LogoCloud Security Newsletter
Authors
Login
Subscribe
LogoCloud Security Newsletter

Archive

Cloud Security Rundown: RSA Highlights, UK Retail Sector Under Siege, and Shadow AI Risks

May 8, 2025

•

13 min read

Cloud Security Rundown: RSA Highlights, UK Retail Sector Under Siege, and Shadow AI Risks

Discover key CyberSecurity insights from RSA Conference 2025, including AI-native security tools, runtime protection strategies, and emerging shadow AI risks. Plus, analysis of major UK retail cyberattacks and how cloud security teams should respond to these evolving threats.

Ashish Rajan
Ashish Rajan
Container Security: Building Fortified Foundations with Minimal Attack Surfaces + pre-RSA 2025

Apr 23, 2025

•

16 min read

Container Security: Building Fortified Foundations with Minimal Attack Surfaces + pre-RSA 2025

Discover how leading cloud security experts are revolutionizing container security by leveraging minimal images, immutable infrastructure, and developer-friendly tools. This week's newsletter reveals practical strategies to reduce attack surfaces, automate security controls, and implement the "shift down" philosophy for securing containerized workloads at scale.

Ashish Rajan
Ashish Rajan
CVE Program Saved, 1200 AWS Access Key Compromised,  & Mastering Cloud Incident Response

Apr 16, 2025

•

12 min read

CVE Program Saved, 1200 AWS Access Key Compromised, & Mastering Cloud Incident Response

This week, we focus on MITRE's CVE program gets last-minute funding extension, Major AWS S3 ransomware campaign uses stolen credentials and expert strategies for effective multi-cloud incident response from Fortune 500 security leaders.

Ashish Rajan
Ashish Rajan
Attacker Stealth Tactics in Azure and Ransomware still Threatening Organizations

Apr 10, 2025

•

14 min read

Attacker Stealth Tactics in Azure and Ransomware still Threatening Organizations

This week we uncover Azure security blindspots in our latest newsletter featuring experts Christian Philipov (WithSecure) and Katie Knowles (Datadog). Learn how attackers exploit Azure's limited read-event logging for stealthy reconnaissance, plus practical defenses using conditional access policies and Resource Graph Explorer. Also covers breaking news on Microsoft's ransomware-related zero-day patch, pension fund breaches, and critical SAP vulnerabilities. Essential insights for cloud security professionals defending Azure environments.

Ashish Rajan
Ashish Rajan
Google Cloud Run ImageRunner Vulnerability & Tackling Kubernetes Network Security Across Multiple Cloud Providers

Apr 2, 2025

•

14 min read

Google Cloud Run ImageRunner Vulnerability & Tackling Kubernetes Network Security Across Multiple Cloud Providers

This week we examine recently discovered vulnerabilities in GCP Cloud Run, AWS S3, and Azure VM deployment, alongside expert insights from Confluent's Kubernetes team on implementing Cilium across multiple clouds. Learn how cloud-specific networking challenges can be overcome while enhancing security posture through eBPF-powered protection, with practical guidance for security professionals managing containerized workloads.

Ashish Rajan
Ashish Rajan
Kubernetes Nightmare of Vulnerabilities & Building Detection Engineering Excellence

Mar 26, 2025

•

14 min read

Kubernetes Nightmare of Vulnerabilities & Building Detection Engineering Excellence

Critical Kubernetes vulnerabilities (CVSS score 9.8 🫣 ) threaten thousands of clusters while detection engineering practices gain importance as more vulnerabilities continue to get announced. Learn how to protect your environment from IngressNightmare CVEs and implement Detection as code strategies from Google Cloud's security experts.

Ashish Rajan
Ashish Rajan
24hrs into Google's $32B Acquisition of Wiz - What It Means for Cloud Security

Mar 19, 2025

•

15 min read

24hrs into Google's $32B Acquisition of Wiz - What It Means for Cloud Security

Google's $32B acquisition of Wiz reshapes cloud security landscape. Leading experts analyze implications for multi-cloud strategies, vendor lock-in concerns, and the evolution of CSPM/CNAPP to runtime security. Essential insights for CISOs and security teams navigating this industry-transforming deal.

Ashish Rajan
Ashish Rajan
Securing AI Applications in Cloud: What are We Really Securing?

Mar 12, 2025

•

12 min read

Securing AI Applications in Cloud: What are We Really Securing?

As organizations increasingly integrate AI into their cloud environments, security teams face a new challenge: securing AI-driven applications while ensuring innovation isn't stifled. But what does securing AI really mean? Is it about securing the cloud infrastructure running AI workloads, the AI models themselves, or the applications utilizing AI? This week, we explore AI Bill of Materials (AIBOM), shadow AI risks, and 4 Steps you can take to Secure your AI systems without blocking innovation.

Ashish Rajan
Ashish Rajan
Why AWS Anti-Patterns Might Be Your Next Cloud Security Superpower!

Mar 6, 2025

•

14 min read

Why AWS Anti-Patterns Might Be Your Next Cloud Security Superpower!

Are Anti-Patterns the New Best Practices in AWS Cloud Network Security? Explore how AWS anti-patterns like centralized VPC endpoints and flipped NAT setups can boost cloud security. Experts Jack Harter, Kyler Middleton, Meg Ashby, and Brian McHenry share insights on bending vendor rules for compliance, cost, and prevention in this week’s Cloud Security Newsletter.

Ashish Rajan
Ashish Rajan
2025 Guide to Cloud Pentesting: AWS & Azure Edition

Feb 26, 2025

•

16 min read

2025 Guide to Cloud Pentesting: AWS & Azure Edition

Cloud penetration testing has evolved beyond simple configuration reviews to comprehensive security assessments. Our experts Nick Jones (WithSecure), Karl Fosaaen (NetSPI), and Seth Art (Datadog) share insights on the critical differences between web application and cloud pentesting, the central role of identity in cloud security, and common attack vectors. Learn why cloud-specific expertise matters when selecting pentesting partners, how to scope engagements effectively based on account and service complexity, and practical considerations for collaborative pentesting.

Ashish Rajan
Ashish Rajan
Microsoft Azure Security: From Incident Response to Proactive Defense

Feb 19, 2025

•

14 min read

Microsoft Azure Security: From Incident Response to Proactive Defense

Whether you're managing a hybrid environment, responding to incidents, or building security controls, understanding Azure's distinct security model is crucial for effective cloud security. This issue contains practical insights on navigating the complexities of Azure identity, implementing proactive security measures, and building effective incident response capabilities.

Ashish Rajan
Ashish Rajan
Netflix's Identity First - AWS Cloud Security Evolution!

Feb 12, 2025

•

10 min read

Netflix's Identity First - AWS Cloud Security Evolution!

How Netflix Scaled AWS Security by breaking Traditional Account Boundaries & starting with Identity instead of Infrastructure. Netflix's Bold Take on re-thinking AWS Multi-Account Security at Scale beyond Least Privilege using identity isolation allowed them to be developer friendly at their scale.

Ashish Rajan
Ashish Rajan
1...567891011
Cloud Security Newsletter

Cloud Security Newsletter

Bringing you relevant Cloud Security News, Interviews & Expert Knowledge so you don’t have to spend hours looking for it.


Home

Posts

Authors

© 2026 Cloud Security Newsletter.
beehiivPowered by beehiiv