Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why Endpoints are Still a Data Security Problem in the Age of AI

After decades of innovation in personal technology, ranging from watches that track personal fitness, mini super-computers that we call phones, and a whole host of other gadgets and self-help technologies, our companies still rely on one technology that started over 45 years ago – the laptop. Fun fact: the first one, called the Osborne 1, weighed 24 pounds! The modern laptop has a better screen, longer battery life, and weighs significantly less, but at its core is still a hard drive.

Code Orange: Fail Small is complete. The result is a stronger Cloudflare network

Over the past two and a bit quarters, we've undertaken an intensive engineering effort, internally code-named "Code Orange: Fail Small", focused on making Cloudflare's infrastructure more resilient, secure, and reliable for every customer. Earlier this month, the Cloudflare team finished this work.

AI-SPM for Healthcare: HIPAA-Compliant AI Posture Management

A healthcare CISO opens her AI-SPM dashboard at the start of the quarter. Every clinical AI agent in the cluster reads green: full AI-BOM coverage, every permission scope reconciled, the HIPAA compliance tag clean across the fleet. The ambient scribe, the prior-authorization assistant, the oncology decision support agent — all monitored, all green, all the way through. Six months later, the Office for Civil Rights opens an investigation.

AI Threat Detection for Healthcare: Protecting Patient Data from AI-Mediated Attacks

For six weeks, a mid-size hospital system’s CDS agent issued recommendations biased by a poisoned guideline summary. No detection alert fired. The drift — denial recommendations in cases sharing one specific clinical attribute — traced back to a guideline an outside contributor had quietly reweighted in editorial review. Every existing detection stack reported green. DLP: no PHI left the cluster. EHR audit log: agent reading and writing within scope. Network egress: normal traffic.

Sandboxing AI Agents on AKS: Network Policies, Workload Identity, and Least Privilege

Your AI agent runs on AKS with a managed identity that can read Azure Key Vault, and you assume prompt injection is a theoretical risk—until a malicious prompt drives that agent to steal credentials from the Azure metadata endpoint in under a minute. Most teams discover this gap when their SIEM shows a single request to 169.254.169.254, but they cannot trace it back to which agent tool or prompt triggered it, or how far the stolen token traveled across their Azure environment.

Beyond the Bug: Why Cybersecurity Still Matters Even If AI Improves Secure Development

Anthropic has officially launched Claude Security, moving its AI‑driven code vulnerability detection, validation, and patching capabilities from a limited research preview into public beta. Improving software security before code ships is a positive step for the industry and can help reduce future risk. However, stronger secure‑by‑design development does not address the scale of exposure organizations face today.

When Technology Stops Cooperating: Why Businesses Lean on the Right IT Support

There's a moment most businesses hit-sometimes quietly, sometimes all at once-when technology starts getting in the way instead of helping. Maybe it's a system that keeps freezing at the worst possible time. Maybe emails go missing. Or maybe everything technically works, but just... slower than it should. Nothing dramatic, just enough friction to make people sigh a little more often during the day. That's usually when the idea of bringing in an IT Services Companystops feeling optional.