Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

OCSF for Security Hub: Sumo Logic and AWS speaking the same language

In technology, the proof of a lasting relationship is in the infrastructure — the pipelines, security services, and log plumbing have to work seamlessly together long before anyone sees the outcome. That’s precisely what Sumo Logic and AWS have built. Aligned around open standards like OCSF (Open Cybersecurity Schema Framework), integrated with services like Security Hub and GuardDuty, and connected through shared telemetry, it makes cloud security and observability possible at scale.

Resilience by Design: How to Stay Online During Attacks and Outages

In today’s cloud-native world, resilience isn’t optional — it’s foundational. Daniele Molteni, Director, Product Management for Application Security at Cloudflare, is leading a panel at Cloudflare Connect 2025 that tackles a core question: how do you design systems to withstand attacks, outages, and failures? In this preview, Daniele shares what’s at stake when downtime hits — and how leaders are rethinking operational continuity for the modern Internet.

Top 8 Custom Software Development Trends in 2025

The world of software development never stands still. In 2025, we're seeing a surge of exciting innovations that are changing how software is designed, built, and scaled. From smarter AI tools and low-code platforms to greener coding practices and edge computing, the landscape is evolving fast. Whether you're a startup founder aiming to build a scalable MVP or a CTO steering an enterprise transformation, knowing what trends to watch can save time, money, and frustration.

Why SEO Matters for Marketing Cloud Services

Cloud buyers search, compare, and shortlist vendors on Google before they book a demo. They scan feature pages, docs, and case studies, and they pay attention to speed and clarity. If your site is hard to find or slow to load, you miss that first filter. Many teams do not have extra time to plan site structure, write clear copy, or fix technical issues. Some work with Mendel Sites to shape content, improve performance, and keep a clean WordPress setup that helps search engines and readers.

Solving Wicked Tech Problems: A Conversation with ITHQ's Scott Nursten

ITHQ's CEO, Scott Nursten reveals the secret to building a wildly successful MSP. Focus on outcomes, not just revenue. Learn how their commitment to solving "wicked tech problems" led them to adopt JumpCloud as the core platform for providing clients with identity freedom, multi-platform device management, and a robust defense against Shadow IT.

Cloudflare just got faster and more secure, powered by Rust

Cloudflare is relentless about building and running the world’s fastest network. We have been tracking and reporting on our network performance since 2021: you can see the latest update here. Building the fastest network requires work in many areas. We invest a lot of time in our hardware, to have efficient and fast machines. We invest in peering arrangements, to make sure we can talk to every part of the Internet with minimal delay.

Introducing Observatory and Smart Shield - see how the world sees your website, and make it faster in one click

Modern users expect instant, reliable web experiences. When your application is slow, they don’t just complain — they leave. Even delays as small as 100 ms have been shown to have a measurable impact on revenue, conversions, bounce rate, engagement and more.

FireCloud Total Access: Secure Every User, Connection & Workplace Everywhere

With hybrid work, cloud applications, and distributed teams now the standard, organizations face a critical challenge: how to deliver secure, seamless access to both cloud-hosted and private applications without relying on outdated remote user VPNs or complex hardware.

Graylog SIEM on AWS | Smarter Security Without Compromise

Choosing a SIEM doesn’t have to mean trade-offs. This video shows how Graylog SIEM on AWS delivers fast detection, predictable costs, and analyst-friendly workflows — without the compromises that hold legacy platforms back. Legacy ingest-based SIEMs force security teams to pick between visibility, cost, and analyst efficiency. Graylog changes that model with flat, transparent pricing, license-free data lake storage, and flexible deployment options.

Giving users choice with Cloudflare's new Content Signals Policy

If we want to keep the web open and thriving, we need more tools to express how content creators want their data to be used while allowing open access. Today the tradeoff is too limited. Either website operators keep their content open to the web and risk people using it for unwanted purposes, or they move their content behind logins and limit their audience.

A simpler path to a safer Internet: an update to our CSAM scanning tool

Launching a website or an online community brings people together to create and share. The operators of these platforms, sadly, also have to navigate what happens when bad actors attempt to misuse those destinations to spread the most heinous content like child sexual abuse material (CSAM).

Enhancing the Git Restore Process with Azure DevOps and GitProtect

In this video, we will walk you through the new Git Restore process in GitProtect, highlighting its compatibility with platforms like Azure DevOps, GitHub, GitLab, and Bitbucket. We will explain how we can enhance the restore efficiency by using additional credentials and access tokens, allowing for more API requests. A key feature of Azure DevOps is the ability to restore repositories from the same backup set, ensuring consistency. I encourage you to add these additional credentials to GitProtect for a smoother experience.

What Is The Best Cloud Storage for Sensitive Data?

Cloud storage can offer us the best protection against data breaches, more privacy online, and a means to protect our photos, videos, and more to ensure we never lose access to our important files. However, due to the many options we have when choosing cloud storage, you may be left wondering which is the best cloud storage for sensitive data, and how these differ from the main cloud storage providers, such as Google or OneDrive.

Turning Cloud Security Best Practices into Action with XDR

What once seemed like an optional upgrade has now become mission-critical: cloud security sits at the heart of every business decision. Organizations know the playbook—they understand cloud security best practices inside and out. But here’s where things get complicated: there’s a massive disconnect between understanding these practices and actually implementing them across sprawling, multi-cloud environments.

MSP Zero Trust Analysis Map

Uncovering your clients’ hidden security gaps just got easier. Our new Zero Trust Gap Analysis Map helps you quickly identify where your clients are vulnerable, turning a complex topic into a clear, actionable conversation. In this video, we'll show you how to use this free, five-minute Google Sheets-based tool to assess a client's Zero Trust readiness. You'll learn how to pinpoint critical security gaps in key areas like identity, devices, and networks, generating an easy-to-read dashboard that highlights their biggest risks.

AWS Cost Optimization: How to avoid "Cost Creep".

Last quarter, a manufacturing client reached out with a serious AWS cost optimization challenge. Their AWS bill had grown from $22,000 to $38,000 per month over eight months, with no business growth to justify the increase. The CFO was threatening to abandon their cloud initiative entirely. After conducting our comprehensive AWS cost optimization audit, we identified $200,000 in annual waste and eliminated it within one week. Here’s exactly what we found and how we fixed it.

Protect AI Development with Falcon Cloud Security

As AI becomes an integral part of how modern applications are built and deployed, it introduces new risks and new blind spots for security teams. Large language models, machine learning packages, and embedded AI services can be hidden deep in the software supply chain or running unnoticed in production. Without purpose-built visibility, organizations risk exposing sensitive data, shipping vulnerable code, or relying on models they cannot fully govern.

Help build the future: announcing Cloudflare's goal to hire 1,111 interns in 2026

At Cloudflare, our mission is to help build a better Internet. That mission is ambitious, long-term, and requires constant innovation. But building for the future isn’t just about the technology we create — it’s also about investing in the people who will create it. That’s why today, we are incredibly excited to announce our most ambitious intern program yet: Cloudflare aims to hire as many as 1,111 interns over the course of 2026.

Snyk Ranked #51 on 2025 Forbes Cloud 100 List

We’re thrilled to share that Snyk has, for the sixth time and fifth consecutive year, been named to the Forbes Cloud 100 ranked at, recognizing the world’s most innovative private cloud companies. This year’s recognition is especially meaningful, reflecting the bold step we took in May to launch the AI Trust Platform, reorienting Snyk around a single mission — securing the future of AI-native software development.

Everything Breaks Eventually - Building Resilient Infrastructure Beyond SASE

What does it really take to keep critical systems online—when the inevitable happens? Suzanne Aldrich, Strategic Solutions Engineer at Cloudflare, explores that question head-on in this preview of her Cloudflare Connect 2025 session. From outages to attacks, Suzanne shares real-world lessons on how to design for resilience, going beyond Secure Access Service Edge (SASE) to build systems that can bend without breaking.

You don't need quantum hardware for post-quantum security

Organizations have finite resources available to combat threats, both by the adversaries of today and those in the not-so-distant future that are armed with quantum computers. In this post, we provide guidance on what to prioritize to best prepare for the future, when quantum computers become powerful enough to break the conventional cryptography that underpins the security of modern computing systems.

Connect and secure any private or public app by hostname, not IP - free for everyone in Cloudflare One

Connecting to an application should be as simple as knowing its name. Yet, many security models still force us to rely on brittle, ever-changing IP addresses. And we heard from many of you that managing those ever-changing IP lists was a constant struggle. Today, we’re taking a major step toward making that a relic of the past.

The 5 Phases of AI Adoption: An "Ask the SME" Breakdown

Welcome to the newly revamped "Ask SME Anything" series! In this series, our subject matter experts (SMEs) offer pro tips, address common pet peeves, and provide the TL;DR on the latest Netskope news and industry trends. In this video, we tackle a topic on everyone's mind: the AI adoption journey. What you'll learn: Netskope helps organizations secure every stage of their AI journey.

Tenant Matters: Enabling Safe SaaS Adoption with CASB Tenant Awareness

Imagine your marketing team needs to share a product roadmap with a partner, so they drop it into a shared OneDrive folder. Everything looks fine — same interface, same app — but no one realizes the file was uploaded to the partner’s personal OneDrive account instead of their corporate tenant. Days later, the file is still accessible from an unmanaged device, with no audit trail, no data loss protection, and no way to revoke access.

Integrating CrowdStrike Falcon Fusion SOAR with Cloudflare's SASE platform

Security teams know all too well the grind of manual investigations and remediation. With the mass adoption of AI and increasingly automated attacks, defenders cannot afford to rely on overly manual, low priority, and complex workflows. Heavily burdensome manual response introduces delays as analysts bounce between consoles and high alert volumes, contributing to alert fatigue. Even worse, it prevents security teams from dedicating time to high-priority threats and strategic, innovative work.

AI Voice: I Tried to Make My Robot Hand Talk | AI Avenue Ep 1

In this episode you’ll go on a mission alongside Craig to find Yorick, his robot hand co-host, a voice. He’ll talk to experts at the NVidia GTC conference in San Jose, people on the street, and then travel to @elevenlabsio in London. You’ll learn how speech synthesis got its start and where it’s headed. You’ll hear about the challenges of making voices seem real, understand privacy concerns, and see the power voice gives us by augmenting our abilities.

Troubleshooting Complex Multi-Cloud Connectivity Issues with Forward Enterprise

Cloud issues are hard to pin down — especially when you're juggling multiple providers. In this video, we walk through a real-world connectivity issue between two major clouds and show how Forward Enterprise can cut through the noise, surface hidden problems, and get your mean time to insights fast — no guesswork, no finger-pointing.

Beyond the Perimeter: A CISO's Guide to Modern Security Architecture

In this episode of Make Work Happen, JumpCloud's CISO Bob Phan sits down with Superbet CISO Alex "Jay" Balan to challenge traditional cybersecurity thinking. They discuss Jay's "internet-first" security philosophy, which advocates for a strategic shift away from outdated on-premise practices and private networks. Learn why assuming compromise, practicing "resilience through violence," and establishing a single source of truth for identity are the keys to building a more secure and efficient organization.

Microsoft to Enforce Mandatory MFA for Azure and Microsoft 365 Admin Accounts

Microsoft has also been enhancing cloud security by ensuring that multi-factor authentication (MFA) is enabled for all of its Azure and Microsoft 365 administrative accounts. The rollout will begin with Azure portals in October 2025 and progressively to command-line tools, APIs, and Infrastructure-as-Code (IaC) environments in October of that year. For organizations, it means adapting their authentication workflows to align with Microsoft’s phased enforcement plan or risk disruption.

Maximizing Your Security Investment with the Microsoft Azure Consumption Commitment (MACC)

If your organization has a Microsoft Azure Consumption Commitment (MACC), you’re already on the path to optimizing cloud spend. But are you making the most of it? MACC isn’t just a budgeting tool, it’s a strategic advantage. By transacting eligible solutions through the Azure Marketplace, you can decrement your commitment while accelerating your cloud security and operations. That’s where BlueVoyant comes in.

Securing cloud console and CLI access for agile software development

Fast-moving cloud environments demand speed, but without the right access controls they invite risk. Resources such as virtual machines, containers, and services are created, modified, and terminated at a rapid pace. At the same time, workloads are becoming increasingly distributed, with data and applications spanning multiple regions, accounts, and even across different cloud service providers (CSPs).

Cloud-Based Inventory Optimization Software: Benefits and Challenges

Keeping track of your stock is a big deal for any business, right? It used to be a real headache with spreadsheets or old computer programs. But now, there's cloud-based inventory optimization software, and it's changing the game. It lets you see everything in real-time, from anywhere. Let's discuss what this inventory optimization software can do for you and what you need to watch out for.