Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How to secure cloud workloads without building a full-scale SOC

You don’t need a 20-person SOC to protect your cloud-native environment. What you need is the right strategy: map your risk, embed security early, automate detection, and let smart tooling do the heavy lifting. Here’s how security and DevOps leaders with limited resources can achieve enterprise-level protection without enterprise-level headcount.

How Cloudflare Got 2x Faster Servers With Less Cache

In this episode of This Week in NET, JQ Lau and Victor Hwang from our Network & Infrastructure Strategy team walk us through Cloudflare's 13th generation of servers — the machines that power a significant part of the internet across 330+ cities worldwide. The Gen 13 program doubled compute density by jumping from 96 to 192 cores, but that came with an 83% drop in L3 cache. The team explains how a bold hardware bet, combined with Cloudflare's FL2 Rust-based software rewrite, turned that trade-off into a win across throughput, latency, and power efficiency.

Post-quantum encryption for Cloudflare IPsec is generally available

While more than two-thirds of human-generated TLS traffic to Cloudflare is already protected by post-quantum cryptography, the world of site-to-site networking has been a different story. For years, the IPsec community remained caught between the high bar of Internet-scale interoperability and the niche requirements of specialized hardware. That gap is now closing.

Acronis Cyber Protect Cloud certified in AV-TEST Advanced Threat Protection for Windows

Modern cyberattacks rarely arrive in a simple, obvious form. Attackers hide malicious code inside files that look legitimate, chain multiple tactics together and use techniques designed to bypass traditional endpoint defenses. For businesses, that makes independent security testing especially valuable.

CyberPhysical Security: Protecting the Modern EV Charging Perimeter

Electric vehicles have crossed from niche technology into mainstream infrastructure. Charging networks now form a critical layer of both the energy grid and the transportation system, and attackers have noticed. EV charging sits at a three-way intersection of cloud software, operational technology, and automotive systems. Each domain has its own threat model, its own tooling, and its own team assuming someone else owns the risk. That gap is where adversaries operate.

Trusted IT Services and IT Support in Philadelphia, PA for Modern Businesses

In today's digital-first economy, technology is no longer just a support function-it is the foundation of every successful business. From communication and data storage to cybersecurity and cloud systems, organizations rely heavily on IT infrastructure to operate efficiently and stay competitive.

Sales Is a Math Problem | Vinti Batiste, VP of Enterprise Sales at Cloudflare

In this episode of This Week in NET, Vinti Batiste, VP of Sales for US Enterprise at Cloudflare, shares her 30-year journey across IBM, Cisco, and now Cloudflare — and what it really means to be in enterprise sales. Vinti talks about growing Cloudflare's enterprise business 80% year over year, the moment Michelle Zatlyn walked into her first all-hands, how she uses AI to prepare for customer meetings, and why sales is really a math problem.

Top Tools Used to Bypass Cloudflare for Web Scraping: A Security Perspective

Cloudflare protects more than 20% of all websites on the internet, according to W3Techs infrastructure data. Its layered security model combines IP reputation filtering, TLS fingerprinting, JavaScript challenges and behavioural analysis to block automated traffic before it reaches the origin server.

Shutdowns, power outages, and conflict: a review of Q1 2026 Internet disruptions

In the first quarter of 2026, government-directed shutdowns figured prominently, with prolonged Internet blackouts in both Uganda and Iran, a stark contrast to the lack of observed government-directed shutdowns in the same quarter a year prior. This quarter, we also observed a number of Internet disruptions caused by power outages, including three separate collapses of Cuba's national electrical grid.

Compliance in the Cloud: Navigating B2B Telecom Security

B2B security in the cloud is changing fast for companies in every industry. Businesses need to keep their data safe while staying connected to clients and partners across the globe. Modern telecom systems offer more than just simple voice calls or messaging. They provide a foundation for growth and meeting strict legal rules in a digital world.

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

We're proud to announce that Frost & Sullivan has named CrowdStrike a Leader for the fourth consecutive time in the 2026 Radar for Cloud-Native Application Protection Platforms. This recognition validates our continued investment in combining posture management with real-time detection and response, and reinforces our leadership in stopping cloud attacks.

What Is a Fully Managed IT Solution?

A fully managed IT solution is a service model in which a third-party Managed Service Provider (MSP) takes complete ownership of an organization's entire IT environment, covering infrastructure management, cybersecurity, cloud services, help desk support, network monitoring, data backup, and strategic IT planning, all under a single predictable monthly contract. The provider proactively monitors, maintains, and secures your systems around the clock, resolving issues before they impact business operations.

The Deep Dive | The New AI Workforce: Governing Agentic Access with JumpCloud 04.24.2026

Join us for a look into Agentic IAM: treating AI as visible, governed workforce access. We’ll discuss our MVP focus on provisioning MCP servers through JumpCloud to register actors, control access to data, and audit activity—a secure starting point for agentic growth.

Securing Hybrid Cloud Environments with Zero Trust Principles

Most security teams did not architect their hybrid cloud environment. It grew. A legacy ERP that finance refused to migrate off-premises, a Kubernetes cluster a product team spun up in GCP without telling IT, three SaaS applications that became mission-critical before anyone ran a security assessment on them, and a VPN that was supposed to be temporary in 2020 and is still running.

Ask SME Anything: What is Data Lineage?

Ever wonder about the "life story" of your data? When a data security alert triggers, investigating shouldn't mean guessing where your data came from or what happened to it along the way. In this episode of Ask SME Anything, Netskope expert Ankur Chadda breaks down the fundamentals of data lineage—the digital breadcrumb trail that tracks your data's journey from origin to its final destination.

How Torq Optimizes Agentic SecOps From Detection Through Resolution with Google SecOps

See how Torq harnesses AI in your SOC to detect, prioritize, and respond to threats faster. Request a Demo The AI SOC is cybersecurity’s fastest-growing category, and for very good reason. Machine-speed threats demand machine-speed responses, and the $82.45 billion market forming around this reality reflects just how urgent that need has become. The Torq AI SOC Platform delivers agentic insights and the ability to streamline action across the full security stack.

Implementing AI Agent Security on Azure AKS: A Practical Guide

Your platform team deployed eBPF-based runtime sensors on AKS last week. Defender for Containers is enabled. Azure Policy is enforcing pod security standards across your AI workload namespaces. And your Observe pillar is still blind — because nobody enabled the Diagnostic Setting that routes kube-audit logs to the Log Analytics workspace where your tooling can actually consume them.

How to investigate cloud credential compromise with Bits AI Security Analyst

Cloud environments create a flood of security signals, often reaching tens of thousands per day depending on the organization’s size. Security engineers and analysts spend a disproportionate share of their time triaging these signals instead of acting on legitimate threats. But the time-intensive parts of that work, such as identifying related signals and building a timeline, can be handled systematically, leaving teams free to focus on what actually requires human judgment.

Evaluate, optimize, and secure your Google Cloud AI stack with Datadog

As AI adoption accelerates on Google Cloud, the challenge for most teams today is no longer just building AI-powered applications. It’s also managing the full AI stack from end to end, including data pipelines, infrastructure, release process, and security operations. Many teams are monitoring these layers with different tools, creating complexity, fragmenting visibility, and slowing decisions on what to do next.

Securing air-gapped environments with Elastic on Google Distributed Cloud

If you are not using AI to defend against AI, you will lose. But for organizations operating in air-gapped environments, the path to AI-driven defense can be blocked by the very isolation that protects them. Today, we're announcing that Elastic Security is now the embedded security layer for Google Distributed Cloud (GDC) air-gapped environments, expanding our collaboration with Google Cloud.

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

Complexity has become a defining security challenge as organizations expand across hybrid and multi-cloud environments. In fact, 52% of surveyed organizations ranked multi/hybrid cloud complexity among their top three infrastructure concerns.1 This complexity creates fragmented visibility across cloud providers, workloads, and Kubernetes environments — gaps that adversaries increasingly exploit to move undetected.

Cyberhaven Now Transacts on All Three Major Cloud Marketplaces

In enterprise software, winning a deal is not just about product fit. The buying process matters just as much. Even when a customer is committed to moving forward, procurement friction can slow or stall a deal. New vendor setup, contract reviews, billing workflows, approval chains, and budget constraints all add complexity that extends timelines and increases the risk of deals falling apart. That is why procurement flexibility is not a back-end operational concern. It is a customer experience issue.

Best Practices for Managing Hybrid Cloud Security

As a kid, fruit punch always seemed like a magical drink. A mix of orange, cherry, apple, and cranberry created a unique flavor that differed substantially from any one juice. These hybrid drinks not only quenched thirst but their complexity made it difficult to truly recreate them by hand.

The 7 Rs of AWS Application Migration: Choosing the Right Path for Each Workload

Most application migration projects fail the same way: someone picks a single strategy for the entire portfolio, then tries to force every workload into it. Lift-and-shift everything to meet a data centre exit deadline. Refactor everything because someone read a cloud-native manifesto. Retire nothing because no one wants to make the decision. AWS’s 7 Rs framework exists to prevent that.

Cloudflare Just Shipped 20+ Features for AI Agents in One Week

The conversation explores why the Internet and the cloud were not designed for an AI-agent world, and what infrastructure needs to change as software agents begin generating code, running workflows, and interacting directly with online services. Ming and Anni walk through several announcements from Cloudflare’s Agents Week, including new tools for agent infrastructure, memory, developer workflows, AI Gateway, email, artifacts, browser automation, security, and agent-ready websites.

AI Workload Security on GKE: Evaluating Google Cloud Native vs Third-Party Solutions

A CISO running AI agents on GKE has watched three Google product launches in eighteen months — Model Armor, expanded Security Command Center coverage for AI workloads, additions to Chronicle’s curated detection content — and is being asked whether the GCP-native stack is now sufficient. The vendor demos and the Google Cloud blog say yes. The 2 AM analyst experience says something different.

The Zero-Trust Audit: Protecting Financial Intelligence in the Cloud

Digital finance is shifting away from the old way of securing data. The old method relied on a strong perimeter to keep threats out. Once someone was inside the network, they often had free rein to move around. Cloud systems make that perimeter vanish because data moves between different apps and users constantly.

12 Cloud Outages With Catastrophic Effects

There’s no infrastructure that’s always on and immune to all kinds of threats. Even the top providers leave a tiny margin in their Service Level Agreements (SLA), stating 99.999% uptime at most. The cloud, advertised as the universal cure for the problems of legacy on-premises setups, also turned out vulnerable. The most obvious and impactful manifestations of cloud vulnerability are cloud outages.

Quantum Computers Threaten Encryption - Here's the Fix | Sharon Goldberg

What happens to Internet security when quantum computers become powerful enough to break today’s encryption? In this clip from a full conversation on This Week in NET, Sharon Goldberg explains why researchers and companies are preparing for post-quantum cryptography, what could be at risk if current encryption is broken, and why the timeline may be closer than many expected. This clip is from the This Week in NET podcast about the future of encryption, quantum computing, and post-quantum cryptography.

The Cloud Goes Dark: Can Your SecOps Stack Survive a Regional Outage?

When nation states target cloud infrastructure, MSSPs are at risk. Many security teams have quietly accepted this as someone else's problem. It isn't, and ignoring the problem only increases their risk exposure. A recent episode of the Cybersecurity Defenders Podcast featured a conversation on cloud infrastructure vulnerability between LimaCharlie Co-Founder Christopher Luft and Prophet Security R&D Guru, Matt Bromiley.

What AWS Transform Means for Your Application Modernization Strategy

Technical debt costs US enterprises an estimated $2.41 trillion per year, according to Accenture research cited by AWS. For most organisations, roughly 30% of engineering time gets absorbed by maintaining legacy systems – work that’s necessary, but produces no new business value. That’s the problem AWS has been trying to solve with AWS Transform, its agentic AI service for enterprise application modernization.

GitProtect 2.2.0: GitHub Enterprise Cloud with Data Residency Backups, AES-GCM Encryption, and More

The huge news is coming: GitProtect is the first solution on the market to support the backup of the GitHub Enterprise Cloud with Data Residency environments. The launch of version 2.2.0 also brings more secure and efficient AES-GCM encryption, a refreshed dashboard, a new onboarding experience, support for Azure DevOps related work links, and much more. Let’s dive into all the new features.

Managed OAuth for Access: make internal apps agent-ready in one click

We have thousands of internal apps at Cloudflare. Some are things we’ve built ourselves, others are self-hosted instances of software built by others. They range from business-critical apps nearly every person uses, to side projects and prototypes. All of these apps are protected by Cloudflare Access. But when we started using and building agents — particularly for uses beyond writing code — we hit a wall. People could access apps behind Access, but their agents couldn’t.

Securing non-human identities: automated revocation, OAuth, and scoped permissions

Agents let you build software faster than ever, but securing your environment and the code you write — from both mistakes and malice — takes real effort. Open Web Application Security Project (OWASP) details a number of risks present in agentic AI systems, including the risk of credential leaks, user impersonation, and elevation of privilege.

Secure private networking for everyone: users, nodes, agents, Workers - introducing Cloudflare Mesh

AI agents have changed how teams think about private network access. Your coding agent needs to query a staging database. Your production agent needs to call an internal API. Your personal AI assistant needs to reach a service running on your home network. The clients are no longer just humans or services. They're agents, running autonomously, making requests you didn't explicitly approve, against infrastructure you need to keep secure.

"It's Quite a Shock": The Quantum Deadline Is Real

In this World Quantum Day special edition of This Week in NET, host João Tomé is joined by Bas Westerbaan (Principal Research Engineer) and Sharon Goldberg (Senior Director, Product) to explain why the timeline for post-quantum cryptography may be arriving sooner than expected. Recent research suggests the number of qubits required to break today’s encryption could fall dramatically, accelerating the urgency for companies and the Internet ecosystem to migrate to post-quantum security. Google has set a 2029 migration target, and Cloudflare is working toward a similar timeline.

Understanding Cloudflare's network architecture

For decades, enterprise IT relied on a “hub and spoke” security model. But between the explosion of cloud infrastructure, SaaS apps and a remote workforce, that old perimeter hasn't just cracked—it’s shattered. In an attempt to stay on top of the advancing perimeter, many different solutions from many vendors entered the market and created a "spaghetti mess" of point solutions that drive up costs and tank user experience. Cloudflare is an answer to this problem, delivering everything you need to secure your apps, networks, users, data and devices.

Lightboard series - Secure your AI-powered applications with Cloudflare

Humair from Cloudflare walks through the details of how Cloudflare's AI Security for Apps secures AI-powered applications. Learn how Cloudflare can discover AI/LLM endpoints and detect and mitigate AI-specific threats like PII exposure, unsafe/toxic content, prompt injection and jailbreak. Learn more.

How to Back Up Microsoft 365 to AWS: A Comprehensive Guide

Microsoft 365 services are productive and reliable, but data loss can occur for various reasons. For example, a user may accidentally delete data or a ransomware infection may spread from local computers whose folders are synchronized with the cloud storage. Thus, Microsoft 365 backup is important for data protection and business continuity. With backups, you can recover the needed data and ensure uninterrupted workflows.

Lift and Shift vs. Refactor: Choosing the Right AWS Migration Strategy

The debate over lift and shift versus refactoring is one of the most persistent in cloud migration planning. It’s also frequently framed as a binary choice when it shouldn’t be. Most organizations will do both — the question is which approach applies to which workload, and in what order. Getting this decision wrong is expensive. Over-refactoring adds months to migration timelines and cost that’s difficult to justify.

Opti9 Becomes Authorized Anthropic Reseller via Amazon Bedrock

Opti9 recently announced it has been approved as an authorized reseller for Anthropic models through Amazon Bedrock, further strengthening its ability to deliver secure, enterprise-grade AI solutions on Amazon Web Services (AWS). In October, AWS enabled its Solution Provider Partners to resell Amazon Bedrock, a fully managed service that provides access to a wide range of leading foundation models from top providers.

How we built Organizations to help enterprises manage Cloudflare at scale

Cloudflare was designed to be simple to use for even the smallest customers, but it’s also critical that it scales to meet the needs of the largest enterprises. While smaller customers might work solo or in a small team, enterprises often have thousands of users making use of Cloudflare’s developer, security, and networking capabilities. This scale can add complexity, as these users represent multiple teams and job functions.

How Minimal Container Images Are Reshaping the Fight Against CVE Exposure in Modern Cloud Environments

As the adoption of containers grows across Cloud infrastructure, Cybersecurity experts and DevSecOps leaders continue to deal with the persistent surge of publicly available software vulnerabilities. The National Vulnerability Database documented an alarming figure of 29,000 CVEs for 2023, and the numbers since then show no signs of slowing down. Research shows that the majority of production container images have known vulnerabilities. This article explores the relationship between container images and CVE vulnerabilities (exposure), the growing burden of compliance, and the target risk reduction of minimal-image strategies.

3 Surprising Facts About Cloudflare's Public Sector Impact

Federal Sales Director Anish Patel reveals three things government agencies may not know about Cloudflare, from its role in protecting the entire.gov domain via CISA to its massive scale processing 20% of all web traffic. Learn how Cloudflare delivers commercial-grade innovation to the federal sector without the usual friction or technical barriers.

Top 3 Federal IT Priorities: A Strategy for Modernization

Federal Sales Director Anish Patel outlines the three anchors of a modern federal IT strategy: digital experiences, AI innovation, and assertive defense. Discover how Cloudflare provides the unique platform needed to accelerate all three priorities simultaneously while protecting critical government networks.

Digital Transformation in Manufacturing: Complete Implementation Guide

The integration of software, data, and machines is the key driving factor of digital transformation in the manufacturing industry. By leveraging technology such as: Manufacturers can improve productivity, reduce costs, and enhance decision-making. Scalable by design, these systems also support long-term growth and innovation.

Why This AWS Move Matters

Over the past year, I have spent a lot of time with security leaders who are trying to navigate the same tension. They know their operations need to move faster. They know the volume, speed, and complexity of what lands in the SOC are not going to ease up. But they are also trying to make smart decisions in environments where trust matters, governance matters, and the cost of getting it wrong is real.

Our ongoing commitment to privacy for the 1.1.1.1 public DNS resolver

Exactly 8 years ago today, we launched the 1.1.1.1 public DNS resolver, with the intention to build the world’s fastest resolver — and the most private one. We knew that trust is everything for a service that handles the "phonebook of the Internet." That’s why, at launch, we made a unique commitment to publicly confirm that we are doing what we said we would do with personal data.

AWS Accelerator Program: How to Move to the Cloud Faster (and Cheaper)

Cloud migrations have a reputation for running over budget and behind schedule. That reputation isn’t entirely undeserved — migrations done without structure often do. But AWS has invested heavily in programs that give businesses a faster, cheaper path to the cloud, and most organizations don’t know they exist or how to access them. The AWS Accelerator Program is one of the more practical frameworks available for SMBs and mid-market companies planning a move to AWS.

Sovereign Cloud vs Public Cloud: A Side-by-Side Technical Comparison

Cloud adoption is no longer a binary decision. Most enterprises already use public cloud in some form. The real question in 2026 is whether that model satisfies growing requirements around data residency, regulatory compliance, and jurisdictional control. Sovereign cloud has emerged as a response to those pressures. It is designed to ensure that data, infrastructure, and operational control remain within a defined legal boundary. For organizations operating in regulated industries or across multiple jurisdictions, that distinction has become critical.