Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

ARMO vs. Wiz: Bridging the Gap in Cloud Runtime Security

The recent news about Google’s multi-billion-dollar acquisition of Wiz has sparked widespread conversation across the cybersecurity world. Its price tag reflects its strong reputation, Wiz is a leader in Cloud Security Posture Management (CSPM) solution. Its strength lies in identifying potential risks before they impact your live environment.

And The Cloud Goes Wild: Looking at Vulnerabilities in Cloud Assets

We admit it – we’ve had our heads in the clouds recently. Since we started working with Wiz as one of their integration partners, we’ve been spending even more time thinking about cloud assets. And these assets are everywhere! Gartner predicts double digit growth across all cloud segments in 2025.

Connect, protect and build digital environments with real business results

Don’t let network complexity hold back your app modernization, AI adoption, and other digital projects. Cloudflare’s connectivity cloud is a unified platform that enhances how you connect, protect and build your digital environment. See how you can get secure, low-latency, and infinitely scalable connectivity across networks, applications, and users.

A Complete Guide to Fintech Cloud Security

With the pace of growth in financial services accelerating, fintech is, in real terms, the new normal, not the new disruptor. Cloud technology has fueled this revolution, equipping companies with tools that can be scaled quickly in response to customer demands and market needs, and enabling cost savings that can be passed on to these customers.

Cloud your way: Expanding threat visibility to meet the unique needs of your business

Let’s face it: The cloud has become the go-to platform for modern infrastructure—and for good reason. Scalability, flexibility, and speed are hard to beat. But as organizations increasingly rely on the cloud to run their critical operations, the threat landscape is evolving just as fast. And attackers? They’re getting smarter, stealthier, and more cloud-savvy by the day. That’s why monitoring cloud network traffic is no longer optional—it’s essential.

How to Set Up AWS Traffic Mirroring for Astra API Monitoring | Full Step-by-Step Guide

This tutorial provides a complete walkthrough for setting up AWS VPC Traffic Mirroring to enable packet-level monitoring with Astra’s API Security platform. You'll learn how to configure a scalable and production-ready environment using Network Load Balancers, Nitro-based EC2 instances, and properly filtered traffic sessions. The guide includes: It also covers key assumptions, unsupported configurations (like classic/Xen instances), and best practices for a secure and efficient deployment.

How to Set Up Astra Traffic Collector in a Linux VM | Complete Installation & Troubleshooting Guide

This tutorial provides a complete guide to deploying Astra Traffic Collector inside a Linux-based VM across cloud platforms like AWS, GCP, Azure, or DigitalOcean. It includes all necessary installation steps and configuration best practices for traffic monitoring in VM environments. In this video, we cover: This guide is designed for DevOps, security engineers, or platform teams looking to integrate deep traffic visibility into their environments with minimal overhead.

How the April 28, 2025, power outage in Portugal and Spain impacted Internet traffic and connectivity

A massive power outage struck significant portions of Portugal and Spain at 10:34 UTC on April 28, grinding transportation to a halt, shutting retail businesses, and otherwise disrupting everyday activities and services. Parts of France were also reportedly impacted by the power outage.

Targeted by 20.5 million DDoS attacks, up 358% year-over-year: Cloudflare's 2025 Q1 DDoS Threat Report

Welcome to the 21st edition of the Cloudflare DDoS Threat Report. Published quarterly, this report offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. In this edition, we focus on the first quarter of 2025.

Sunil Pai about Agents, AI, and New Developers

Clip of the show/podcast with Sunil Pai. About exploring AI, agents, developers, and how AI is helping developers, and turning more people into developers. Sunil is the founder of PartyKit (an open source deployment platform for AI agents), acquired by Cloudflare in 2024. And he’s a Principal Systems Engineer that is building AI agents at Cloudflare.

Opti9 Technologies Achieves AWS Premier Tier Status

Opti9 Technologies, a leading managed services provider specializing in cloud, security, and application modernization, recently announced that it has achieved Amazon Web Services (AWS) Premier tier in the AWS Partner Network (APN). Achieving AWS Premier Tier Services Partner status distinguishes Opti9 as a proven leader in designing, architecting, migrating, and managing workloads on Amazon Web Services (AWS), demonstrating deep expertise and a strong track record of customer success.

Secrets are Dead: Why Machine and Workload Identities are the Future of Cloud Security

Static secrets like API keys, tokens, and passwords have become a major security liability in modern cloud environments. These credentials introduce significant security risks, are difficult to manage at scale, and create compliance headaches. The future of cloud security lies in dynamic, cryptographic machine and workload identities, eliminating static secrets and enforcing zero-trust authentication across your infrastructure.

5 Elements for a Robust Security Strategy GovLoop and Anish Patel

Agencies are tasked with protecting their networks from cyberattacks, but there is no longer a perimeter that makes it easier to defend. Instead agencies need to rethink how they secure every device connecting to an agency network. Considering the number of connected devices — hundreds of thousands — it's best to ensure sound security. Specifically, you’ll learn.

Protecting Public Sector Websites and the critical systems behind them: link to the hosted On-Demand

Your agency’s website is more than just a landing page—it’s where constituents find information, apply for services, and engage with their government. It’s your digital front door. But security doesn’t stop at the homepage. Behind every online form, data portal, and public-facing interface, there’s a complex infrastructure that needs just as much protection.

Understanding AWS Cloud Security

When Amazon Web Services (AWS) initially launched in 2006, it offered the first compute, storage, and database cloud service that developers could build on. Over time, AWS became a fundamental cloud service provider as organizations started migrating to the cloud. As one of the three primary cloud services providers, AWS remains integral to most businesses.

LimaCharlie 101: Getting Started with the SecOps Cloud Platform

In this blog post we'll walk you through the essential steps of getting started with LimaCharlie's SecOps Cloud Platform. This guide is designed for technical security professionals who want to leverage LimaCharlie's capabilities to enhance their organization's security posture. By the end of this guide you will have configured your organization in LimaCharlie, deployed sensors, and enabled detection and response rules.

The Hidden Risk in Your Cloud: And What to Do About It

It's easy to assume everything in the cloud is sorted. Files get saved, apps sync across devices, permissions exist. And on paper, that sounds tidy enough. But in practice? Data goes wandering. A spreadsheet ends up in the wrong folder. A document shared with the wrong person stays shared. A test environment is spun up, used once, then forgotten. Nobody deletes it, of course. Nobody remembers it, either.

CrowdStrike Falcon Cloud Security Adds Detections for AWS IAM Identity Center

CrowdStrike Falcon Cloud Security now delivers real-time detections for AWS IAM Identity Center, helping organizations detect and respond to identity-driven cloud threats before they escalate. A few months ago, we released CrowdStrike Falcon Identity Protection support for AWS IAM Identity Center to help organizations detect and stop identity-based attacks before they could reach the cloud control plane.

Falcon Cloud Security - AWS IAM Identity Center Detections

CrowdStrike Falcon Cloud Security can automatically identify IAM Identity Center user risks, such as use of stale user accounts, suspicious web-based activity and address them before attackers strike. Subscribe and Stay Updated: ► Don't miss out on more exciting content! Subscribe to our channel for the latest updates, case studies, and more from the world of cybersecurity. Hit the bell icon to receive notifications whenever we post new videos.

SOAR on Azure Now Available

The market-leading momentum of our partnership and ongoing engineering roadmap with Microsoft continues! Splunk Security Orchestration, Automation and Response (SOAR) is now available as a native SaaS solution on Azure, enabling customers to even further improve their security posture and create greater digital resilience. Splunk SOAR on Azure acts as the efficiency engine for SOC analysts by connecting Azure services and third-party tools, automating workflows and tasks, and speeding response times.

Reduce Server Failures with Cloudflare Load Balancing

Want a faster, more reliable website? Learn how Cloudflare’s Load Balancing ensures optimal performance by distributing traffic across multiple servers worldwide. Discover how Global Server Load Balancing (GSLB) minimizes downtime and reduces latency by routing users to the nearest, healthiest server.

CIEM and Secure Cloud Access: Best Practices From Wiz and CyberArk

Let’s cut the fluff out of cloud security. As you build and innovate in the cloud, you create a maze of roles, permissions and resources that you must secure thoughtfully. The dirty secret is that as organizations launch and build new infrastructure, they also create a labyrinth of permissions that attackers can exploit if they get their hands on a valid password or credential.

Introducing a new Application Security experience

Welcome to Cloudflare Security Week 2025! During this year's Security Week, we are boosting security with AI-driven insights, better threat detection, and stronger protections against emerging risks. Our aim is to empower customers with more intuitive and user-friendly solutions to protect their data and applications in an increasingly complex environment. In this episode, tune in for a conversation with Cloudflare's Jessica Tarasoff, Product Design Lead, and Pete Thomas, Senior Manager, Product Design.

Managing sensitive data exposure in AWS and GCP using Cloudflare

Welcome to Cloudflare Security Week 2025! During this year's Security Week, we are boosting security with AI-driven insights, better threat detection, and stronger protections against emerging risks. Our aim is to empower customers with more intuitive and user-friendly solutions to protect their data and applications in an increasingly complex environment. In this episode, tune in for a conversation with Cloudflare's Alex Dunbrack, Senior Product Manager, and Noelle Kagan, Senior Manager, Product Management.

Enhanced Cloudflare Access: private hostnames, IP apps, and reusable policies

Welcome to Cloudflare Security Week 2025! During this year's Security Week, we are boosting security with AI-driven insights, better threat detection, and stronger protections against emerging risks. Our aim is to empower customers with more intuitive and user-friendly solutions to protect their data and applications in an increasingly complex environment. In this episode, tune in for a conversation with Cloudflare's Kenny Johnson, Principal Product Manager.

Essential Components of a Cloud Runtime Protection Strategy

Securing cloud environments at runtime is no easy feat. Unlike traditional infrastructure, cloud workloads are dynamic, ephemeral, and often span multiple platforms — making continuous visibility a moving target. Adversaries continue to set their sights on cloud: According to the CrowdStrike 2025 Global Threat Report, new and unattributed cloud intrusions were up 26% year-over-year in 2024, indicating more threat actors seek to exploit cloud services.

AI-driven CSPM: How GenAI will transform Cloud security posture management

Generative AI (GenAI) is poised to revolutionize the cloud security posture management (CSPM) space, bringing intelligence, automation, and context to increase the effectiveness of managing cloud risk. Maintaining a robust security posture in the cloud can be challenging as the number of deployed cloud services increases across diverse clouds. Soon, AI-driven CSPM will play a critical role in helping security and cloud teams to keep pace with misconfigurations and compliance gaps.

Solving Tool Sprawl: Consolidating Your Security Stack with the SecOps Cloud Platform

Your security team is drowning in alerts from dozens of disconnected tools. Analysts toggle between 15 different dashboards and browser tabs while critical threats slip through the cracks. Sound familiar? With organizations using an average of 60 to 75 security tools, it's becoming increasingly difficult for analysts to effectively monitor and respond to threats.

Identify risky behavior in cloud environments

Risk assessment requires context. One of the primary challenges with protecting cloud environments is understanding how certain activity can lead to risk. Risky behavior can be categorized as any activity or action that increases the likelihood of an attack in your cloud environment. While certain activity may not be malicious on its own, it can expand an environment’s attack surface or indicate post-compromise behavior.

All About Cloudflare's Developer Week 2025 (AI, Vibe Coding, Agents, and More)

This episode is all about our second innovation week of the year: Developer Week. Host João Tomé is joined in person at Cloudflare’s London office by Ricky Robinett, VP of Developer Relations, and Craig Dennis, Developer Educator. There’s a lot to go through — new tools and announcements launched during this April week. The vibe in the developer world, with AI, agents, and code-first energy, is contagious. More people, even non-developers, are now empowered to build their own tools and applications.

5 mindset shifts security teams must adopt to master multi-cloud security

Level Up Your Security Game: Time for a Mindset Reset! Hey everyone, and welcome! If you're involved in keeping your organization safe online these days, you're in the right place. For years, security felt like building a super strong castle with thick walls and a deep moat, hoping the bad guys would just stay outside. But let's be real, in our multi-cloud world, that castle is starting to look a little... outdated. Think about it: your apps and data aren't neatly tucked away in one place anymore.

A global virtual private cloud for building secure cross-cloud apps on Cloudflare Workers

Today, we’re sharing a preview of a new feature that makes it easier to build cross-cloud apps: Workers VPC. Workers VPC is our take on the traditional virtual private cloud (VPC), modernized for a network and compute that isn’t tied to a single cloud region. And we’re complementing it with Workers VPC Private Links to make building across clouds easier.

How Cloud-Native Security Makes XDR More Powerful in 2025

As businesses move to the cloud, security approaches need to move at the same pace. By 2023, 70% of workloads will be running in cloud environments—but traditional defenses lag behind. With an average of 1,427 cloud services in use and cloud security expenditures projected to explode past $48.9 billion by 2026, the risks have never been greater. Extended Detection and Response (XDR) is stepping up as an unstoppable force, particularly when being driven by cloud-native architecture.

How to Migrate Microsoft 365 Backups from a SaaS Repository to Cloud

Explore how to migrate Microsoft 365 backups from a SaaS repository to a cloud repository using NAKIVO Backup & Replication. Migrating backups from a SaaS repository to the cloud can help you enhance data reliability and recoverability, optimize costs and benefit from additional storage flexibility.

Say Goodbye to SaaS Security Gaps with Cato CASB

As organizations increasingly depend on SaaS applications, IT teams struggle with visibility and governance. Shadow IT, unmanaged devices, and limited monitoring capabilities create blind spots, exposing enterprises to compliance violations, data exfiltration, and insider threats. Risks don’t come only from unsanctioned applications: even widely used SaaS platforms can become a security liability when not properly controlled.

Introducing Cloudflare Secrets Store (Beta): secure your secrets, simplify your workflow

Every cloud platform needs a secure way to store API tokens, keys, and credentials — welcome, Cloudflare Secrets Store! Today, we are very excited to announce and launch Secrets Store in beta. We built Cloudflare Secrets Store to help our customers centralize management, improve security, and restrict access to sensitive values on the Cloudflare platform.

Egnyte on AWS Marketplace: Improve Your Procurement Efficiency

Starting today, Egnyte is available through the AWS Marketplace! Our partnership with AWS makes it easier to streamline procurement processes and maximize your technology investments. Read on to discover how our collaboration with AWS simplifies the integration of Egnyte into your existing tech stack, helping you unlock more value from your investment.

CrowdStrike Wins Google Cloud Security Partner of the Year Award, Advances Cloud Security for Joint Customers

CrowdStrike has won the 2025 Google Cloud Security Partner of the Year Award for Workload Security, recognizing our leadership in securing cloud environments at scale. Announced at Google Cloud Next 2025, the award highlights our commitment to joint innovation and delivering best-in-class protection for Google Cloud customers. As part of this growing partnership, we also introduced new CrowdStrike Falcon Cloud Security enhancements purpose-built for Google Cloud environments.

Key Technologies Driving Industry 4.0 Adoption

Welcome to the future-where factories think, robots collaborate, and supply chains practically run themselves. Industry 4.0 isn't just a buzzword; it's the dawn of a new era in manufacturing and beyond. From AI-powered automation to hyperconnected industrial ecosystems, businesses embrace cutting-edge technologies to stay ahead of the curve. At the forefront of this revolution are artificial intelligence solutions for factories, which are transforming traditional operations into intelligent, self-optimizing systems. But what's driving this revolution?

Next-Gen Container Security: Why Cloud Context Matters

Container security has experienced significant transformation over the past decade. From the emergence of foundational tools like Docker to the maturation of orchestration platforms such as Kubernetes, the container security landscape looks different than it did even a few years ago. With Gartner predicting 95% of organizations will be running containerized applications in production by 2028, it’s clear that container security is going to be a key priority for most organizations moving forward.

Monitor Azure data protection services with Datadog

Azure Backup Vault, Azure Recovery Services Vault, and Azure Site Recovery make up Microsoft’s core suite of data protection and disaster recovery services. Azure’s vaults enable customers to store backups of entire Azure VMs, on-premise workloads, and workloads from Azure services such as Azure SQL Database, Azure Blob, and Azure Database for PostgreSQL. Azure Site Recovery integrates with Azure Recovery Services Vault to extend its backup services to support disaster recovery.

AI-powered attacks are getting more sophisticated.

AI-powered attacks are getting more sophisticated. However, AI-powered defense is evolving even faster. At Cloudflare, AI is already detecting and stopping threats faster than human researchers ever could. How? Machine learning models analyze millions of attack patterns in real-time, identifying anomalies and blocking threats before they spread. AI detects novel attack patterns before they even make headlines AI reduces false positives, helping security teams focus on real risks AI learns from past incidents, adapting faster than traditional security tools.

Cloudflare acquires Outerbase to expand database and agent developer experience capabilities

I’m thrilled to share that Cloudflare has acquired Outerbase. This is such an amazing opportunity for us, and I want to explain how we got here, what we’ve built so far, and why we are so excited about becoming part of the Cloudflare team.

RBAC in ManageEngine CloudSpend: Empowering teams with secure access

Let’s think about a scenario where an IT operations team needs to track cost anomalies but does not require access to budget configurations or administrative settings. They have to go through the ticketing process to get sufficient access. Managing access to cost data and ensuring the right stakeholders have the appropriate permissions becomes a challenge.

Cloudflare's commitment to CISA Secure-By-Design pledge: delivering new kernels, faster

As cyber threats continue to exploit systemic vulnerabilities in widely used technologies, the United States Cybersecurity and Infrastructure Agency (CISA) produced best practices for the technology industry with their Secure-by-Design pledge. Cloudflare proudly signed this pledge on May 8, 2024, reinforcing our commitment to creating resilient systems where security is not just a feature, but a foundational principle.

Master SaaS Security: Unifying Visibility & Control with Cato CASB

Shadow IT. Data leaks. Compliance violations. If your users are accessing cloud apps from unmanaged devices or outside sanctioned workflows, would you even know? In this video, we introduce Cato CASB (Cloud Access Security Broker), a native capability of the Cato SASE Cloud platform. Watch how Cato CASB provides deep real-time visibility into SaaS usage—both sanctioned and unsanctioned—so security teams can detect risky behavior, enforce access policies, and prevent data loss.

Learn more about building with Cloudflare - with Craig Dennis

As part of our "This Week in NET" show/podcast, Craig Dennis, Developer Educator at Cloudflare, walks us through Workers — our developer platform — and some of the things both developers and non-developers can build with it. A few highlights ahead of Developer Week (April 7–11, 2025), where new features and tools — including AI and AI agents — will be announced.

Does Cloud Backup Protect Against Ransomware?

As of 2024, 75 active ransomware groups targeted healthcare industries, businesses, and individuals with the aim of threatening these individuals with data loss or leaks in return for large payouts to decrypt this data. Many security organizations and cybersecurity experts are fighting to prevent ransomware from becoming common. One question on the minds of many people related to this topic is: Does cloud backup protect against ransomware?

Honoring Dave Täht and his contributions to a better Internet (video calls included)

Dave Täht died this week (August 11, 1965 – April 1, 2025), and Tom Strickx, Principal Network Engineer at Cloudflare, honors his contributions to help build a better Internet. Dave Täht was an American network engineer, musician, lecturer, asteroid exploration advocate, and Internet activist. Without his work, FQ-CoDel wouldn't exist — and low-latency networking, from Wi-Fi to Starlink and video calls, would likely be worse today.

Sysdig and Camptocamp announce partnership for strong cloud security based on open source

The cloud has become the hub of modern data traffic. It offers organizations of all sizes unprecedented speed, flexibility, and countless collaboration options. However, cybercriminals also know how to exploit the power of the cloud for their own purposes, which is why proven security solutions—and service providers who can implement them quickly and in a customized manner—are in high demand.

Reduce costs and enhance security with cross-region Datadog connectivity using AWS PrivateLink

Modern cloud architectures are increasingly distributed, with applications and services spanning multiple regions to improve availability, reduce latency, and support disaster recovery. Many of our customers rely on solutions like Virtual Private Cloud (VPC) peering, Network Address Translation (NAT) gateways, and AWS Transit Gateways to securely send telemetry to Datadog across regions. These methods work but can add complexity, increase costs, and create potential security risks.

Falcon Cloud Security - Image Assessment for AI

CrowdStrike Falcon Cloud Security helps organizations detect AI-related software packages and uncover vulnerabilities to protect cloud workloads from evolving threats. Subscribe and Stay Updated: ► Don't miss out on more exciting content! Subscribe to our channel for the latest updates, case studies, and more from the world of cybersecurity. Hit the bell icon to receive notifications whenever we post new videos.

Is Your Google Cloud Secure Enough? 7 Must-Have Security Layers You Might Be Missing

As organizations migrate more data and operations to Google Cloud, one question becomes critical: is your cloud truly secure—or just secure enough to feel safe? As a dedicated Google SecOps partner, Cybriant focuses exclusively on the Google SecOps technology stack. Our commitment to this ecosystem means we are constantly sharpening our domain expertise to deliver smarter, faster, and more effective solutions.

GitLab to Azure DevOps Migration

Switching from GitLab to Azure DevOps offers the opportunity to reconsider your processes, streamline your pipelines, and match your tools with your objectives. Primarily if your company uses Microsoft software. Still, more than just technical expertise is needed for such a migration. It includes a plan to handle any potential problems. This article will help you get familiar with the complexities of migrating projects, repos, metadata, etc., between GitLab and Azure DevOps platforms.

Cloudflare Bot Management Demo

Cloudflare applies a layered detection approach to Bot Management with several detection engines that cumulatively impact the bot score. Bot scores can be used in WAF rules to create granular security policies. This demo highlights how Cloudflare can help with several use cases including web scraping, account takeover, and AI bot protection. Additionally, Cloudflare's AI Assistant, Cloudy, is used to review additional bot analytics and create a WAF rule based on bot score and additional criteria.

One of the biggest cybersecurity myths out there?

One of the biggest cybersecurity myths out there? VPNs equal complete privacy. Here's what you need to know: A VPN hides your IP address, but it doesn't make you anonymous. Your VPN provider still has your data and logs and can hand them over if requested. Websites still track you through cookies, fingerprints, and browser activity. On the latest episode of The Connectivity Cloud Podcast, João Pedro Gonçalves and Michael Tremante break down why VPNs aren't the silver bullet they're marketed to be.

Cloud Security in 2025 What CISOs Need to Prepare For with João Pedro Gonçalves and Michael Tremante

In this episode of The Connectivity Cloud Podcast with Cloudflare, host Mark Dembo is joined by João Pedro Gonçalves, CISO and Managing Director at EQT Group, and Michael Tremante, Senior Director of Product at Cloudflare. Together, they explore critical security trends for 2025, from AI-powered threats to regulatory changes to practical strategies for balancing protection with usability. What You’ll Learn.

Azure Functions Integration: Secure Your Serverless APIs with Astra

Azure Functions provide a scalable and event-driven way to build serverless APIs, but securing them requires continuous monitoring and threat detection. By integrating Astra’s API Security Platform with Azure Functions, you can proactively identify vulnerabilities, monitor API traffic, and protect your serverless applications from real-world attacks.

Threat Investigations In 5 Minutes With Sysdig

Cloud attacks only take ten minutes, leaving a fraction of that time to investigate and initiate a response. Adversaries already have a head start. Cloud has changed the game and attacks are faster than ever. So to stand a chance, you need to move at cloud speed. Sysdig redefines Cloud Detection and Response by enabling five-minute investigations for even the most complex attacks - empowering our customers with rapid insights and comprehensive visibility across their cloud estates.