Explores where AI helps in pen testing, current limits, and how to integrate AI with human oversight, data controls, and governance.

CISA's AA26-251A should end the fiction that confidential model weights are enough to protect frontier capabilities. On September 8, 2026, the Cybersecurity and Infrastructure Security Agency, ...

Understanding the fees associated with STAR can help organizations plan their assurance investment and choose a path that aligns with their goals. This guide brings together pricing for STAR, STAR for ...

AI-enabled adversaries are compressing exploit timelines, multiplying attack capacity, and putting expert-grade capabilities within reach of lower-skilled attackers. Preparing for these threats ...

SEATTLE – June 12, 2025 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud ...

The report presents each security incident as both a detailed narrative and a threat model. This includes an attack-style synopsis with the relevant cloud security risks, CCM controls, and mitigations ...

To better understand the current state of the industry, Thales commissioned CSA to develop a survey and report. The report aims to illuminate current data security risk assessment practices and areas ...

This report provides case‌ ‌study‌ ‌analyses‌ ‌for‌ last year’s ‌ The‌ ‌Egregious‌ ‌11:‌ ‌Top‌ ‌Threats‌ ‌to‌ ‌Cloud‌ ‌Computing and a relative security industry breach analysis. Using nine actual ...

An IEEE standard for local and metropolitan area networks–Port-Based Network Access Control. IEEE 802 LANs are deployed in networks that convey or provide access to critical data, that support mission ...

This study and report provides practical, data-driven evidence that AI can significantly enhance SOC analyst performance. AI tools can reduce alert fatigue, improve investigative rigor, and deliver ...

The STAR Level 1: Security Questionnaire (CAIQ v4.1) is what individuals will need to use to submit to the STAR Registry, and includes all the necessary features of CAIQ v4.1. You can read more about ...