Blog & Resources

CloudFence Blog & Resources

Insights, Strategies, and Stories from the Frontlines of Cloud Security

September 1, 2026

Your CPO Wants an Agent With Cloud Access. Now What?

A VP of Security faces the AI agent dilemma: enable cloud autonomy without losing control.

Why Traditional Egress Monitoring Breaks Down at Cloud Scale and What to Do Instead

No single perimeter. Hundreds of workloads. The only egress monitoring that scales in tis behavioral

Lessons from the Trivy Supply Chain Attack & CanisterWorm

Trivy was compromised to steal cloud credentials at scale. Three lessons for cloud security teams.

How to Detect C2 Traffic in AWS: A Practical Guide Using VPC Flow Logs and DNS

C2 traffic in AWS often hides inside ordinary outbound connections, making static rules...

Architecture vs. Reality: Why Your Cloud Doesn't Look the Way You Designed It

Architecture drift is a hidden cloud security risk where environments diverge from their original ..

The CISO Imperative: Why Egress Traffic Control is a Strategic Security Investment

Discover why cloud egress traffic monitoring is crucial for your security strategy

September 26, 2025

Own Your Cloud Egress Before Attackers Do

Egress traffic is one of the most least controlled paths in the cloud. Shift from Static Rules to ..

AWS Security Groups: From Liability to Defense

Enforce least privilege in AWS Security Groups through visibility, lockdown, and automation to......

Using VPC Flow logs to tighten Security Group Rules

Unlike traditional firewalls, security group rules do not come with a 'last used' timestamps or ....

Understanding TCP Flags in AWS VPC Flow Logs

In VPC Flow Logs, TCP flags are bit masks, meaning they can be combined to create unique numbers....