Blog

Joint PCI security and CSA guidance on scoping cloud environments

24.Aug.2021

Sergio Loureiro, Cloud Security Product Director

As organizations move their infrastructure to the cloud, payment data are being exposed unknowingly leading to high profile data breaches. Find out how the new guidance from PCI Security Standards Council (PCI SSC) and Cloud Security Alliance (CSA) can help protect your cardholder data in the cloud.

How to secure your cloud services with CSPM

09.Mar.2021

Sergio Loureiro, Cloud Security Product Director

As enterprises fast track cloud adoption plans without security considerations, we’ve seen the dangers of cloud misconfigurations and how it continues to cost millions in lost data and revenue for failure to comply. In this blog we’ll explain how to spot the telltale signs and secure your clouds with adequate Cloud Security Posture Management (CSPM).

Container inspection: walking the security tight rope for cloud DevOps

23.Sep.2020

Sergio Loureiro, Cloud&Container Security Product Director

Containers have become very popular with DevOps as a way to increase speed and agility. However, with recent reports of hackers utilizing vulnerabilities in Docker container images to compromise hosts and launch malicious containers – how can we identify this at the time of development to prevent security costing us later?

What are Security Misconfigurations and how to prevent them?

30.Jun.2020

Sergio Loureiro, Cloud Director

Misconfigurations are often seen as an easy target, as it can be easy to detect on misconfigured web servers, cloud and applications and then becomes exploitable, causing significant harm and leading to catastrophic data leakage issues for enterprises like the 2019 Teletext exposure of 530,000 data files which was caused by an insecurely configured Amazon Web Service (AWS) web server.

Cloud security controls: Where are we now and best practice for future gains

05.Feb.2020

Sergio Loureiro, Cloud Security Director

In 2020 the Cloud Security Alliance (CSA) is celebrating its 11th anniversary, however, is the security community any closer to getting to grips with Cloud Security, and the controls required to stay ahead of cybercriminals?

Top 10 Cloud security myths infographic

19.Sep.2019

Sergio Loureiro, Cloud Security Director

Check out our interactive infographic of the top 10 cloud security myths and common misconceptions.

Cloud security: an inconvenient truth about IT transformation

10.Sep.2019

By Sergio Loureiro, Product Manager Outpost24

While the idea of a Shared Responsibility Model is conceptually understood, organizations taking advantage of the transformative power of public cloud platforms continue to come short practically, of the implementation of basic security controls, giving hackers a one-way ticket to their critical assets and data.

Protecting what’s yours: data security in the cloud

13.May.2019

Davey Winder, security journalist

There can be no doubting that the cloud is no longer the future but rather the present for an ever-increasing number of organizations. Driven by factors such as digital transformation, operational efficiency, agility and cost savings, the cloud has proved to be something of a business no-brainer.

Cloud security tools: Understanding the differences between CASB, CSPM and CWPP

25.Apr.2019

Sergio Loureiro, Cloud Security Director

For the increasingly complex cloud migration across IaaS, PaaS and SaaS, Gartner came up with 3 different markets for cloud security assessment solutions, which leads to many questions about their differences and use cases to protect public cloud services.

Top 7 things to get right in hybrid Cloud security

19.Feb.2019

Sergio Loureiro, Cloud Security Director

Enterprises are moving faster to Cloud but legacy infrastructure will not disappear altogether. CISOs are often worried that hybrid infrastructures will double their work through having to support Cloud and legacy at the same time with a different set of skills and tools. However, it doesn’t have to be this way; get our list of 7 things to get right in hybrid Cloud security now!