Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Digital Security Risks During Separation or Divorce: Protecting Your Privacy When Relationships Break Down
During separation or divorce, the breakdown of a relationship often brings unexpected digital risks alongside emotional and financial challenges. Many couples spend years sharing passwords, devices, and online accounts without a second thought. However, when trust erodes, this shared digital access can quickly turn into a serious cybersecurity and privacy concern. Understanding how digital exposure happens and how to manage it responsibly is becoming an essential part of modern family disputes.
Record-Breaking DDoS Attacks & the Security Landscape Heading Into 2026
In this end-of-year episode of This Week in NET, host João Tomé is joined by Omer Yoachimik, Senior Product Manager for DDoS Protection at Cloudflare, to break down the realities of the 2025 DDoS threat landscape — and what’s coming next.
5 IT Pros, 900 Users: Papernest Scales Global Operations with JumpCloud [Español]
How does a lean IT team of just 5 people support 900 users across offices in Barcelona, Paris, and Reims? In this video case study (presented in Spanish), Carles Anton Güell, IT Manager at Papernest, explains how they moved away from "tedious" Active Directory to a single unified solution. By integrating JumpCloud with their Google Workspace, Papernest centralized identity, hardware (MDM), and office Wi-Fi into one seamless workflow.
5 Integrations that Make CNAPP Ideal for Cloud Environments
Cloud-native application protection platforms (CNAPPs) converge cloud security posture management (CSPM), cloud workload protection platform (CWPP), data security posture management (DSPM), and vulnerability management. They secure cloud infrastructure across multi-cloud environments. As 2025 progresses, organizations continue to battle increasing cloud security challenges, where security and compliance issues remain the primary barriers to cloud adoption, cited by 61% of organizations.
From subwoofers, to SASE [The Stack Interview: Netskope CISO James Robinson]
In this clip from The Stack, James Robinson, Chief Information Security Officer at Netskope, explains his unconventional path from wiring subwoofers to becoming a CISO, and his strategy for finding diverse talent.
Cloudflare and JD Cloud announce partnership to accelerate AI inference deployment and scaling for global developers
Partnership projected to reduce latency for AI inference workloads by up to 80 percent, establishing a truly global, high-performance AI Cloud for the developer community.
A CISO's Honest Take on Regulation
Cybercriminals don't care about borders. So why do we have 12 different regulatory frameworks for the same threat? Olivier Busolini, Group Head of Information Security at Mashreq Bank, voiced the frustration every global CISO feels: "In every country, I have 12 countries at Mashreq. In every country, there is a slightly different or sometimes vastly different requirement that I have to abide to.".
AI, DDoS, and the Internet in 2025 | Cloudflare Radar Year in Review
In this special Year in Review episode of This Week in NET, host João Tomé is joined by David Belson to break down the Cloudflare Radar 2025 Year in Review. Together, they explore what Cloudflare’s global network reveals about how the Internet evolved over the past year — from the rapid rise of AI crawlers and agent traffic, to record-breaking DDoS attacks, the spread of post-quantum encryption, and the growing impact of government-directed shutdowns and outages.
Top Trends to Expect in Enterprise Cloud Security in 2026
If you manage security in an enterprise nowadays the cloud likely seems less, like a fixed goal and more like a shifting aim. New cloud accounts emerge quicker than you can assess them. Various teams select providers. SaaS applications are linked with a few clicks and before you know it vital data is transferring through platforms missing from your risk documentation. You are required to maintain the security of all this demonstrate adherence and yet not hinder the business’s progress.
Demo: Manage security posture of GenAI apps
See how Cloudflare One helps you manage the security posture of GenAI tools like ChatGPT, Claude, and Gemini. This demo highlights: API integrations: Available for ChatGPT, Gemini, and Claude, and most popular SaaS apps 0:18 Posture findings: Scan for misconfigurations, unauthorized activity, and other security issues 0:50 Shadow AI discovery: Find what third-party AI apps access your SaaS tools 1:15.
Demo: Prevent data exposure in AI
See how Cloudflare One helps protect sensitive data when users interact with generative AI apps. This demo highlights secure access service edge (SASE) capabilities including: Data loss prevention (DLP) detections for sensitive content (e.g., PII, source code, financials) 0:22 Detections for data at rest in AI tools like ChatGPT 1:00 Guardrails for user prompts based on intent / topic to block jailbreak attempts, code abuse, PII requests, and other risky behavior 2:12.
Demo: Discover workforce use of shadow AI
See how Cloudflare One helps restore visibility and controls over unsanctioned use of AI tools. This demo highlights secure access service edge (SASE) capabilities including: Shadow AI reporting: Analyze how AI apps are used across your environment 0:10 Application confidence scores: Evaluate the risks posed by specific AI apps 1:10 Access controls: Allow, block, redirect, isolate, and more based on an app’s approval status 1:45.
Demo: Access controls for GenAI and agentic AI
See how Cloudflare One simplifies access controls across both generative AI and agentic AI communication — all from one unified secure access service edge (SASE) dashboard. This demo highlights: Securing human-to-AI connections by as blocking or redirecting from unapproved tools and isolating AI apps to protect data (0:09) Streamlining access to MCP servers for AI-to-resource connections via Cloudflare’s MCP server portals (1:10)
The State of Cloud Security in 2026, with Shira Rubinoff
What really happened in cloud security in 2025 and what should security leaders prepare for in 2026? In this session, cybersecurity leader, Shira Rubinoff breaks down the biggest cloud security challenges organizations faced in 2025, why cloud misconfigurations and IAM complexity are still major risks, and how CISOs should rethink cloud security strategy and budgeting for 2026.
12 Benefits of Switching to Cloud-Based HR Solutions
As organizations adapt to evolving workforce expectations, regulatory demands, and competitive pressures, many are re-evaluating how their HR operations are managed. Traditional on-premise and manual HR systems often struggle to keep pace with modern business needs, leading to inefficiencies, data silos, and limited visibility.
Building a Real-Time Multiplayer Chess Game Inside ChatGPT (Agents SDK)
In this clip from This Week in NET, Systems Engineer Steve James gives a hands-on demo of a real-time multiplayer chess game running inside ChatGPT, built with the Agents SDK and Cloudflare Workers. Beyond the demo, we talk about what developers can build today with AI agents — and why, given the pace of innovation, it’s genuinely hard to predict what applications and experiences will emerge in 2026.
Getting To AWS IAM Outbound Identity Federation With GitGuardian
Secure all your non-human identities across providers and without secrets. Explore how AWS and GitGuardian can help organizations migrate to short-lived tokens.
The Deep Dive | Optimize Your Workflow: New Admin Navigation 12.19.2025
Join us for a detailed review of the Admin Portal navigation update. We will outline the implemented changes, the design rationale, and the feature roadmap. Participate in a live Q&A to submit your feedback and get your implementation inquiries addressed by our team.
Best Managed Vultr Cloud Hosting Providers for Performance and Ease
Using Vultr directly is fast and affordable, but it comes with a tradeoff. You get a powerful cloud server, then you are on your own. Every update, every security patch, every performance tweak, and every outage becomes your responsibility. For some teams, that level of control is fine. For many others, it becomes a distraction.
Mastering OWASP Detection: Enterprise Rules for AWS, Akamai, F5, and Cloudflare
Application Security, WAF, and OWASP form an interconnected defense strategy for web applications. OWASP (Open Web Application Security Project) provides the framework for identifying critical vulnerabilities through resources like the OWASP Top 10, while WAFs act as the protective layer that detects and blocks attacks targeting these vulnerabilities in real-time.
Proactive WAF Vulnerability Protection & Firewall for AI + Multiplayer Chess Demo in ChatGPT
In this episode of This Week in NET, we talk with Daniele Molteni, Director of Product Management for Cloudflare’s WAF, about how Cloudflare responded within hours to a newly disclosed React Server Components vulnerability — deploying global protection before the public advisory was even released.
Cybersecurity Predictions 2026: What Security Leaders Learned in 2025
In this special compilation episode of The Connectivity Cloud Podcast with Cloudflare, Lia Kazandzhieva, Marketing Campaign Manager at Cloudflare revisits the most impactful conversations from 2025 with leading CISOs and security experts to distill the lessons that will define 2026 and beyond. What You'll Learn.
Security Visionaries | Agentic AI Threats: Hype or Reality
Are agentic AI threats just hype or reality? Security Visionaries host Max Havey digs into the world of agentic AI-enabled threats and cyber espionage with guests Neil Thacker, Global Privacy and Data Protection Officer at Netskope, and Ray Canzanese, Head of Netskope Threat Labs. IN THIS EPISODE.
3 Smart Ways to Spend Your First $5,000 in AWS Credits
Getting your first chunk of AWS credits feels amazing. It also raises a big question: how do you spend it without burning through everything in a few months? Many startups receive between $5,000 and $500,000 in credits over their journey, often through programs for early-stage teams. Some later unlock $100,000 to $300,000 in total support. This guide zooms in on that first $5,000 and how to put it to work.
Hidden Costs That Eat Your AWS Credits Faster Than You Expect
You finally land a big pile of AWS credits. Maybe $10,000 from AWS, or even close to $100,000 through a startup program. It feels like someone gave you an unlimited cloud card. For a few weeks, life is good. You launch new services, spin up bigger instances, create extra test environments, and nobody worries about the bill. Then one morning you open the AWS console and see this: credits almost gone, real charges starting next month.
5 Leading Cloud Hosting Platforms for Growing Businesses in 2026
Evaluate top cloud infrastructure solutions for performance, scalability, and value.
Cloudflare publishes top internet trends for 2025
Intensifying bot wars, a sharp rise in attacks on civil society organisations, and rapid progress in post-quantum encryption mark a pivotal year online.
Scaling Globally? Use Argo Smart Routing to Cut Latency for Users Worldwide
Routing is the process of selecting the best path for data to travel across a network to its destination. But what if routing could be smarter and faster? Enter Cloudflare Smart Shield + Argo Smart Routing, which optimizes data paths to enhance both speed and reliability. Discover what smart routing is and how it can revolutionize your network performance: Key benefits of Argo Smart Routing: Want to dive deeper into routing and smart routing? Explore these resources in Cloudflare’s Learning Center.
The Zero-Markup Domain: Transfer Your Domain to Cloudflare for Price and Security
Are you tired of rising domain renewal costs and sneaky WHOIS privacy fees? Unlike other registrars that mark up renewal costs, Cloudflare charges you ZERO markup, passing wholesale pricing directly to you. Top 3 Reasons to Transfer: Wholesale Pricing: No markup, ever. You pay what Cloudflare pays. Unbreakable Security: Free WHOIS Privacy and advanced domain locking. Seamless Integration: Instant access to Cloudflare's global CDN and DNS infrastructure.
The 2025 Cloudflare Radar Year in Review: The rise of AI, post-quantum, and record-breaking DDoS attacks
The 2025 Cloudflare Radar Year in Review is here: our sixth annual review of the Internet trends and patterns we observed throughout the year, based on Cloudflare’s expansive network view.
Vanta announces the availability of two multi-product solutions in AWS Marketplace
We’re excited to announce the availability of two multi-product solutions in AWS Marketplace today. ATG and Vanta: Fast Track to Compliance Acceleration, along with Digital Trust Accelerator with Cognisys & Vanta to allow organizations to easily discover, try, test, buy, and deploy—as well as manage—thousands of software solutions. This new drop includes pre-built AI agents and ready-to-integrate tools, all in one place.
React2Shell and related RSC vulnerabilities threat brief: early exploitation activity and threat actor techniques
On December 3, 2025, immediately following the public disclosure of the critical, maximum-severity React2Shell vulnerability (CVE-2025-55182), the Cloudforce One Threat Intelligence team began monitoring for early signs of exploitation. Within hours, we observed scanning and active exploitation attempts, including traffic originating from infrastructure associated with Asian-nexus threat groups.
Mitigating Credential Phishing in the Age of AI and Cloud Convergence
Phishing remains one of the most effective methods for stealing credentials and breaching enterprise environments. Despite advanced email and browser protections, attackers now leverage AI, and automation to outpace traditional defenses. The Verizon 2024 Data Breach Investigations Report found that 68% of breaches involve the human element, often triggered within seconds of a phishing lure, just 21 seconds to click and 28 seconds to submit credentials.
AI, Creators & Agentic Commerce - A Conversation with Cloudflare CSO Stephanie Cohen
In this episode of This Week in NET, host João Tomé sits down with Stephanie Cohen, Cloudflare’s Chief Strategy Officer, for a candid conversation about AI, content creators, financial services, partnerships, and the future of the Internet. Stephanie shares how Cloudflare is helping keep the Internet open and resilient — from giving creators transparency and control over AI scraping, to enabling new models of agentic commerce through partnerships with Visa and Mastercard, to empowering organizations of all sizes through Cloudflare’s global network.
Deepfake Candidates Are Getting Hired - Here's How
Hiring in 2025: Is the person you hired even real? Deepfakes resumes. Outsourced interviews. Candidates landing jobs they never intended to do. We've moved from KYC to KYE, and organizations haven't caught up yet. In the latest episode of The Connectivity Cloud Podcast, we explore how attackers are weaponizing the job market with Vladimir Krupnov and Blake Darché. For anyone in hiring, HR tech, or security leadership, this is a must-listen.
How Salt Security & AWS Simplify API Security
See your Blind Spots in Minutes, not Months: How Salt Security & AWS Simplify API Security AI agents and cloud-native architectures have unleashed a wave of APIs and with them, new attack surfaces. Most security teams are struggling to keep up, especially in dynamic AWS environments where shadow and zombie APIs can easily go undetected. This Salt Security and AWS webinar explores a better approach to API discovery and security in AWS without the burden of in-line traffic collection or sensor deployments.
How AWS WorkSpaces & Teramind Enhance Workforce Intelligence
Teramind, an ISV Accelerate AWS Partner, delivers a crucial layer of visibility, security, and productivity management that highly complements the Amazon WorkSpaces Family services. This partnership ensures customers move beyond the architectural security and agility provided by AWS to gain granular control over user behavior, insider risk, and operational efficiency within their virtual desktop infrastructure (VDI).
The 3 Biggest Cloud Workload Threats (and Why Teams Miss Them)
In this article, we’ll break down the three most prevalent runtime threat vectors behind most modern cloud breaches – and why traditional cloud security tools fail to detect them. Let’s get one thing clear: the cloud itself hasn’t become more dangerous – but cloud-native architectures fundamentally changed the threat landscape. In the datacenter era, most threats targeted hosts, networks, and endpoints.
Azure Tenant Hardening Basics: Identity, Conditional Access, and "Default Safe" Settings
When you spin up a new Azure tenant, it's easy to assume that Microsoft has locked the doors and barred the windows for you. The interface is sleek, the services are powerful, and the infrastructure is world-class. But here is the uncomfortable truth: while the cloud infrastructure is secure, your specific configuration of it likely isn't. A default Azure Active Directory (now Microsoft Entra ID) environment is designed for usability and adoption, not maximum security. It prioritizes getting your team connected over keeping bad actors out.
Delivering Intelligent IT Foundations for Safe AI Usage
JumpCloud CTO Greg Keller explains why traditional, fragmented IT tools create a critical Zero Trust gap for AI agents, bots, and non-human identities (NHIs). The biggest inhibitor to innovation isn't restrictive policy—it's the internal lack of a unified identity foundation. Learn how to address "identity sprawl" and transform IT operations to deliver auditable trust, extend Zero Trust enforcement to machine-to-machine interactions, and build the Intelligent IT foundations required for safe, accelerated AI adoption.
Episode 3 - Network Visibility in the Cloud: Why Network Traffic Analysis Remains Critical
Richard Bejtlich discusses cloud security from a network-centric perspective with Corelight's cloud security researcher, David Burkett. They explore why monitoring network traffic remains essential in cloud environments, despite the presence of native security features offered by cloud providers. David highlights common threats such as container compromises, coin miners, and supply chain attacks, emphasizing the value of traffic visibility for detecting unusual behaviors and breaches.
Built for AWS. Built for How Security Teams Really Work.
Every security team I meet is dealing with the same pressure: more cloud, more AI, more data, more noise, and less time. The cloud promised speed and flexibility, and it delivered. However, customers are asking for an easier path to understanding what’s actually happening across that environment. That gap, between what teams can see and what they need to see, is where threats hide.
Securing the New AI Edge: Why Salt Security Is Bringing MCP Protection to AWS WAF
The definition of the "edge" is changing. For years, security teams have focused on the traditional perimeter: web applications, public APIs, and user interfaces. We built firewalls, deployed WAFs, and established strict access controls to keep bad actors out. But with the rapid adoption of Agentic AI, the perimeter has expanded. Today, your "edge" isn't just where users connect to your apps; it's where AI agents connect to your data.
Cloudflare WAF proactively protects against React vulnerability
Cloudflare has deployed a new protection to address a vulnerability in React Server Components (RSC). All Cloudflare customers are automatically protected, including those on free and paid plans, as long as their React application traffic is proxied through the Cloudflare Web Application Firewall (WAF). Cloudflare Workers are inherently immune to this exploit. React-based applications and frameworks deployed on Workers are not affected by this vulnerability.
Cloudflare's 2025 Q3 DDoS threat report -- including Aisuru, the apex of botnets
Welcome to the 23rd edition of Cloudflare’s Quarterly DDoS Threat Report. This report offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. In this edition, we focus on the third quarter of 2025.
Introducing Cloudflare AI Security Suite
Learn how Cloudflare helps you secure generative and agentic AI everywhere with visibility, controls, and data protections.
The Easiest Hacks Are the Most Dangerous
Some of the most successful cyberattacks aren't even that sophisticated. A misconfigured Zoom tenant. A forgotten 2FA. A Salesforce setting was left wide open. The problem isn't always the platform, but how we use it. Vladimir Krupnov and Blake Darché joined us in the latest episode of The Connectivity Cloud Podcast to unpack the myth that you need advanced tools to breach a system.
Secure Your AWS Cloud with Falcon Next-Gen SIEM: Seamless Integration & Intelligent Detection
See how Falcon Next-Gen SIEM delivers instant, frictionless integration with AWS for full visibility in minutes. Watch how pre-built detections analyze every API call, connecting events into clear attack stories. With automated response playbooks that take immediate action, you can detect faster, respond smarter, and stop cloud threats before they spread. CrowdStrike Falcon Next-Gen SIEM: Consolidate security operations with the world’s most complete AI-native SOC platform.
Security Visionaries | Disrupt or Defend? An AI Grudge Match
What does the rise of generative AI mean for the mandates of a CIO and CISO? In this episode of Security Visionaries, host Emily Wearmouth is joined by Netskope's Chief Digital & Information Officer (CDIO) and Chief Information Security Officer (CISO) to discuss top tips for both disrupting and defending your organization in the age of generative AI.
Building Data Sovereign Clouds: The Imperative of Digital Sovereignty, Operational Resiliency and Data Protection
In today’s geopolitical and regulatory climate, organizations and nations are increasingly embracing digital sovereignty—the ability to control and protect their data, infrastructure and operations within defined jurisdictions. The sovereign-cloud market is growing fast as governments and regulated enterprises demand local control, auditable supply-chains, and cloud-native resiliency.
AWS and 1Password: Innovation in AI and beyond
This year has been one of the most transformative in our collaboration with AWS. As organizations move faster toward AI-driven development and cloud-native architectures, secure access has become a foundational requirement, not an afterthought.
CrowdStrike Unveils Real-Time Cloud Detection and Response Innovations
CrowdStrike is announcing new cloud detection and response (CDR) capabilities to help SOC teams reduce mean time to respond (MTTR) and strengthen protection across hybrid and multi-cloud environments. These include new Real-Time Cloud Detections in CrowdStrike Falcon Cloud Security and Automated Cloud Response Actions.
Transform AWS Security Operations with Falcon Next-Gen SIEM
CrowdStrike is redefining how SOC teams turn cloud data into actionable intelligence by unifying speed, scale, and cost efficiency in one platform built for the cloud and AI era. Together with AWS, today we are announcing new integrations and consumption options designed to further simplify how customers secure and operationalize workloads on Amazon Web Services (AWS).