cloud-security
Safeguard articles tagged "cloud-security" — guides, analysis, and best practices for software supply chain and application security.
321 articles
Cloud Cyber Security: The Fundamentals Teams Skip
The cloud cyber security fundamentals teams reliably skip — identity sprawl, misconfigured storage, and compliance standards treated as a checkbox instead of a control.
AWS Breach: How They Actually Happen and How to Prevent One
Most AWS breaches are not AWS failing — they are misconfiguration, leaked keys, and over-privileged roles. Here is how the real ones unfolded and how to stop yours.
Container registries explained: Docker Hub vs private/ent...
Docker Hub vs. private/enterprise registries explained, with a look at where JFrog Artifactory fits — and why registry choice alone doesn't solve supply chain security.
Why Cloud Security Ownership Keeps Falling Into the Gap B...
Misconfigurations sit unpatched for months because three teams each assume someone else owns them. Here's why the cloud security ownership gap keeps widening.
IaC Drift: The Gap Between Declared and Actual Cloud Conf...
IaC drift lets your cloud diverge silently from Terraform state, breaking the compliance guarantees teams assume are still true. Here's how it happens and how to catch it.
Startups vs Enterprises: Why Smaller Cloud Footprints Are...
Smaller cloud footprints feel safer, but startups often face a higher per-workload security incident rate than enterprises. Here's why size is the wrong safety proxy.
Cloud-to-Code Traceability: Connecting Production Inciden...
When a production alert fires, it names an IP or image hash—rarely a commit or author. Here's why that gap exists and how to close it fast.
The Acquisition Pattern Behind AppSec's Runtime Visibilit...
From Cider Security to the $32B Google-Wiz deal, AppSec acquirers keep paying for one thing: runtime visibility into what code actually does in production.
Why Hyperscaler Partnerships Are Becoming Table Stakes fo...
Google's ~$32B Wiz deal signaled it: hyperscaler marketplaces, partner programs, and native tooling now shape how AppSec buying actually happens.
Microsoft's durabletask PyPI Package Compromised (19 May 2026): A Linux Wiper and Multi-Cloud Credential Theft
On 19 May 2026, three malicious versions of Microsoft's durabletask PyPI package were uploaded in a 35-minute window. The payload steals AWS, Azure, GCP, and Kubernetes credentials in under four seconds and ships a locale-gated rm -rf wiper.
IaC Scanning: Catching Cloud Misconfigurations Before Deploy
An IaC scan checks your Terraform, CloudFormation, and Kubernetes files for insecure defaults before they become running infrastructure. Here's how it works and how to wire it into CI.
Kubernetes Security Breaches: What Actually Happened in Real Incidents
Real Kubernetes security breaches rarely start with an exotic zero-day — exposed dashboards, misconfigured RBAC, and default credentials show up again and again.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.