Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cloudflare Containers: Run Any App on Workers (with Demos)

In this clip from our show, Confidence Okoghenun, Senior Systems Engineer at Cloudflare, introduces the public beta of Containers on Cloudflare Workers, a significant development for developers. He explains how containers package applications with all their dependencies, allowing almost any app to run reliably on Workers. Confidence also shares two demos: a full Linux desktop running in the browser and a video-to-GIF converter, showcasing the flexibility and integration with other Cloudflare services.

How CrowdStrike Traces Attack Paths to Sensitive Data in the Cloud

As organizations adopt hybrid and multi-cloud architectures, the attack surface quickly expands, often outpacing defender’s ability to see and stop threats. This growing complexity fuels risk — creating blind spots adversaries exploit through cloud misconfigurations, excessive permissions, and unpatched vulnerabilities. These conditions allow attackers to break in, move laterally, and gain higher levels of access.

How Cloudflare Handles Privacy Certifications (and Why Containers Matter to Developers)

In this episode, host João Tomé is joined by Emily Hancock, Chief Privacy Officer at Cloudflare, Rory Malone, Principal Privacy Compliance Specialist at Cloudflare.They discuss Cloudflare's new privacy certifications. At the end, there's also Confidence Okoghenun, Senior Systems Engineer at Cloudflare, sharing the innovative Cloudflare Containers for developers.

Cloud Security's Unspoken Truth

Every DevSecOps, cloud security and even AppSec team knows the feeling: scanners flag hundreds – sometimes thousands – of critical issues across your pipelines, environments and apps. But how many of those findings actually matter? How many represent real, immediate risk to applications running in production? The uncomfortable answer? Very few. At ARMO, we’ve seen firsthand how over 60% of security findings are irrelevant hypothetical risks that will never be exploited.

Modernising the Grant Process: Time-Saving Tools for a Stress-Free Experience

If you've ever worked on a grant program, you know what I'm talking about. The stacks of documents, the maze of spreadsheets, the endless email tag, and the specter of a compliance audit hanging over your head. For decades, this administrative drudgery has been tolerated as an evil necessary for securing funding. But what if it doesn't have to be this way? The inefficiency and stress of old-school grant management are not only frustrating; they actually take resources away from your organisation's central cause.

Now on AWS Marketplace: CyberArk Enterprise Support for cert-manager

Running Kubernetes on Amazon EKS? You’re likely already using cert-manager—the open source standard for TLS and mTLS certificate automation in Kubernetes clusters. Today, we’re excited to announce that CyberArk Enterprise Support for cert-manager is now available through AWS Marketplace, giving EKS customers a direct path to operational reliability, compliance, and expert support at scale.

How Torq and Wiz Power End-to-End Cloud Threat Detection and Response

Modern cloud threats move fast. Detection and response has to move faster. Wiz gives security teams the visibility and precision they need to detect real threats across sprawling cloud environments. Torq turns those threat detections into action — instantly. Together, they’re a cheat code for cloud security operations.

5 Multi-Cloud Environments

Multi-cloud environments have become the backbone of modern enterprise IT, offering unparalleled flexibility, scalability, and access to a diverse array of innovative services. This distributed architecture empowers organizations to avoid vendor lock-in, optimize costs, and leverage specialized functionalities from different providers. However, this very strength introduces a significant challenge: increased complexity in security management.

Device Authority Azure Integration: How It Provides Seamless Security with Microsoft Azure IoT

Microsoft Azure IoT provides a comprehensive platform for IoT development and deployment, but organizations implementing large-scale production deployments often encounter limitations in Azure’s native security and identity management capabilities that require additional solutions to address enterprise requirements. Device Identity Management Limitations in Azure IoT Hub center around the platform’s reliance on symmetric keys or self-signed certificates for device authentication.

How to Enhance the Workflow: Tips for Using Jira with Azure DevOps

Consider a typical scenario. Your development department scales along with the company. Your needs grow, so teams plan to adopt specialized tools for different purposes. The decision is to use Jira for product and issue tracking. Elements like version control, pipelines, and deployments will be managed in Azure DevOps (ADO). Each platform excels in its domain, but running them in isolation is a different story.

Kenton Varda on Safe AI-Assisted Coding and the Power of Cloudflare Workers

In this episode, host João Tomé is joined by Kenton Varda, Principal Engineer at Cloudflare, for a wide-ranging conversation about AI, code, and the evolution of Internet development. Timestamps: Kenton shares how a real-world project shifted his view from AI skepticism to seeing the promise of AI-assisted coding, while emphasizing the need for strong human review, especially for security. The episode also goes into the architecture of Cloudflare Workers and its first months, Durable Objects, and the vision of the Internet as one programmable computer: “the network is the computer”.

Everything you need to know about NIST's new guidance in "SP 1800-35: Implementing a Zero Trust Architecture"

For decades, the United States National Institute of Standards and Technology (NIST) has been guiding industry efforts through the many publications in its Computer Security Resource Center. NIST has played an especially important role in the adoption of Zero Trust architecture, through its series of publications that began with NIST SP 800-207: Zero Trust Architecture, released in 2020.

Defending the Internet: how Cloudflare blocked a monumental 7.3 Tbps DDoS attack

In mid-May 2025, Cloudflare blocked the largest DDoS attack ever recorded: a staggering 7.3 terabits per second (Tbps). This comes shortly after the publication of our DDoS threat report for 2025 Q1 on April 27, 2025, where we highlighted attacks reaching 6.5 Tbps and 4.8 billion packets per second (pps). The 7.3 Tbps attack is 12% larger than our previous record and 1 Tbps greater than a recent attack reported by cyber security reporter Brian Krebs at KrebsOnSecurity.

Private Cloud: Your Best Resource

The dictionary (at least the online version) defines the word trend as a general direction in which something is developing or changing. It also does have a secondary definition relating to fashion, but unless we want to cover off on some questionable choices I made when younger, we can skip that one. When does something move beyond being a trend, and create a lasting shift in behavior–or for the purposes of our discussion, technology?

Cloudflare's Log Explorer equips businesses with native security forensics for faster insights with fewer tools

Now fully integrated across Cloudflare's network, Log Explorer makes it even easier for businesses to automatically see critical security insights and mitigate risk-no configuration needed.

Cato + AWS: The power of partnership for a secure, connected cloud

In enterprise IT, there’s a familiar story: moving applications to the cloud is easy—but securely connecting cloud workloads isn’t. Cloud migration is no longer a question of if, but how fast enterprises can make the shift. As of 2025, an estimated 67% of enterprise infrastructure runs in the cloud, highlighting the widespread adoption of cloud hosting and infrastructure services worldwide.

Tines selected as a launch partner for enhanced version of AWS Security Hub

Today at re:Inforce Amazon Web Services (AWS), unveiled an enhanced version of AWS Security Hub which will enable organizations to surface and prioritize active risks in their cloud environment. Security Hub transforms security signals into actionable insights and offers intuitive visualizations and natural language summaries. Tines will offer workflow orchestration and automation for this enhanced version of Security Hub.

Eliminate Your AWS API Blind Spots in Minutes

Traditionally, securing APIs in AWS has involved a frustrating trade-off. Obtaining a full view of your API Fabric requires weeks or months of deploying various agents, setting up traffic analysis, and enduring lengthy professional services engagements. The outcome? An unacceptably slow time-to-value that keeps you unaware of potential risks for too long. The main issue hasn't only been locating APIs, but also the extensive wait to identify them. But what if that trade-off is no longer necessary?

AWS KMS Embraces the Quantum Era with ML-DSA Digital Signature Support

As quantum computing creeps closer, the cryptographic mechanisms on which today’s digital world relies are becoming more and more fragile. In a prescient move, AWS Key Management Service (KMS) now supports ML-DSA, one of the first post-quantum digital signatures, which has become a standard under FIPS 203. This is an important step in AWS’s broader efforts to prepare customers for the post-quantum secure future.

Why we moved our ECS services from Fargate to EC2

At Tines, we rely heavily on AWS Elastic Container Service (ECS) to power our workflow automation platform. For a couple of years, we used Fargate as our default compute layer – offering simplicity and removing the need to manage underlying hosts. However, as we scaled, we started hitting the edges of what Fargate could reliably offer. This is the story of why we migrated our backend services to an EC2-backed ECS Capacity Provider and what we learned along the way.

Security isn't a department.

Security isn’t a department. It’s a shared responsibility. To move from reactive to preventive, every product team needs embedded cyber expertise. Ange Ferrari, SVP and CISO at Metro AG, explains how decentralizing security enables scale and forces organizations to treat security as everyone's job, not just IT's. If you want to "shift left" for real, this episode is your playbook.

Cato Networks Receives "Deployed on AWS" Badge on AWS Marketplace, Further Accelerating SASE Adoption for AWS Customers

Today, we’ve announced during AWS re:Inforce 2025 that Cato Networks has received the “Deployed on AWS” badge, which identifies Amazon Web Services (AWS) partners whose products are powered by AWS infrastructure. As a Leader in the 2024 Gartner Magic Quadrant for Single-Vendor SASE, Cato sets the standard for converging networking and security in a single, cloud-native platform.

When the Cloud Goes Dark: Why Owning Your Infrastructure Matters for Critical Services

On June 12, 2025, a global outage at Google Cloud Platform (GCP) brought critical infrastructure to a halt. The ripple effects were immediate. Services from Palo Alto Networks and Cloudflare—both of which rely on GCP—experienced outages that lasted hours. Enterprises depending on these services were left blind and exposed. This wasn’t a first. It won’t be the last. But it was a wake-up call. When SASE, SSE, or SD-WAN platforms go down, the business is down. Productivity stalls.

1Password's new secrets syncing integration with AWS

A new integration between 1Password and AWS Secrets Manager makes it faster and easier to sync secrets across environments – all from within the 1Password desktop app. This update enables all 1Password and AWS Secrets Manager joint customers to simply and securely deliver secrets to AWS Secrets Manager. It’s the fast, familiar 1Password experience you know and trust – now extended to include environment variables and secrets support.

1Password signs strategic collaboration agreement with AWS: New integration simplifies app and AI secrets management

1Password has signed a strategic collaboration agreement (SCA) with AWS to help modern enterprises close security blind spots, accelerate secure cloud adoption, and manage access in increasingly complex hybrid and AI-driven environments. This collaboration represents a long-term commitment to co-innovation, global growth, and enabling the adoption of AI tools, all while expanding support for the shared customers of 1Password and AWS.

Stopping Cloud Breaches at Machine Speed: How CrowdStrike Uses Agentic AI to Power Cloud Detection and Response

Cloud is the new battleground, and more adversaries are joining the fight: New and unattributed cloud intrusions were up 26% in 2024, according to the CrowdStrike 2025 Global Threat Report. As adversaries accelerate cloud attacks, CrowdStrike delivers full-cycle agentic AI — from detection triage to threat response — giving defenders the edge to act at machine speed before adversaries can break through.

theNET's Trending Stories: Security for an AI-powered, quantum-enhanced era

Tech leaders are racing to adopt today’s AI tools and envisioning ways to capitalize on tomorrow’s quantum computers. But cybercriminals are a few steps ahead. This month, theNET examines ways to make the most of AI agents while augmenting security with AI-enhanced solutions and safeguarding data with post-quantum cryptography.

Is Azure DevOps Down? How To Ensure Resilience

With the growing popularity of Azure DevOps comes an increased need for proper security of data being stored there. A large aspect of ensuring the security of Azure DevOps ecosystems lies in facilitating data resilience. This means to guarantee the availability to protect, keep, and recover data in case of any disruptions, both intentional and accidental.

Security Signal Podcast: The Perimeter Problem

The Perimeter Problem The traditional corporate perimeter, once a simple fortress, is no longer a reliable defense. With vulnerabilities changing rapidly in a world of cloud computing and remote work, relying on outdated security models is no longer a viable strategy. This massive shift demands a new approach centered on identity, leaving many organizations wondering how to adapt to the "perimeter problem".

Why AWS-native companies choose Vanta for compliance

Building products while pursuing compliance frameworks like SOC 2 or HIPAA can feel complex and time-consuming. Challenges such as unclear integrations, manual evidence collection, and procurement delays are common, but with AWS-native automation tools, companies can overcome these hurdles and accelerate their compliance journey. ‍ In this post, we'll break down three core ways Vanta simplifies compliance for cloud-forward teams, so you can move faster, stay secure, and focus on building. ‍

Cloud Security Must Be a Pillar of Your Exposure Management Strategy

When it comes to exposure management at any organization, it’s natural to focus on vulnerability management and application security. They’ve been core parts of security programs for years; scanning infrastructure, fixing bugs, tightening code. But if cloud security isn’t part of the conversation too, you’re leaving critical risks uncovered.

From Uptime to Upside: How IT Leaders Are Driving the Next Wave of Business Innovation

JumpCloud CEO Rajat Bhargava and GigaOm CEO Ben Book dive deep into the evolving role of IT, discussing how it's transitioning from a tactical function to a strategic business partner. Discover how leading organizations are leveraging technology, including AI, not just to keep the lights on, but to drive growth, innovation, and gain a competitive edge. This episode explores the critical alignment between IT and business objectives, highlighting the pitfalls of a disconnected approach and the immense opportunities for IT leaders to become true change agents within their organizations.
Featured Post

Navigating Operational Resilience Regulation in Cloud Computing

The rate of adoption for cloud computing has grown steadily across many industries, driven by the need for flexibility, innovation and cost efficiency. One of the key verticals that has fully embraced cloud technology is the financial services sector. Cloud is particularly suited to this industry as it allows for more efficient storage, faster processing of large amounts of data, and consolidation of records which gives firms the ability to accurately analyse data.

Protect AI-power apps with Cloudflare Firewall for AI

As organizations refactor applications and adopt AI and Large Language Models (LLMs) to power new applications and enhance existing services, a new class of security vulnerabilities has emerged. Traditional web application firewalls (WAFs) are only partially equipped to defend against threats unique to AI. In this video, we provide an overview of Cloudflare's Firewall for AI product, how it works, and how you can use it to protect AI models and safeguard user interactions with those models.

Ditch the VPN. Upgrade Your Access with Netskope One Private Access

Old VPNs slow you down, open security gaps, and kill user experience. It’s time for a smarter way to connect — fast, secure, and built for the cloud era. Netskope One Private Access is Zero Trust access without the pain. No tunnels. No guesswork. Just instant access to the apps your users need — from anywhere. What you get: Direct, high-speed access to cloud and legacy apps Zero Trust security with zero VPN credentials to steal Full visibility and control over private app traffic It’s time to rethink remote access.

5 Tips to Build Cloud Cyber Resilience

Cloud cyber resiliency means a company can handle cyberattacks and recover fast to keep its cloud services running. It’s about creating systems that expect issues—like attacks, errors, or technical issues—and act quickly to reduce harm. This ability is now very important because businesses depend more and more on cloud systems to run their work. Factors driving this urgency include: Organizations find it hard to keep up with innovation and flexibility while staying secure.

What Is Cloud Security and How Can It Benefit Your Business?

Implementing cloud security policies and technologies has seen sustained growth in recent years. However, despite the widespread adoption of cloud-based solutions, many companies have yet to fully recognize the critical importance of cloud security or still find themselves wondering: what is cloud security and why should it matter to their business? Migrating to the cloud provides organizations with the agility to move faster and more efficiently.