"AI is evolving fast, but so are the risks" - AI Week 2025
Next week, we’re launching new ways to secure AI use, protect content, and empower developers. Kenny Johnson tease what’s coming at Cloudflare (Aug 25–29).
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Cloudflare Radar Reels Ep 5 - Powering AI with Global Scale & Real-Time Insights
AI breakthroughs demand speed, scale, and visibility. From image creation to real-time text analysis, next-gen AI depends on lightning-fast networks. Cloudflare’s presence in 330+ cities makes it happen. Cloudflare's Radar Display gives you a front-row view of the trends shaping AI’s future.
What C-Levels Should Know About Enterprise Cloud Backup
Enterprise cloud backup keeps your business running when disaster strikes. Organizations lose an average of $5,600 per minute during downtime, making reliable data protection non-negotiable for companies running applications across multiple clouds, containers, and virtual environments. Traditional backup methods fail with modern distributed infrastructure; you need enterprise backup strategies that scale with your actual environment, not outdated approaches that worked a decade ago.
MURKY PANDA: A Trusted-Relationship Threat in the Cloud
Since 2023, CrowdStrike Services and CrowdStrike Counter Adversary Operations have investigated multiple intrusions conducted by MURKY PANDA, a sophisticated adversary leveraging advanced tradecraft to compromise high-profile targets. MURKY PANDA, active since at least 2023, is a cloud-conscious adversary with a broad targeting scope; the adversary’s operations have particularly focused on government, technology, academia, legal, and professional services entities in North America.
How a volunteer-run wildfire site in Portugal stayed online during DDoS attacks
On July 31, 2025, just as Portugal entered the peak of another intense wildfire season, João Pina, also known as Tomahock, received an automated alert from Cloudflare. His volunteer-run project, fogos.pt, now a trusted source of real-time wildfire information for millions across Portugal, was under attack. One of the several alerts fogos.pt received related to the DDoS attack.
Runtime Security vs. Static Security in the Cloud
Cloud security is often divided into two: Runtime Security and Static Security. While both are crucial to protecting cloud environments, they differ significantly in their objectives, methodologies, and effectiveness against different types of threats. Understanding these differences helps organizations build a robust security strategy by leveraging the strengths of both.
JumpCloud vs. Kandji: Is Your IT Platform Built for a Diverse World?
Don’t settle for an Apple-only approach when your IT environment is diverse. This video reveals the critical difference between a single-focus point solution like Kandji and a unified platform that brings together identity, access, and device management. Learn why a holistic solution is essential for true UEM, controlling the entire user lifecycle, and ensuring a single secure identity for every resource in your multi-platform business.
How external attackers and malicious insiders exploit standing privileges in the cloud
For many of us, the term “cloud security breach” conjures meticulous attack plans executed by sophisticated criminal syndicates. But in reality, “attacks” can be far more mundane: maybe some forgotten credentials, a few default permissions, or a user whose cleanup to-do list never got done. At the center of these incidents are standing privileges: long-lived access rights originally granted for legitimate tasks.
How to Hack a Cloud Access Mismanagement
Protect Your Cloud: Prevent Access Mismanagement with CyberArk Secure Cloud Access Discover how to safeguard your cloud environment from access mismanagement in this eye-opening episode of How to Hack a Cloud: Access Mismanagement. The video demonstrates how attackers exploit standing AWS IAM access keys, turning a common oversight into a major security breach.
How to Hack a Cloud: Insider Threat
In this episode of How to Hack a Cloud: Insider Threat, discover how standing administrative access in AWS can be exploited by a disgruntled employee. Follow Michael Scott’s story as he misuses his S3 admin privileges to silently delete critical data, leaving the company blindsided. Learn how CyberArk Secure Cloud Access enforces Zero Standing Privileges, ensuring time-bound, need-based access to prevent such malicious activity—all while maintaining seamless workflows for legitimate tasks. See how this solution strengthens identity security across multi-cloud environments.