"We bought a Zero Trust platform, so we're done." You hear it a lot, and it's a comfortable thing to believe. Reality: Zero Trust is an architecture and a way of making decisions, not a product. No tool can replace understanding what you're protecting and why each access decision gets made. CCZT builds that foundation: cloudsecurityalliance.org/ed…

Most teams treat compliance frameworks as separate projects: one for each audit, each with its own spreadsheet and its own scramble. The Cloud Controls Matrix is built to cut that duplication. 207 controls across 17 domains, vendor-neutral and free, so you can build your control set once and map it to what auditors and customers ask for. Less rework, clearer gaps. cloudsecurityalliance.org/re… #CloudSecurity

Candiru spyware reached Al Jazeera journalists' devices through ordinary ads. No clicks needed. Citizen Lab's research, covered in our note, found the ad server only sent exploit code to devices on a target list. Everyone else got a benign ad, so ad-scanning vendors saw nothing. At least 45 Al Jazeera devices were infected. For high-risk users, treat the ad supply chain as an attack path. labs.cloudsecurityalliance.o…

CISO Daily Briefing: CERT-In says AI agents reached Indian orgs via exposed credentials and over-permissioned cloud roles, undetected. Drupal patches two critical RCEs (SA-CORE-2026-014). NIST/NSA/CISA's ten AI-incident practices set no evidence-retention clock. BAE Systems' bankruptcy-notice outage has run since Oct 9; test continuity for outsourced functions. labs.cloudsecurityalliance.o…

Postmortem, agent edition: an agent refunds $40k to the wrong accounts. Security says it was an app issue. The app team says the model did it. The vendor points to the prompt. Legal asks who signed off on its scope. Four teams, zero owners, and the agent is still running. Incident response assumes someone owns the thing that broke. Autonomous systems blur that line. Defining it before the incident is governance work, and it's what CSAI Foundation is built for: csai.foundation/ #AgenticAI

Think of the last access permission someone in your organization was granted "temporarily." Is it still active? And if nobody can say who would notice, what does "least privilege" actually mean in your environment? CCZT is a good place to start looking for the answer: cloudsecurityalliance.org/ed… 🔐

Unpopular take: your system prompt is not a security control. "Never reveal customer data" is a request, not an enforcement. Anyone who can talk to the model can try to talk it out of that. Zero Trust for LLMs moves the boundary out of the prompt and into identity, authorization, and verification on every call the model makes. Start here: cloudsecurityalliance.org/re… #ZeroTrust

This npm malware has no postinstall script and no binding.gyp. Scanners that look for install hooks see nothing. MALFEX ships a prebuilt .node DLL instead. It runs when the module is first required, and only if stdout is an interactive Windows console, so CI runners and sandboxes never trigger it. Then it pulls encrypted shellcode from GitHub. Check new dependencies for prebuilt binaries, not just install scripts. labs.cloudsecurityalliance.o… #npm #SupplyChainSecurity

CISO Daily Briefing: BeyondTrust Remote Support zero-day (CVE-2026-102764, CVSS 9.3) was exploited ~6 weeks before the Oct 8 patch. PEERSTITCH, a memory-resident FortiOS implant, took credentials from 500+ FortiGates. EU AI Office draft enforcement rules let each investigative step restart a 5-year limitation clock; comments due Nov 9. 48% of European orgs maintain private forks while 94% use AI coding tools. labs.cloudsecurityalliance.o…

Zero Trust rests on a quiet assumption: once you verify who or what is asking, its behavior is predictable. A laptop runs the same apps. An employee has a role. An agent can decide to try something new on any given run. Least privilege and continuous verification still apply, but they now have to cover what an agent is doing, not only what it holds. That's the gap CSAI is working on. csai.foundation/ #ZeroTrust

Something I keep noticing: when a cloud incident gets discussed, the hardest part usually isn't the technical fix. It's that the security team, the cloud team, and the business are each using the same words to mean different things. A shared vocabulary does more than most people expect. CCSK is a solid place to build one: cloudsecurityalliance.org/ed…

An agent's memory gets seeded with one bad "fact" on Monday. By Friday, it's shaping decisions, tool calls, and what it tells other agents. No single component looked broken. The failure traveled across the system. That's the kind of threat MAESTRO is built to help you find before attackers do: threat modeling for agentic AI. cloudsecurityalliance.org/re… #AIsecurity

Attackers backdoored AOMEI Backupper users by editing one unsigned config file on the vendor's update server, for as little as 5 minutes at a time. The MD5 check sat in the same file as the download URL, so whoever controlled the file controlled both. Victims spanned 11 countries. If your vendors don't sign update manifests with asymmetric keys, ask them why. labs.cloudsecurityalliance.o… #SupplyChain

CISO Daily Briefing: One compromised ConnectWise Cloud Backup credential was used against 173 Microsoft 365 tenants; audit and revoke third-party app consent now. AOMEI update servers were tampered with in 5-10 minute windows, and a MALFEX npm package ships a compiled DLL addon. Embedded AI evaluators (METR at Anthropic) have no independence standards. Treat state-linked vendors, MSPs and backup tools as one exposure. labs.cloudsecurityalliance.o…

When microservices took over, we learned the hard way that every service passing its own tests didn't mean the system was safe. We built tracing, service meshes, and ownership models. Agent-to-agent chains are the same lesson, with reasoning inside every hop. Who traces a decision across five agents and three teams? CSAI is working on that cross-domain gap: csai.foundation/ #AgenticAI

Friday security confession: somewhere in your cloud account there's a resource named "test-final-v2-DONOTDELETE," and nobody on the team knows who created it or what it's connected to. Everyone just walks around it like a sleeping dog. Knowing what you own, and what the provider owns, is where cloud security starts. CCSK covers those fundamentals: cloudsecurityalliance.org/ed… 🙂

Your new cloud security hire asks, "Where do I start?" and the answer is a scattered folder of wikis, vendor docs, and tribal knowledge. Security Guidance v5 is the better starting point: one practitioner-built reference covering cloud security from architecture to operations. Hand it over on day one, and everyone builds from the same foundation. cloudsecurityalliance.org/re… #CloudSecurity

The alleged OpenAI office bug was a thumb-sized recorder in an executive conference room. It drew power from the TV's USB port and was hidden in toilet paper. It was found two days after it was reportedly planted. A second device turned up five days later in an unattended bag. OpenAI says no weights, code or customer data were touched. CSA's takeaway: treat physical and insider risk as part of AI security architecture, and ask providers about it in vendor assessments. labs.cloudsecurityalliance.o…

CISO Daily Briefing: Ivanti Connect Secure zero-day chain exploited since Oct 3, on CISA KEV; assume AD secrets exposed and rotate. Cisco Secure Email Gateway: second exploited root flaw in ~30 days. Next.js 16.4.1/15.5.28 fix two unauthenticated RCEs. UK AISI's eight voluntary frontier-AI priorities will shape vendor questionnaires. An OpenAI insider bugging arrest means asking model providers about physical and personnel security. labs.cloudsecurityalliance.o…

Scenario already playing out: your vendor swaps the model behind an API endpoint on a Tuesday. Same name, same contract, slightly different judgment. Your agent's tool calls still pass every test. Nobody notices the change until it approves something it used to flag. You can audit the tool call. Can you audit what's behind the decision? Securing agents means knowing where the model came from, and what changed. That's the work at csai.foundation/ #AIsecurity