cloud

Focus on Security First, Before Coding the Next Feature Set

Before you start working on the next set of product features, I implore you to do a security assessment.

Feb 14, 2019

By Varun Badhwar

CIO/CISO, Cybersecurity, Points of View

CISOs Must Incorporate Regional Laws and Regulations into Cyber Strategy

Over the past decade, the role of the Chief Information Security Officer (CISO) has evolved to keep pace with today’s dynamic threat and regulatory en...

Jun 19, 2018

By Chad Berndtson

Load more blogs