Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Your scanner just flagged 4,000 new vulnerabilities, 78 of them critical. Which one do you fix first? To answer that question, Cloudflare is announcing early access to Vulnerability Discovery and Remediation, now part of Cloudflare Managed Defense. Vulnerability Discovery and Remediation is a new, invitation-only Cloudflare service that helps customers detect and mitigate vulnerabilities in their codebases.

Certificate monitoring from the cloud only sees what the internet sees, like your public websites. But the vCenter console, the internal API, the switch management page, or that thing on db01.corp.internal are invisible to it. Those certificates expire just like public ones. They just don’t warn anybody first. This gap became very clear when we shipped Private PKI. Now CertKit can issue certificates for internal names and IP addresses, deploy them, and install the root into your trust stores.

Your business is growing. Your IT team is doing a solid job. And your cybersecurity feels like it’s broadly in order. You’ve got firewalls in place, antivirus software running, and backups happening somewhere. But there’s a nagging question that won’t quite go away; Do you actually know where you stand from a cybersecurity perspective? For many organisations, the honest answer is no. Not really.

How teams are leaving value on the table and what it costs when they do It's 3:00 a.m. Your on-call engineer gets paged that the central processing unit (CPU) is at 97% on payment-processor-01. They open their observability platform, look at the metric spike, reboot the host, and close the ticket.

Ask a room of security leaders whether they have a complete, current inventory of everything on their network, and watch how long it takes anyone to say yes. Effort is rarely the issue. Modern environments change faster than any single record can keep up with. A configuration management database (CMDB) shows what was documented. An endpoint tool shows where its agent is installed. A scanner shows what it was told to scan.

ISO 42001 is the management system standard for artificial intelligence. It sits on the backbone of ISO 27001 but with a different focus: do you have a system for governing AI, and can you prove that system runs, with evidence? Core to the standard is an Artificial Intelligence Management System (AIMS), a structured set of policies, processes, and controls an organization uses to govern AI.

The tokenmaxxing era has left companies grappling with an uncomfortable reality. Now that AI vendors have switched to usage-based billing models, businesses are facing sky-high bills, and IT and finance teams are under pressure to rein in spending without slowing down innovation.