Cloud SecurityLatest
GCP Workload Identity Federation: GitHub Actions and GitLab Setup
A practical guide to replacing GCP service-account keys with Workload Identity Federation across GitHub Actions, GitLab, AWS, and Azure.
16 min read
Read articleTopic
GCP
Every article tagged GCP, newest first.
19 articles
Articles tagged GCP
Stop Using Service Account Keys: A Guide to Workload Identity Federation
Leaked service account keys are a top cloud security risk. This definitive developer's guide explains how to go keyless with GCP's Workload Identity Federation.
14 min read
The GCP Connectivity Triad: Decoding PSA, PSC, and PGA
Confused by GCP's networking alphabet soup? We demystify PSA, PSC, and PGA. Learn the differences, use cases, and when to use which for secure cloud architecture.
12 min read
The WAF Showdown: Google Cloud Armor vs. Cloudflare (FEB 2026 Edition)
Cloudflare or Google Cloud Armor? The ultimate WAF showdown for 2026. We compare architecture (Proxy vs. Native), pricing, Adaptive Protection, and latency to help you decide.
7 min read
How to Build a Secure AI Platform on Google Cloud: SAIF Step-by-Step Guide (3/3)
Part 3 of the SAIF series. A deep dive into a reference architecture for a production-grade AI platform on Google Cloud, mapping controls to real-world defenses.
10 min read
The Essential Google Cloud & SAIF AI Launch Checklist for 2026 Success (2/3)
Start your AI project securely with this definitive 'Day 0' checklist based on Google's Secure AI Framework (SAIF). Covers identity, data, network, and model controls for creators and consumers.
10 min read
The Key Principles of Google SAIF Framework (1/3)
Discover the core principles of Google's Secure AI Framework (SAIF). Learn how this holistic, lifecycle-aware blueprint helps organizations build secure-by-design AI systems and combat novel threats like prompt injection and data poisoning.
11 min read
Your Cloud Won't Be Encrypted, It Will Be Deleted: Surviving Cloud Ransomware
Cloud ransomware is here, and it targets your control plane, not just your files. This CISO's guide explains the new threat and a cloud-native strategy to survive it.
9 min read
Securing Remote MCP Servers with Google Cloud
Secure remote MCP servers on Google Cloud using a defense-in-depth architecture with IAP, Cloud Armor, and IAM.
8 min read
GCP Security Solution to the Top 11 Cloud Vulnerabilities
A practical CISO's guide to defeating the top 11 cloud vulnerabilities using Google Cloud's security arsenal. Map threats to specific GCP tools for a robust defense-in-depth strategy.
8 min read
GCP Defense-in-Depth: IAM Deny & Org Policies
Transform your GCP security with IAM Deny and Organization Policies. This CISO's guide to defense-in-depth shows how to build unbreakable guardrails and simplify cloud security.
8 min read
A Practical Blueprint for Zero Trust on GCP
The perimeter is dead. Discover the ultimate blueprint for implementing a Zero Trust security model on Google Cloud Platform (GCP). A CISO's guide to modern security.
9 min read
We Replaced Our Boring ISSP with a GCP AI Agent
How we transformed our dense Information System Security Policy (ISSP) into an interactive GCP AI agent, improving employee adoption and reducing security risks.
6 min read
Audit Manager: Google Cloud New Controls Feature
Audit smarter: Introducing Google Cloud's Recommended AI Controls Framework. Automate compliance and secure your generative AI workloads with evidence-based controls.
5 min read
Unlocking the Kingdom: A CISO's Guide to GCP IAM Privilege Escalation
A CISO's guide to GCP IAM privilege escalation. Uncover common attack vectors, understand misconfigurations, and learn critical mitigation strategies to secure your Google Cloud environment.
11 min read
Navigating the Storm: Unmasking Critical Cloud Security Risks in 2025
Unveiling critical cloud security risks for 2025: Exposed data, insecure secrets, AI vulnerabilities, and 'toxic trilogies' loom. Your essential guide to mitigation.
10 min read
Securing AI in Multi-Cloud
Master AI multi-cloud security. Gain visibility, manage risks, and implement behavioral threat detection. Your expert guide to securing AI across diverse cloud platforms.
10 min read
Google Cloud Bridges SSE and Cloud WAN with New NCC Gateway
Google Cloud introduces NCC Gateway, integrating third-party SSE solutions with Cloud WAN for unified, high-performance secure access for hybrid workforces.
5 min read
ImageRunner Vulnerability: Privilege Escalation in GCP Cloud Run
Explore the ImageRunner vulnerability: A patched GCP Cloud Run privilege escalation flaw. See how IAM permissions allowed unauthorized image access via service agents.
9 min read