Next week, we’re launching new ways to secure AI use, protect content, and empower developers. Kenny Johnson tease what’s coming at Cloudflare (Aug 25–29).
Organizations gather massive volumes of threat feed data—IP addresses, hashes, domains, tactics—but these often remain siloed or poorly correlated, leaving high-value alerts buried in noise. When those raw indicators live in separate systems, you end up chasing every alert, missing the bigger picture of coordinated attacks. Your team feels stuck in reactive mode, firefighting low priority alerts while real attackers move freely.
When most people think about cybersecurity, they picture firewalls, anti-virus software, and complex passwords. But the weakest link isn’t a server or a laptop—it’s a person. Social engineering attacks exploit human behavior rather than technical vulnerabilities, and four techniques dominate the landscape today: phishing, smishing, vishing, and quishing.
Data is moving faster than your controls. In 2024, AI privacy/security incidents jumped 56.4%, and 82% of breaches involve cloud systems; the same lanes your LLMs, agents, and RAG pipelines speed through every day. If you’re shipping GenAI inside a regulated org, you need guardrails that protect PII/PHI and IP without crushing context or tanking accuracy. Use this guide to.
As you can tell I’m on a bit of a “migrate all the things” story arc here of late and today will be the latest installment. In my last post I covered using the VeeaMover capability to move backups between repositories or jobs but that is not an effective data migration mechanism if you’ve used the Capacity Tier “COPY” capability of a Veeam Scale Out Backup Repository (SOBR).
Think again before accepting a random Cash App payment from a stranger – it may be a scam! Watch this short video to learn the risks, what to do if you receive an unexpected payment and how to use Cash App safely.
Cybercriminals can use leaked credentials to steal your identity and access your accounts. Watch this short video to learn how to check if your data has been exposed and what steps you should take to stay secure.
Watering hole attacks can compromise your entire organization by targeting frequently visited websites. Watch this video to learn how watering hole attacks work, the warning signs and best ways to prevent them.
Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.
Meeting the intent of a standard is key for any auditor. Experience with PCI DSS can be very helpful. It's pretty standard outside of the PCI DSS size. Compliance isn’t just about checking boxes. Done right, it’s a powerful decision-making tool. It should help you understand what really matters, and where to act.