Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

ASPA: making Internet routing more secure

Internet traffic relies on the Border Gateway Protocol (BGP) to find its way between networks. However, this traffic can sometimes be misdirected due to configuration errors or malicious actions. When traffic is routed through networks it was not intended to pass through, it is known as a route leak. We have written on our blog multiple times about BGP route leaks and the impact they have on Internet routing, and a few times we have even alluded to a future of path verification in BGP.

Code Mode: Giving AI Agents an Entire API in 1,000 Tokens (With Demos)

In this episode of This Week in NET, host João Tomé is joined by Matt Curry to break down Code Mode: a way to give AI agents access to the entire Cloudflare API (2,500+ endpoints) using two tools and roughly ~1,000 tokens of context. Instead of exposing thousands of individual tools (which quickly becomes expensive and brittle), Code Mode lets the model write JavaScript to search and execute against a compact API context. The result is massive compression, lower cost, and better performance.

Is OneDrive Safe? Microsoft's Security, Privacy, and Encryption

OneDrive is the most popular cloud storage for Windows due to its easy integration in the Microsoft ecosystem. However, like most big tech companies from the US, there are concerns about how these companies use, secure, and keep your data private, leading many to wonder is OneDrive safe if you want to store photos, documents, or videos in privacy.

Bringing more transparency to post-quantum usage, encrypted messaging, and routing security

Cloudflare Radar already offers a wide array of security insights — from application and network layer attacks, to malicious email messages, to digital certificates and Internet routing. And today we’re introducing even more. We are launching several new security-related data sets and tools on Radar.

10 Essential Tips For Cloud Identity Management

A handful of services quietly redeploy. No one directly manages the traditional network perimeter. But somewhere along the way, an API key ends up in the wrong place. The reality of modern cloud security is that new identities are created fast, and permissions are granted broadly to keep things moving. Over time, these permissions collect unused rights and drift away from least privilege.

Sovereign Cloud: Basics, Benefits, and Data Protection

Governments and regulated enterprises are pulling their most sensitive workloads out of infrastructure they can’t fully control. That’s the core driver behind sovereign cloud: cloud infrastructure where data residency, jurisdictional control, and supply-chain transparency are architectural requirements, not optional features. With GAIA-X moving into implementation and vendors like Red Hat launching sovereign support models for EU member states, adoption is accelerating fast.

How the Cloud Reshapes Your Attack Surface

Cloud environments have reshaped the way applications are built and the way attackers break in. Traditional security strategies centered on malware and compromised endpoints are no longer enough. In today’s cloud, adversaries increasingly rely on valid credentials, identity abuse, and native cloud capabilities to move laterally and establish persistence without ever deploying malware.

Amazon EC2 security: How misconfigured and public AMIs expand your cloud attack surface

Amazon Machine Images (AMIs) are templates for launching and scaling Amazon Elastic Compute Cloud (EC2) instances. Because Amazon EC2 AMIs are reused across environments and automation pipelines, decisions about how you build, source, manage, and share them directly affect your cloud attack surface.

Falcon Cloud Security Cloud Detection and Response (CDR)

Discover how CrowdStrike Falcon Cloud Security stops breaches with Cloud Detection & Response (CDR). Witness our Real-Time Cloud Detections in action as we identify and mitigate a sophisticated attack by LABYRINTH CHOLLIMA. Learn how our integrated threat intelligence and unified detection & response capabilities help SOC teams outpace modern cloud adversaries.

GitProtect is now available on Microsoft Marketplace

We’re excited to announce that GitProtect, an enterprise DevOps Backup & Disaster Recovery software, is now officially available on Microsoft Marketplace! This milestone represents more than a new distribution channel. It reinforces our commitment to delivering secure, enterprise-ready DevOps data protection, which is now also accessible through a trusted Microsoft ecosystem.

Is pCloud Safe for your private files?

pCloud is a cloud storage service founded in 2013, providing users with cloud storage to upload, sync, access, and share files across devices, including computers and mobile phones. The company offers free and paid plans, including lifetime storage options, file sharing tools, automatic backup features, and optional zero-knowledge encryption through its paid pCloud Crypto service. Throughout this article, we will answer the question: Is PCloud safe, along with covering the following topics.

How Do CNAPP Platforms Help Prevent Misconfigurations Across Multi-Cloud Environments?

Cloud misconfigurations rank among the leading causes of cloud security incidents across AWS, Azure, and Google Cloud Platform. CNAPP platforms deliver cloud security posture management (CSPM) with continuous detecting misconfigurations in multi-cloud environments, automated remediation for cloud misconfiguration, and unified policy enforcement.

Cloud Security for Financial Services: Building a Compliant AWS Environment

Financial services organizations moving to AWS often discover that retrofitting security and compliance controls costs three to five times more than building them in from the start. Compliance gaps discovered during audits can delay critical initiatives, trigger regulatory scrutiny, and expose organizations to unnecessary risk.

Cloudflare One is the first SASE offering modern post-quantum encryption across the full platform

During Security Week 2025, we launched the industry’s first cloud-native post-quantum Secure Web Gateway (SWG) and Zero Trust solution, a major step towards securing enterprise network traffic sent from end user devices to public and private networks. But this is only part of the equation. To truly secure the future of enterprise networking, you need a complete Secure Access Service Edge (SASE).

What Technology Investments Offer the Best ROI for Small Enterprises?

Let me save you some time and a lot of cash. Most small business tech investments are a complete waste of money. You buy a shiny new software suite because a slick sales rep promised it would revolutionize your workflow. Six months later? Your team is still doing things the exact same way. Only now you have a $500 monthly subscription bleeding your accounts dry.

AWS and Cloudflare Outages: How GitProtect Keeps Your Operations Running

The assumption that you’re ‘too big to fail’ or ‘too small to get noticed’ simply doesn’t hold water anymore. The year 2025 showed us once again that even the largest names on the market are not invincible. The same is true for any company that depends on their infrastructures. Without a real Plan B, your business’s reliance on cloud tech giants might be risky.

Tag Manager Security: How to Control GTM, Adobe Launch & Tealium for Privacy Compliance

Marketing needs to ship campaigns in hours. IT and engineering move in days. Tag managers live at the center of that conflict. They’re essential infrastructure, enabling marketing velocity by letting marketing teams deploy analytics, advertising pixels, and conversion tracking without IT or production bottlenecks. So campaigns launch faster, testing happens in real time, and teams optimize performance mid-campaign. But that same architecture can create compliance exposure.

Protecting Azure DevOps with Rubrik

Your code is one of your organization’s most critical assets, and protecting it should be as resilient as the applications it builds. In this video, we walk through how Rubrik delivers enterprise-grade protection for enterprise-critical code by securing Azure DevOps repositories against accidental deletion, malicious activity, and ransomware threats.

From DevOps to Runtime: Engineering the Right CWPP Strategy for Your Cloud Environment

Cloud-native architectures have fundamentally changed how organizations build, deploy, and scale applications. But they have also introduced new security challenges, especially when it comes to protecting workloads that span virtual machines, containers, Kubernetes, and serverless environments.

What is Cloud Security? Types, Risks, and Solutions

From customer data to proprietary applications and even employees, businesses have migrated massive amounts of critical information to cloud platforms led by AWS, Google Cloud, and Azure. But with over 100 billion terabytes of data on the cloud at the end of 2025, you can go from cloud9 to under the clouds in a matter of seconds.

Hybrid Cloud Defense Grid: Bridging Wiz and Runtime Telemetry

The modern cloud security landscape is often fighting a war on two disconnected fronts. On one side, we have Cloud Security Posture Management (CSPM) platforms like Wiz, which act as the cartographers of risk—mapping terrain with high fidelity to identify open ports, unpatched vulnerabilities, and toxic permission combinations. On the other hand, we have Runtime Defense tools (SIEM, EDR, NGFW) that generate massive streams of activity logs.

Moltworker (for OpenClaw) & Markdown for Agents: Running AI on Cloudflare

Celso explains how Markdown for Agents was conceived, built, and shipped in just one week, why AI systems prefer markdown over HTML, and how converting a typical blog post from 16,000 HTML tokens to roughly 3,000 markdown tokens can reduce cost, improve speed, and increase accuracy for AI models. We also explore Moltworker, a proof-of-concept showing how a personal AI agent originally designed to run on a Mac Mini can instead run on Cloudflare’s global network using Workers, R2, Browser Rendering, AI Gateway, and Zero Trust.

How Cloud-Native Applications Defend Against DDoS Attacks

As organizations migrate critical applications to the cloud, cloud-based DDoS attacks and defenses have become a growing concern amid the increasing number of cyber threats. Unlike traditional threats, these attacks are increasingly targeted, sophisticated, and capable of disrupting services in ways that can impact entire business operations and business continuity.

Best Cloud Application Security Tools: 10 Solutions for 2026

What is cloud application security? Cloud application security is the set of practices, tools, and policies that protect applications running in cloud environments across their entire lifecycle—from code development through CI/CD pipelines to production runtime. Unlike traditional perimeter security, it must protect multiple layers simultaneously: application code, container images, Kubernetes orchestration, and underlying cloud infrastructure under the shared responsibility model.

Privacy in the AI Age: What's Really Changing in 2026 (with Cloudflare's CPO)

In this episode of This Week in NET, host João Tomé is joined by Emily Hancock, Cloudflare’s Chief Privacy Officer and Data Protection Officer, for a wide-ranging conversation about privacy in 2026 and how the role has evolved in the age of AI.

Falcon Cloud Security: Visibility and Control Over Your Cloud Risks

Falcon Cloud Security Cloud Risk Rules correlate insights across your cloud environment to identify potentially dangerous states and combinations, even when individual findings appear low-severity in isolation amid the countless security risks your cloud infrastructure faces every day.

14 ways to lose Azure DevOps data

Table of contents: hide Azure Devops is a popular CI/CD platform utilized by software development teams. The core use includes source code hosting, CI/CD, project management, test managements and dependency management. Given the extensive capabilities of Azure DevOps, the attack vector for cyber criminals is also bigger – putting more pressure on securing sensitive data. With the growth of sophisticated cyber attacks – cyber security must also be re-evaluated and properly addressed.

2025 Q4 DDoS threat report: A record-setting 31.4 Tbps attack caps a year of massive DDoS assaults

Welcome to the 24th edition of Cloudflare’s Quarterly DDoS Threat Report. In this report, Cloudforce One offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. In this edition, we focus on the fourth quarter of 2025, as well as share overall 2025 data.

Hybrid Network Security in 2026: Key Challenges, Risks, and Best Practices

Secure hybrid networks promise agility by blending on-premises data centers with public cloud platforms and private cloud environments—yet cross-cloud blind spots leave security teams racing to spot threats slipping through hybrid seams. Attackers chain exploits across multiple environments while visibility evaporates under tool sprawl, turning flexible hybrid network architectures into dangerous patchwork. In 2026, US organizations face $10.22 million average data breach costs amid this chaos.

Cloudflare AI Security Suite: Protect AI-powered apps with Firewall for AI

AI is powerful and organizations continue to adopt AI at a rapid pace, but without protections in place, it’s risky. In this session, you'll learn about the risks Enterprises face around AI and how Cloudflare provides a layered security approach incorporating AI Security. We’ll walk through how you can secure your AI-powered applications with Cloudflare.

AWS ECR Scanning: The Practical Guide to Securing Your Containers

If you operate containers on AWS you’re likely familiar with how vulnerabilities can accumulate. The majority of container images currently include least one critical security flaw. Frequently hidden within a base image or an overlooked dependency. This makes enhancing your AWS container security essential. It’s the method to prevent problems such, as data leaks, privilege abuse and supply-chain threats.

Inside Cloud Malware Analysis: Techniques and Real-World Use Cases

Cloud environments power modern business, but they also attract sophisticated malware. Attackers target cloud storage, virtual machines, and APIs to hide malicious code and steal sensitive data. This guide explains cloud malware analysis in clear terms. It covers key techniques and real examples to help security teams spot and stop these threats.

Why Small DME Providers Are Switching to Cloud-Based Solutions

The durable medical equipment industry has undergone significant transformation over the past five years. Traditional paper-based systems that once dominated the sector are rapidly being replaced by digital alternatives. Modern DME software has become essential for providers looking to streamline operations, reduce errors, and maintain compliance with ever-changing healthcare regulations. Small and mid-sized suppliers are discovering that cloud-based platforms offer advantages previously available only to larger organizations with substantial IT budgets.

How to Compare Cloud Security Tools: The Evaluation Framework

You’re not struggling to find cloud security tools. You’re struggling to compare them meaningfully. Every vendor claims “comprehensive coverage” and “real-time detection.” Their feature matrices look identical. Their demos all show impressive dashboards catching simulated attacks.

What is Cloud Security? Explained in 60 Seconds

What is Cloud Security and Why Does It Matter? 80% of companies experienced a cloud breach last year, with an average cost of $4.44 million per incident. In this 60-second video, I break down what cloud security is, why it's critical for your business, and how to protect yourself. What You'll Learn: What cloud security actually means (explained simply!) The cause of cloud breaches (hint: it's simpler than you think) Real examples of common security mistakes How Astra Cloud Vulnerability Scanner protects your data 24/7.

Claude Code configures AWS S3 export for security detections #cybersecurity #ai

Claude Code automates the entire detection export pipeline from LimaCharlie to AWS S3. The agent confirms AWS access, creates buckets with proper regional placement, provisions IAM policies with appropriate permissions, stores credentials securely, and enables continuous delivery. Security data flows from LimaCharlie to S3 for retention and analysis without manual AWS configuration.

Commuserv IT Services Powering Hybrid Infrastructure and Digital transformation

In today's fast-paced digital world, leveraging technology is crucial for success. For over two decades, Commuserv has been a trusted partner for businesses across Australia, helping them navigate the complexities of modern technology. We provide expert IT services designed to fuel your growth and push the boundaries of what's possible. Our authentic, transparent approach builds strong relationships, ensuring your IT infrastructure becomes a powerful asset that propels your organisation forward. We are committed to helping you thrive.

Cloud Migration Roadmap: Moving to the Cloud Without Breaking What Already Works

Most cloud migration stories sound confident in hindsight. In reality, the middle is messy. I've yet to see a migration where everything went "as planned." Timelines slip. Costs wobble. Someone discovers a dependency no one documented five years ago. That's normal. What isn't normal-and what causes real damage-is migrating without a roadmap that accepts this messiness upfront. A cloud migration roadmap isn't about perfection. It's about sequencing decisions so mistakes stay survivable.