Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

WatchGuard Named a Leader in the 2025 SPARK Matrix for NDR

WatchGuard has been named a Leader in the 2025 SPARK Matrix: Network Detection & Response (NDR) by QKS Group, recognizing our continued focus on delivering advanced, accessible, and high-impact security for midsize enterprises and managed service providers. The SPARK Matrix report delivers a detailed analysis of the global NDR landscape, evaluating vendors across technology excellence and customer impact.

Why Small Businesses Are Prime Targets for Hackers

Small businesses are prime targets because attackers can scale low-effort techniques across thousands of similar environments, while many SMBs lack full-time security staff and mature controls. New data shows SMBs are targeted far more often than large organizations, and reported cybercrime losses climbed to 16.6 billion dollars in 2024. Strong identity, basic hardening, and regular validation reduce the risk fast.

Modernize threat detection and SOC efficiency with integrated Corelight Threat Intelligence

In the ever-escalating battle against cyber threats, security teams are often caught in a deluge of alerts, struggling to distinguish real threats from the noise. The sheer volume of threat data can be overwhelming, leading to alert fatigue and, worse, missed detections. But what if you could really cut through the clutter and focus on what truly matters?

Corelight's enhanced threat detection: staying ahead of evasive threats

In today's rapidly evolving cybersecurity landscape, organizations face unprecedented challenges. Cyber threats are not only increasing in volume but are also becoming more sophisticated and evasive, using AI themselves to enhance their attacks. The attack surface has expanded dramatically, while Security Operations Centers (SOCs) are often left with fewer resources to combat these growing threats.

Episode 1: Typhoon Season with Vincent Stoffer

Richard Bejtlich sits down with Vince Stoffer, Corelight's Field CTO, to dive into the recent wave of cyberattacks attributed to Chinese threat actors, known as "Typhoon" groups. Vince unpacks the distinctions between "Volt Typhoon," targeting critical infrastructure sectors such as energy and transportation, and "Salt Typhoon," which is infiltrating telecommunications networks for espionage. The conversation explores the evolving tactics, techniques, and procedures (TTPs) used by these groups, including their exploitation of zero-day vulnerabilities and outdated infrastructure.

Silence of the Daemons: Why Evasion Isn't About Location and NDR's Role in the Cloud

In this talk, David Burkett, Cloud Security Researcher at Corelight, highlights how timeless evasion tactics create critical blind spots in cloud workloads, and illustrates the role of Network Detection and Response (NDR) as a resilient countermeasure. Presented on October 30, 2025 for Datadog Detect.

How Cybercriminals Bypass Your Defenses (And How to Stop Them)

Malware can seriously disrupt a computer's functionality. Performance issues are only the beginning, with the worst cases involving credential theft, data theft, or monetary theft. Malware is annoying, but it can also be dangerous. Simply put, you don't want malware to make its way onto your devices. That's what antivirus software is for.

Online Games and Internet Speed: How to Match Your Connection to Your Playstyle

When it comes to online gaming, your internet speed is only part of the story. Many players obsess over their download rate, but for most games, low ping and a stable internet connection matter even more. Whether you're snipping opponents in a competitive shooter, exploring open-world RPGs with friends, or teaming up in a massive MMO, your network's performance can mean the difference between your victory and your defeat.

RPAM vs VPN: What's the Difference?

Organizations that support remote work and third-party access face increased security risks to critical systems. While Virtual Private Networks (VPNs) have been the traditional answer for securing remote access, they cannot keep up with modern security and compliance needs, which can be better managed through a Remote Privileged Access Management (RPAM) solution.

Clean IPs are the Foundation of Network Automation Success

Every automation initiative starts with excitement, intent-based networking, AI-driven decisions, and Python scripts promising speed and resilience. But when someone asks, “Do we know what IPs are in use?” silence often follows. If your IP tracking lives in spreadsheets, you’re not alone, but you are vulnerable. Before writing a single script, teams need an authoritative and current IP source of truth.