Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CrowdStrike Named a Frost Radar Leader in Cloud and Application Runtime Security

CrowdStrike has been named an innovation and growth Leader in the inaugural 2025 Frost Radar: Cloud and Application Runtime Security (CARS), positioned highest on the Innovation Index among all vendors evaluated. This marks another milestone in our mission to stop breaches with the industry's most unified and comprehensive cloud runtime protection.

Cloud Detections in an Age of Cloud Tools with Fred Wilmot

Fred Wilmot, CEO and Co-Founder of Detecteam, joined Defender Fridays to discuss the growing concerns surrounding identity management in cloud security, particularly with the rise of attacks on platforms like O365 and Azure. He emphasizes the importance of analyzing network traffic to understand identity behavior and the complexities introduced by encryption and third-party authentication. He also notes the ongoing evolution in cybersecurity practices and the potential benefits of standardization in logging and taxonomies.

Cloudflare named a Strong Performer in Email Security by Forrester

Today, we are excited to announce that Forrester has recognized Cloudflare Email Security as a Strong Performer and among the top three providers in the ‘current offering’ category in “The Forrester Wave: Email, Messaging, And Collaboration Security Solutions, Q2 2025” report. Get a complimentary copy of the report here. According to Forrester.

Verifying Bots and Agents with Cryptography in the Age of AI

In this episode, host João Tomé is joined in Cloudflare’s Lisbon office by our Senior Research Engineer Thibault Meunier to explore a new proposal that could reshape how bots interact with the web in the age of AI. Timestamps: We go into Cloudflare’s proposal of using cryptographic signatures for bots, enabling websites to verify their identity. Why is this important? As AI systems rely increasingly on online content, this standard could help build a better relationship between content creators and AI platforms.

Performance measurements... and the people who love them

Principal Engineer Kevin Guthrie walks us through his blog post, “Performance measurements… and the people who love them,” which explores how teams can better measure, visualize, and communicate web performance—beyond just raw metrics. Part of the “This Week in NET” show/podcast.

How implementing PAM in multi-cloud secures your hybrid IT

Modern IT is innately complex, which leads to matching complexity in the security environment and indeed for managing privileged accounts. Companies rely on multi-cloud and hybrid cloud deployments to get more flexibility and to enhance resilience. But the flipside of a distributed, decentralized IT approach is a variety of security models across platforms. That creates a broad attack surface, and a complex web of privileged accounts.

Each Cloud Incident Tells a Different Story - Listen, Act, Win

Let’s be honest. Most cloud security alerts feel like trying to read a book with half the pages missing. You get bits and pieces — “unusual login,” “suspicious process,” “network traffic spike” — but no real explanation of what actually happened or what you should do about it. That’s the daily reality for security teams. You’re not just fighting attackers; you’re fighting for context.

Catching Up on Cloud Attack Paths with Cloud Threat Specialist Sebastian Walla

Today’s adversaries are increasingly operating in the cloud — and Sebastian Walla, Deputy Manager of Emerging Threats at CrowdStrike, is watching them. In this episode, he joins Adam and Cristian to dive into the latest cloud attack techniques and the adversaries behind them.

Introducing Aikido AI Cloud Search

Gain instant visibility into your cloud environment with Aikido Cloud Search. Search your cloud like a database. Whether you want to identify exposed databases, vulnerable virtual machines, or over-permissive IAM roles — Aikido gives you the power to uncover risk in seconds. No query language required, no waiting on devops. Just describe what you’re looking for, like “Give me all VMs with CVE-2025-32433 that have port 22 open.” Scroll down to "How It Works" to get technical.

Google Dorking Secrets Hackers Do Not Want You to Know

Google Dorking is also known as Google hacking and is one of the most used techniques by hackers in searching for any information that has been inadvertently exposed to the internet. This is generally done based on advanced search operators as indexed by search engines. While a great tool for cyber professionals, ethical hackers and researchers, it can be risky when used in the wrong way.

Cloudflare named in 2025 Gartner Magic Quadrant for Security Service Edge

For the third consecutive year, Gartner has named Cloudflare in the Gartner Magic Quadrant for Security Service Edge (SSE) report. This analyst evaluation helps security and network leaders make informed choices about their long-term partners in digital transformation. We are excited to share that Cloudflare is one of only nine vendors recognized in this year’s report. You can read more about our position in the report here.
Featured Post

Level-up Your Cloud Success with AWS and MSP expertise

For the modern enterprise, data is the foundational element that allows businesses to operate. As information technology continues to evolve and grow in complexity, organisations need to store and manage greater quantities of mission critical data. To achieve this, businesses are increasingly adopting cloud computing, with many opting to make use of one of the public clouds, such as AWS.

Resolving a request smuggling vulnerability in Pingora

On April 11, 2025 09:20 UTC, Cloudflare was notified via its Bug Bounty Program of a request smuggling vulnerability (CVE-2025-4366) in the Pingora OSS framework discovered by a security researcher experimenting to find exploits using Cloudflare’s Content Delivery Network (CDN) free tier which serves some cached assets via Pingora.

Azure and Grok: Bringing Enterprise-Level AI to the Small and Mid-Market Frontier

In today's hyper-competitive business environment, artificial intelligence is no longer the exclusive playground of Fortune 500 giants. The democratization of AI, especially with developments like Microsoft's Azure platform partnering with Elon Musk-backed Grok, is rewriting the rules of innovation, productivity, and competitive advantage. This convergence represents a significant step forward for small and mid-sized businesses (SMBs), offering access to cutting-edge AI tools previously out of reach due to cost, complexity, and lack of in-house expertise.

Simplifying the shared responsibility model: How to meet your cloud security obligations

The shared responsibility model, introduced by AWS in 2011, defines the division of cloud security responsibilities between cloud providers and customers. Cloud providers are responsible for securing their physical infrastructure, while customers are responsible for securing their own data, configurations, and access. Cloud environments have grown and become much more complex since 2011.

A Complete Guide to G Suite Migration for Businesses in 2025

In 2025, businesses are increasingly moving to cloud-based solutions to enhance their operations. Did you know that companies using cloud-based apps can boost productivity by up to 20%? This significant improvement is largely due to the enhanced collaboration and communication capabilities these platforms offer. Google Workspace, formerly known as G Suite, is a powerful set of cloud-based apps designed to improve business efficiency. By migrating to this platform, businesses can enjoy streamlined processes, enhanced security, and better collaboration tools.

Elevated Cloud Backups With 11:11 Systems

Data protection is no longer just a best practice; it’s a mission-critical priority for every modern business. The ability to safeguard your data, meet compliance requirements, and restore operations quickly is what sets organizations apart in today’s digital-first world. That’s where 11:11 Systems steps in with its Advanced Backup solutions, designed to empower businesses with comprehensive, flexible, and easy-to-manage data protection tools.

Amazon SES monitoring: Detect phishing campaigns in the cloud

Amazon Simple Email Service (Amazon SES) is a cloud-based provider for sending transactional, marketing, and newsletter emails. Because of its role as a source of communication for organizations, Amazon SES has become a primary tool for phishing campaigns. Our latest threat roundup includes a key finding that Amazon SES is a common target in the initial stages of a cloud control plane attack.

A Complete Guide to EC2 Instance Backup: AWS Snapshots vs. AMIs

Amazon Web Services (AWS) provides two native options that can be used to back up AWS EC2 instances – AWS EBS Snapshots and Amazon Machine Images (AMIs). This blog post explains the differences between these two approaches to backup and explains when each method is optimal. NAKIVO for AWS EC2 Backup Backup of Amazon EC2 instances to EC2, AWS S3 and onsite. Anti-ransomware options. Fast recovery of instances and application objects. DISCOVER SOLUTION.

What is Cloud Security Posture Management?

The cloud provides many great business advantages – efficiency, speed-to-market, and many others – and has been rapidly adopted by organizations all over the world. While the rise in cloud operations allows organizations to operate in a way that’s more cost-effective and flexible, opening data, assets, and networks to the internet creates additional risk — particularly around misconfigurations and non-compliance.

Netskope Deepens Partner Ecosystem with Google's Cloud WAN Integration

Enterprises today operate in a hyper-distributed environment where users, devices, applications, and workloads are no longer confined within traditional corporate boundaries. Whether you’re working with remote employees, branch offices, SaaS, IaaS, or non-human form factors like robots and AI workloads, everything must securely and reliably connect to everything else, along with unified policy enforcement.

Vulnerability transparency: strengthening security through responsible disclosure

In an era where digital threats evolve faster than ever, cybersecurity isn't just a back-office concern — it's a critical business priority. At Cloudflare, we understand the responsibility that comes with operating in a connected world. As part of our ongoing commitment to security and transparency, Cloudflare is proud to have joined the United States Cybersecurity and Infrastructure Security Agency’s (CISA) “Secure by Design” pledge in May 2024.

Forget IPs: using cryptography to verify bot and agent traffic

With the rise of traffic from AI agents, what’s considered a bot is no longer clear-cut. There are some clearly malicious bots, like ones that DoS your site or do credential stuffing, and ones that most site owners do want to interact with their site, like the bot that indexes your site for a search engine, or ones that fetch RSS feeds.

Strengthening Cloud Security: API Posture Governance, Threat Detection, and Attack Chain Visibility with Salt Security and Wiz

In the current cloud-centric environment, strong API security is essential. Google's acquisition of Wiz underscores the urgent necessity for all-encompassing cloud security solutions. Organizations should focus on both governing API posture — ensuring secure configuration and deployment to reduce vulnerabilities and assure compliance — and on effective threat detection and response.

Turn Shadow IT into a Strategic Advantage with a Business-Led IT Approach

90% of IT admins are worried about shadow IT, but here's the twist. 54% also believe employees use those apps to make their jobs easier. So what if, instead of fearing it, we saw shadow IT as a roadmap to a better workplace? This is business-led IT: collaboration, not control.

The Evolution of Identity

From managing simple passwords to securing complex, cloud-native environments, how has identity management really changed? In this thought-provoking discussion, JumpCloud CEO Rajat Bhargava and CTO Greg Keller are joined by Rak Garg (Bain Capital Ventures), and Francis Odum (The Software Analyst) to challenge conventional thinking. They delve into the tension between usability and security, the risks of vendor lock-in, and the urgent need for identity solutions that can bridge the gap between legacy systems and the dynamic demands of cloud-native environments.

In cybersecurity, it's an arms race.

In cybersecurity, it's an arms race. Stephanie Cohen explained why financial services are prime targets and why strong partnerships are the real armor. Banks are one of the most attacked sectors on the planet. It's not just money at stake; it's entire economies. And here’s the kicker: You're only as strong as your weakest link. Ready to rethink your cybersecurity strategy? Dive into the latest episode of The Connectivity Cloud Podcast.

Continuous Threat Exposure Management (CTEM)

Continuous threat exposure management (CTEM) is a structured framework for continuously assessing, prioritizing, validating, and remediating vulnerabilities across an organization’s attack surface, enabling you to respond effectively to the most pressing threats over an ever-expanding attack surface. Reactive security is a temporary fix, not a sustainable solution.

DDoS Attacks Up 358%: Early 2025 Breakdown with Omer Yoachimik

In this week’s episode, we talk about DDoS attacks and their sharp rise in recent months. We also start with a quick look at some Internet trends tied to the announcement of the new pope. To guide us through the world of distributed denial-of-service (DDoS) attacks, host João Tomé is joined by our DDoS expert, Omer Yoachimik.
Featured Post

Overcoming the Cloud of Uncertainty

The cloud industry has evolved significantly over the years, with VMware standing out as a key player in cloud computing, its reputation in the market helped it gain significant market share and facilitated a successful acquisition by tech giant Broadcom in November 2023. It has been over a year since this happened and, as with all acquisitions, it prompted companies to consider how it might impact their requirements.

Navigating the New Security Landscape: Asia Pacific Cybersecurity Readiness Survey 2024

A year on from the publication of our inaugural cybersecurity survey in 2023, it is remarkable to see how many of the same issues continue to impact the work of Chief Information Security Officers (CISOs) in the region. In the 2024 edition of the Cloudflare study, we continued to build a better understanding of the threat landscape facing CISOs and their teams across Asia Pacific; with interviews we conducted among almost 4,000 cybersecurity professionals from 14 markets across the region.

Practical Tips to Reduce AWS EC2 Backup and Storage Costs

Backing up data stored in AWS, such as EC2 instances, is essential to mitigate the risks of data loss events that can occur even in cloud environments. AWS cost optimization is a set of measures to save costs paid for AWS services related to data backup. These measures include preventing unnecessary data storage, optimizing storage and other practices. This blog post explains the nature of AWS pricing when backing up data.

CrowdStrike Falcon Cloud Security Extends Unified Protection to VMware Environments

Organizations are rapidly adopting cloud platforms to accelerate development, scale operations, and optimize efficiency. VMware’s robust cloud solutions, including VMware Tanzu Platform and VMware vCenter, are among the critical tools that empower teams to build, deploy, and manage workloads with ease. However, this evolution brings new security challenges. Virtual machines, container images, and other cloud assets can become attack vectors if not properly protected.

How the Internet Went Down in Portugal, Spain, and Beyond

In this week's episode, we talk about Internet disruptions — focusing on the recent major power and Internet blackout, while also reviewing the broader Internet disruptions of Q1 2025. Host João Tomé shares his firsthand experience during the blackout in Lisbon, Portugal, and how an old battery-powered FM radio came to the rescue. He’s joined by David Belson, Head of Data Insights at Cloudflare.

AI Models Are Ready to Make a Difference - Sunil Pai on Cloudflare's Developer Tools Ecosystem

Clip of the show/podcast with Sunil Pai. About Cloudflare's ecosystem for developers and how most people don't realize that AI and agents are ready to make a difference. Sunil is the founder of PartyKit (an open source deployment platform for AI agents), acquired by Cloudflare in 2024. And he’s a Principal Systems Engineer that is building AI agents at Cloudflare.