Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Introducing Astra Cloud Vulnerability Scanner: Multi-Cloud Security Built for Scale

1.8X, that’s how much cloud vulnerabilities have skyrocketed over the past year, fueled not just by attackers but by the routine tweaks teams make every day. Modern vulnerability scanners were built to find everything that looks risky. They just never learned to tell what actually is. Dashboards lit with thousands of “critical” alerts, endless CSVs, and reports that read like alarm bells on repeat. Yet less than 10 percent of those alerts ever lead to a real exploit.

How Opti9's Acquisition of Aptible Creates the Complete Compliance-First Cloud Solution

Opti9’s acquisition of Aptible, announced November 2025, fills a critical gap in how companies navigate cloud adoption in regulated industries. For over a decade, Aptible has been the go-to Platform as a Service (PaaS) for developers building healthcare applications that need HIPAA compliance from day one. Hundreds of startups and development teams have used Aptible to ship code without worrying about infrastructure complexity or compliance documentation.

Introducing CTRL: ARMO's Cloud Threat Readiness Lab

If you are dealing with securing cloud infrastructure, containers and applications, you probably have several security tools in place including cloud posture (CSPM/CNAPP), container security and runtime security. Tool coverage might look good on paper, but how can you know they work against real attacks? ARMO CTRL (Cloud Threat Readiness Lab) helps you test your cloud security tools by deploying a safe, controlled attack lab that mimics real attack behaviors end‑to‑end.

Obscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI Browsers

SquareX released critical research exposing a hidden API in Comet that allows extensions in the AI Browser to execute local commands and gain full control over users' devices. The research reveals that Comet has implemented a MCP API (chrome.perplexity.mcp.addStdioServer) that allows its embedded extensions to execute arbitrary local commands on users' devices, capabilities that traditional browsers explicitly prohibit. Concerningly, there is limited official documentation on the MCP API.

Seraphic Becomes the First and Only Secure Enterprise Browser Solution to Protect Electron-Based Applications

Seraphic, the leader in enterprise browser security (SEB) and AI enablement, today announced native protection for Electron-based applications such as ChatGPT desktop, Teams, Slack, and more, becoming the first and only browser security platform to introduce this capability.