RUNTIME CLOUD SECURITY IN 2025

Summary from the TLDR InfoSec newsletter

CNAPP has grown to include many tools, but most application-related tools were added later and lack comprehensiveness. Modern attacks like MoveIT are hard to detect, yet Cloud Application Detection and Response (CADR) shows promise in using application context to block such attacks early. No current solution fully realizes CADR's potential, but ARMo, Sweet, Upwind, Oligo, Operant, and Raven are the closest.