Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why 3592 Tape Still Wins: Long-Term Storage Without the Long-Term Cost

High-capacity, energy-efficient, and cost-effective, 3592 tape remains a smart option for organizations managing deep storage needs. In a landscape filled with rising cloud bills and data center overhead, 3592 technology provides a simple equation: reliable storage at a fraction of the cost. Big companies with massive data archives are feeling the squeeze. They need to keep costs down without hurting speed or accuracy. This tape? A total success! It works perfectly. Banks, government offices, and media companies, they all rely on tape for their long-term data storage.
Featured Post

Building a Resilient Enterprise That Combines High Availability with Disaster Recovery

In today's hyper-connected digital economy, uptime is critical, and while downtime is inconvenient, it also poses a threat to reputation, revenue, and customer trust.Enterprises are expected to deliver seamless, uninterrupted services around the clock. But while many organisations invest heavily in high availability (HA) infrastructure, they often overlook the equally critical need for disaster recovery (DR). Because ensuring your systems are available is different from ensuring they are recoverable.

Cloudy Summarizations of Email Detections: Beta Announcement

Organizations face continuous threats from phishing, business email compromise (BEC), and other advanced email attacks. Attackers adapt their tactics daily, forcing defenders to move just as quickly to keep inboxes safe. Cloudflare’s visibility across a large portion of the Internet gives us an unparalleled view of malicious campaigns. We process billions of email threat signals every day, feeding them into multiple AI and machine learning models.

Automating threat analysis and response with Cloudy

Security professionals everywhere face a paradox: while more data provides the visibility needed to catch threats, it also makes it harder for humans to process it all and find what's important. When there’s a sudden spike in suspicious traffic, every second counts. But for many security teams — especially lean ones — it’s hard to quickly figure out what’s going on. Finding a root cause means diving into dashboards, filtering logs, and cross-referencing threat feeds.

Cloud Ransomware Attack: Storm-0501's Azure Tactics and How to Defend

Cloud adoption has transformed how organizations store and secure critical data—but it has also created new opportunities for attackers. A recent campaign by Storm-0501, a financially motivated ransomware group, highlights how devastating a cloud ransomware attack can be when backups and recovery measures fail.

Cloud Ransomware: How Storm-0501 Hackers Are Redefining Data Extortion

Ransomware is no longer confined to on-premise networks. A recent report from Microsoft reveals how Storm-0501, a notorious threat group, has pivoted its focus from traditional device encryption to cloud-based ransomware attacks. By exploiting native cloud features, these attackers bypass conventional malware defenses, exfiltrate sensitive data, destroy backups, and extort organizations—all without deploying traditional ransomware encryptors.

Cloud ERP and Cybersecurity: A Winning Tag Team for Data Resilience

Businesses today operate in a climate where data is both their greatest asset and their greatest vulnerability. From customer records to financial information, every digital file carries weight. That's why the need for strong cybersecurity strategies has never been more pressing. At the same time, companies are also leaning on systems that improve efficiency and adaptability. One of the solutions that bridges both needs is cloud-based ERP.

LimaCharlie brings enterprise security solution to Google Cloud Marketplace

Sr. Technical Content Strategist The LimaCharlie SecOps Cloud Platform, now available on Google Cloud Marketplace, delivers the building blocks enterprise SOCs need to integrate, customize, and manage security operations their way: API-First Architecture- Integrate existing solutions, telemetry sources, and third-party resources to standardize your security stack and centralize control over operations. Modular and Scalable- Deploy only the capabilities you need.

Securing the Future: How to Safeguard MCP and Agentic AI with Teleport and AWS

As enterprises rapidly adopt agentic AI and large language models (LLMs) to automate critical business processes and access sensitive data, the traditional security playbook is no longer sufficient. The Model Context Protocol (MCP), a new connector for AI systems like Amazon Bedrock Agents, is revolutionizing enterprise integration—but it also introduces new risks. Join us for an in-depth session exploring how to secure MCP-based AI architectures using Teleport’s Infrastructure Identity Platform and AWS. We’ll cover.

5 Ways to Keep AWS Fast with Just-in-Time Access

Modern AWS environments move fast. Engineers spin up EKS clusters for testing, automation pipelines deploy to production, and AI agents trigger infrastructure workflows via Amazon Bedrock. AWS provides ways to manage access primitives such as roles and privileges to keep up with this velocity, such as STS AssumeRole, OIDC federation, IAM Authenticator, and Identity Center. But the challenge isn’t in these primitives themselves. It's the human factor behind the primitives.

Securing the AI Revolution: Introducing Cloudflare MCP Server Portals

Large Language Models (LLMs) are rapidly evolving from impressive information retrieval tools into active, intelligent agents. The key to unlocking this transformation is the Model Context Protocol (MCP), an open-source standard that allows LLMs to securely connect to and interact with any application — from Slack to Canva, to your own internal databases. This is a massive leap forward.

Best Practices for Securing Generative AI with SASE

As Generative AI revolutionizes businesses everywhere, security and IT leaders find themselves in a tough spot. Executives are mandating speedy adoption of Generative AI tools to drive efficiency and stay abreast of competitors. Meanwhile, IT and Security teams must rapidly develop an AI Security Strategy, even before the organization really understands exactly how it plans to adopt and deploy Generative AI.

AWS Lambda GitHub Actions Integration: Streamlining Serverless CI/CD

In August 2025, AWS made native support available to deploy AWS Lambda functions straight from GitHub Actions. With this integration, a lot of the complexity developers have had to undergo conventionally with serverless automatic deployment is eliminated. As a valuable practical improvement, teams will now gain the ability to utilize declarative GitHub workflows with OIDC-secured authentication and auto-packaging of code for simpler CI/CD pipelines.

Inside the Adversary's Mind: How Cloudflare's Red Team Hacks to Defend

Get a behind-the-scenes look at Cloudflare’s Red Team with Dan Jones — a Senior Security Engineer who thinks like an attacker to strengthen defenses. In this preview of his Cloudflare Connect 2025 talk, Dan shares how offensive security helps protect millions of Internet properties.

Beyond the ban: A better way to secure generative AI applications

The revolution is already inside your organization, and it's happening at the speed of a keystroke. Every day, employees turn to generative artificial intelligence (GenAI) for help with everything from drafting emails to debugging code. And while using GenAI boosts productivity—a win for the organization—this also creates a significant data security risk: employees may potentially share sensitive information with a third party.

Introducing One Identity Cloud

One Identity helps organizations strengthen cybersecurity, boost efficiency and control costs through the One Identity Fabric, a holistic approach to identity and access management (IAM). By unifying IAM tools, including identity governance and administration (IGA), access management (AM), privileged access management (PAM), and Active Directory management (AD Mgmt), it ensures optimal functionality and efficiency. This cohesive structure reduces identity sprawl and extends governance to the farthest endpoints of your IAM ecosystem.

MURKY PANDA: A Trusted-Relationship Threat in the Cloud

Since 2023, CrowdStrike Services and CrowdStrike Counter Adversary Operations have investigated multiple intrusions conducted by MURKY PANDA, a sophisticated adversary leveraging advanced tradecraft to compromise high-profile targets. MURKY PANDA, active since at least 2023, is a cloud-conscious adversary with a broad targeting scope; the adversary’s operations have particularly focused on government, technology, academia, legal, and professional services entities in North America.

How a volunteer-run wildfire site in Portugal stayed online during DDoS attacks

On July 31, 2025, just as Portugal entered the peak of another intense wildfire season, João Pina, also known as Tomahock, received an automated alert from Cloudflare. His volunteer-run project, fogos.pt, now a trusted source of real-time wildfire information for millions across Portugal, was under attack. One of the several alerts fogos.pt received related to the DDoS attack.

Cloudflare Radar Reels Ep 5 - Powering AI with Global Scale & Real-Time Insights

AI breakthroughs demand speed, scale, and visibility. From image creation to real-time text analysis, next-gen AI depends on lightning-fast networks. Cloudflare’s presence in 330+ cities makes it happen. Cloudflare's Radar Display gives you a front-row view of the trends shaping AI’s future.

What C-Levels Should Know About Enterprise Cloud Backup

Enterprise cloud backup keeps your business running when disaster strikes. Organizations lose an average of $5,600 per minute during downtime, making reliable data protection non-negotiable for companies running applications across multiple clouds, containers, and virtual environments. Traditional backup methods fail with modern distributed infrastructure; you need enterprise backup strategies that scale with your actual environment, not outdated approaches that worked a decade ago.

Runtime Security vs. Static Security in the Cloud

Cloud security is often divided into two: Runtime Security and Static Security. While both are crucial to protecting cloud environments, they differ significantly in their objectives, methodologies, and effectiveness against different types of threats. Understanding these differences helps organizations build a robust security strategy by leveraging the strengths of both.

JumpCloud vs. Kandji: Is Your IT Platform Built for a Diverse World?

Don’t settle for an Apple-only approach when your IT environment is diverse. This video reveals the critical difference between a single-focus point solution like Kandji and a unified platform that brings together identity, access, and device management. Learn why a holistic solution is essential for true UEM, controlling the entire user lifecycle, and ensuring a single secure identity for every resource in your multi-platform business.

How external attackers and malicious insiders exploit standing privileges in the cloud

For many of us, the term “cloud security breach” conjures meticulous attack plans executed by sophisticated criminal syndicates. But in reality, “attacks” can be far more mundane: maybe some forgotten credentials, a few default permissions, or a user whose cleanup to-do list never got done. At the center of these incidents are standing privileges: long-lived access rights originally granted for legitimate tasks.

How to Hack a Cloud Access Mismanagement

Protect Your Cloud: Prevent Access Mismanagement with CyberArk Secure Cloud Access Discover how to safeguard your cloud environment from access mismanagement in this eye-opening episode of How to Hack a Cloud: Access Mismanagement. The video demonstrates how attackers exploit standing AWS IAM access keys, turning a common oversight into a major security breach.

How to Hack a Cloud: Insider Threat

In this episode of How to Hack a Cloud: Insider Threat, discover how standing administrative access in AWS can be exploited by a disgruntled employee. Follow Michael Scott’s story as he misuses his S3 admin privileges to silently delete critical data, leaving the company blindsided. Learn how CyberArk Secure Cloud Access enforces Zero Standing Privileges, ensuring time-bound, need-based access to prevent such malicious activity—all while maintaining seamless workflows for legitimate tasks. See how this solution strengthens identity security across multi-cloud environments.

Secure Cloud Access - CyberArk MCP Server

Take control of cloud access for AI-driven workflows without slowing down your team. CyberArk SCA MCP Server is the latest innovation in identity security, purpose-built for the age of agentic AI. Now available in the AWS Marketplace, CyberArk SCA MCP Server empowers developers and AI agents to securely request elevated access directly from their IDE while enforcing Zero Standing Privileges across multi-cloud environments.

MadeYouReset: An HTTP/2 vulnerability thwarted by Rapid Reset mitigations

On August 13, security researchers at Tel Aviv University disclosed a new HTTP/2 denial-of-service (DoS) vulnerability that they are calling MadeYouReset (CVE-2025-8671). This vulnerability exists in a limited number of unpatched HTTP/2 server implementations that do not sufficiently enforce restrictions on the number of times a client may send malformed frames. If you’re using Cloudflare for HTTP DDoS mitigation, you’re already protected from MadeYouReset.

The Unified IT Imperative: Simplifying Complexity and Future-Proofing Your Organization

In this episode of the Make Work Happen podcast, we explore the strategic imperative of unified IT and how it helps leaders shape the future of their organizations. We draw on key findings from JumpCloud’s latest IT trends report to understand why IT fragmentation is a critical challenge for leaders worldwide. Joining us is JumpCloud customer Ricky Jordan, who provides a real-world case study on how a unified platform can simplify complex IT environments, address security risks, and drive strategic conversations.

Preventing the Preventable: Tackling Internal Cloud Security Risks

Once the frontier of innovation, the cloud has become the battleground of operational discipline. As cloud complexity rises, the most common and costly security threats aren't advanced nation-state attacks. They're internal errors. According to the CSA's Top Threats to Cloud Computing Deep Dive 2025, more than half of reported cloud breaches stemmed from preventable issues like misconfigurations, IAM failures, and operational oversights. These are self-inflicted and are happening with alarming frequency.

Loyalty Fraud Cost Businesses

Think credit card fraud is the biggest threat to eCommerce? Think again. Loyalty fraud cost businesses $4B in 2024, and most companies didn't see it coming. Why? Because the attack vector isn't obvious. It's: Credential stuffing + password spraying Poorly managed APIs connecting loyalty platforms to 3rd parties No real-time detection when the bad guys cash in points for untraceable gift cards.

Unlock seamless HIPAA compliance in multi-cloud environments with TrustCloud

In this article Organizations that treat HIPAA compliance as a living, breathing part of their operations, not just an annual checkbox, are the ones best positioned to protect patient data, mitigate risk, and build enduring trust with patients and partners.

Using VPNs and Secure Tunnels to Protect Cloud Network Traffic

The fast rise of cloud adoption has reshaped enterprise IT, providing an unprecedented scale, flexibility and cost efficiency. But with this move comes a set of new security hurdles to maintain the control and guarantee the privacy of information that is exchanged across the network. The growing reliance on cloud by organizations for mission-critical applications and data has made the requirement of strong cloud network security a bit more urgent. Adding Security, enforcing policy and preventing data breaches have to start with protecting the flows of information between Users -> applications -> cloud services.

Falcon Cloud Security - Proactive Security

Proactive Security provides Unified cloud security posture (USPM) and business context across cloud layers, leveraging industry leading threat intelligence, end-to-end attack paths, and ExPRT.AI to reduce alert noise by 95%. Cloud teams can swiftly prioritize their work, neutralize critical risks, and leave adversaries no room to strike. Subscribe and Stay Updated: ► Don't miss out on more exciting content! Subscribe to our channel for the latest updates, case studies, and more from the world of cybersecurity. Hit the bell icon to receive notifications whenever we post new videos.

What's The Best Secure Cloud Storage for Law Firms?

Lawyers and law firms are slowly seeking the benefits of cloud storage to help manage client data, share files securely, and keep important data backed up. In 2024, approximately 75% of attorneys used cloud storage for work-related tasks, up 6% from 2023. So, as lawyers start to adopt cloud storage, they may be wondering what the most secure cloud storage is for law firms.

From Clipboard to Cloud: Upgrading Dental Reception Security with AI

Dental reception areas have come a long way. Not too long ago, check-ins involved clipboards, paper forms, and the occasional misplaced file. It was all a bit clunky. While it got the job done, it wasn't exactly secure, and it definitely wasn't efficient. Now, clinics are realising that the front desk is more than just a place to schedule appointments. It's also where patient data starts its journey, which means it has to be secure from the very beginning. That's where artificial intelligence comes in, offering smarter, safer ways to handle sensitive information.

How Retailers Are Fighting Back Against Fraud with Andy Dean and Christian Reilly

In this episode of The Connectivity Cloud Podcast with Cloudflare, host Mark Dembo is joined by Andy Dean, Head of Technical Operations at AllSaints, and Christian Reilly, Field CTO of EMEA at Cloudflare, to unpack what real-world digital transformation looks like, specifically how enterprises can navigate the complex balance between security and scalability, from managing multi-vendor environments to modernizing legacy infrastructure.

Evolving App Strategy

Every business hits this fork in the road: Do we build or do we buy? Andy Dean and Christian Reilly break it down simply: Buy doesn't always mean SaaS; it can mean bringing in complex systems like SAP. But complexity creeps fast. M&A, new markets, legacy apps, all of it adds layers. To win long-term, you need a clear target architecture and guardrails to reduce drift. That's where automation, cloud landing zones, and Infrastructure-as-Code come in.

Smarter Load Balancing for Modern Apps

Traditional load balancers weren’t built for today’s distributed applications. As workloads span clouds and regions, you need more flexibility—and fewer bottlenecks. Join us to learn how Cloudflare Load Balancing, powered by our Connectivity Cloud, helps you: Route traffic based on performance, availability, or geography Avoid vendor lock-in and legacy infrastructure limitations Manage all your traffic with a unified set of policies and controls.

Cloud Intrusions Rise, eCrime Thrives, Governments Attacked: CrowdStrike 2025 Threat Hunting Report

In the first half of 2025 alone, cloud intrusions were up 136% compared to all of 2024. China was a big driver — CrowdStrike saw a 40% year-over-year surge in intrusions from suspected cloud-conscious China-nexus threat actors. In the government sector, interactive intrusions increased 71%, and targeted intrusion activity jumped 185%.
Featured Post

Finding the 'Just Right' Cloud Solution Through MSP Partnership

For IT decision makers, finding the right cloud solution can often be a tug of war between cost and performance. Overpromising on performance can lead to budget issues and underutilisation, while focusing too much on budgets can lead to solutions that don't deliver the required power. However, this may be a thing of the past, as cloud computing and infrastructure-as-a-service (IaaS) models provide flexibility with performance and pricing. This, in theory, allows IT teams to choose a cloud solution that suits all of their needs.

Top 5 Cloud Security Mistakes and How to Avoid Them

In the modern business environment, the use of cloud technology in doing business is gaining importance. It is flexible, cost-effective, and enables teams to work remotely. However, there is also a lot of responsibility that comes along with such convenience, in this case, security of your cloud environment. The truth? There are numerous organizations, which make easy to perform moves that endanger their data and operations. Fortunately, the majority of these pitfalls may be avoided through proper awareness and equipment.

Top 10 AI-Powered Cloud Security Tools Transforming Cyber Defense in 2025

The rapid evolution of cloud infrastructure, accelerated by hybrid work models and digital transformation, has introduced an equally dynamic threat landscape. In 2025, AI-driven solutions are no longer a luxury—they’re a necessity for scalable, intelligent, and proactive cloud security. From detecting anomalies in real time to mitigating advanced persistent threats, AI-powered cloud security tools in 2025 are shaping how organizations defend against increasingly complex cyberattacks.

How to Build a Real-Time Social App on Cloudflare (No Servers Needed)

In this episode, host João Tomé is joined by Inanna Malick, Systems Engineer at Cloudflare, to talk about how she built a serverless version of a real-time social app that connects to the ATProto ecosystem — the protocol powering platforms like Bluesky. Inanna walks us through her blog post and technical journey, showing how she used Cloudflare Workers, Durable Objects, and the free tier of our Developer Platform to deploy an open, identity-owned, cryptographically verified social experience — all without running a server.

The Microservices Advantage: Building Resilient and Agile SaaS Applications

In today's fast-paced digital environment, businesses need software solutions that are adaptable, scalable, and resilient. For SaaS (Software as a Service) applications, the architecture behind the product plays a crucial role in delivering these qualities. One approach that has gained significant traction is the microservices architecture - a method that structures an application as a collection of loosely coupled, independently deployable services.