NSA ranked cloud security risks; Nuage CEO said SD-WAN is multi-faceted; and TPx tapped Cisco Meraki SD-WAN.

Misconfiguration, a widespread threat that requires a low level of sophistication, tops the list.

Looking ahead to 2020, “our top priority is becoming the unquestioned leader" in cloud-based network detection and response, CEO Arif Kareem said.

“If they hired Peter Leav they are setting up to sell,” said analyst Zeus Kerravala.

Palo Alto Networks and Google Cloud pledged to jointly develop a new multi-cloud security framework.

The new container security technology allows customers to apply consistent security policies across all cloud IaaS workloads, McAfee says.

Google buys CloudSimple, challenges VMware Cloud on AWS; Palo Alto Networks announced plans to acquire Aporeto; plus the latest VC/M&A news from November.

The legacy network and endpoint security vendor acquired key pieces of cloud-native technology used in its Cloud Optix security platform when it bought Avid Secure.

McAfee also teased a yet-to-be-released microsegmentation technology to secure contianer runtimes called NanoSegmentation.

The integration will permit Fortinet-managed rulesets for AWS Web Application Firewall (AWS WAF).

Cisco's new integrations are aimed at helping campus, branch, and data center customers secure, automate, and manage their AWS connections.

This includes a new External Key Manager, which allows companies to store and manage encryption keys outside of Google Cloud

Cloud security posture management includes processes and tools to avoid cloud misconfigurations that can lead to data leakage.

The new security tool follows a slew of product upgrades and acquisitions as Google tries to wrestle cloud market share from Amazon Web Services and Microsoft Azure.

It’s part of the vendor’s disaggregated cloud security infrastructure build out.

Its new analytics tool aims to bridge McAfee’s legacy endpoint security business with its newer cloud portfolio.

As enterprises increase their usage of serverless functions, companies must understand serverless security threats and how to mitigate them.

Oracle updated its security portfolio with three new cloud services that focus on automation and eliminating cloud misconfigurations.

Application security is changing the role of virtual administrators and expanding their job responsibilities as silos between InfoSec and the rest of the enterprise begin to converge.

Scooping up a container-focused security startup is a smart move for McAfee, which has been working to bolster its enterprise cloud security business during the past few years.

“The foundational security of the cloud providers was less of a concern, and we saw more concerns over issues that [enterprises] have control over,” said CSA’s John Yeoh.

Context-aware access allows companies to enforce access policies based on a user’s identity and the “context” of their request, such as users’ location, time of day that they are

It also added new scenario-based challenges with bounties up to $300,000 for specific challenges in Azure Security Lab and said it will offer $2 million in rewards this year

This year Netskope will deploy more than 50 points of presence across the globe supporting hundreds of millions of concurrent connections.