Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Generic secrets are hard to detect and are getting leaked more often. See how GitGuardian offers advanced protection where GitHub's push protection falls short.

In the afternoon on Friday, March 14, 2025, details began to emerge about a serious security exploit on a popular GitHub Action called changed files (tj-actions/changed-files). About 23,000 GitHub repos use this Action as part of their CI and DevOps workflows. It allows you to track which files have changed across branches and commits. An attacker with write privileges on the Action repo made a commit that caused encrypted secrets to appear in plaintext in the GitHub Action logs.

At Cloudflare, we are constantly innovating and launching new features and capabilities across our product portfolio. Today, we're releasing a number of new features aimed at improving the security tools available to our customers. Automated security level: Cloudflare’s Security Level setting has been improved and no longer requires manual configuration.

Accessing private content online, whether it's checking email or streaming your favorite show, almost always starts with a “login” step. Beneath this everyday task lies a widespread human mistake we still have not resolved: password reuse. Many users recycle passwords across multiple services, creating a ripple effect of risk when their credentials are leaked.

Certifications validate a professional’s knowledge and skills. As a result, they enhance career prospects by establishing credibility that individuals are equipped to handle evolving cyber threats.

Trust is critical to the success of every business. But building, scaling and demonstrating trust is getting harder for UK organisations. ‍ Vanta’s second annual UK State of Trust Report uncovers key trends across these areas of security, compliance and the future of trust. Surveying 1,000 business and IT leaders in the UK, our research found that more than half (54%) of UK organisations say that security risks for their business have never been higher. ‍

In today’s fast-paced cybersecurity landscape, CISOs (Chief Information Security Officers) face an undeniable reality: they simply cannot oversee every detail of their security operations. With expanding attack surfaces, regulatory pressures, and the need for 24/7 vigilance, micromanagement is neither sustainable nor effective. Instead, modern CISOs must master the art of delegation while maintaining control—an intricate balancing act akin to a Michelin-starred chef running a high-end kitchen.

You’re sitting in your office, staring at a screen filled with data. Customer information, financial records, sensitive business intel – it’s all there, flowing through your systems like digital lifeblood. That data, however, isn’t just sitting behind your firewall anymore. It’s zipping across cloud platforms, being crunched by AI models, and shared with partners across the globe. Welcome to the new reality of data security.

If your website is targeting multiple states or countries, by default, you face a double-pronged challenge: adapting to regional regulatory demands while defending against sophisticated cyber threats. Tackling this requires localization. But what does the term actually entail? Localization isn’t just about tailoring products, services, and infrastructure to meet local market requirements; it has emerged as a critical tool for compliance and cybersecurity threat mitigation.