Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Cloud-Native Security Makes XDR More Powerful in 2025

As businesses move to the cloud, security approaches need to move at the same pace. By 2023, 70% of workloads will be running in cloud environments—but traditional defenses lag behind. With an average of 1,427 cloud services in use and cloud security expenditures projected to explode past $48.9 billion by 2026, the risks have never been greater. Extended Detection and Response (XDR) is stepping up as an unstoppable force, particularly when being driven by cloud-native architecture.

A global virtual private cloud for building secure cross-cloud apps on Cloudflare Workers

Today, we’re sharing a preview of a new feature that makes it easier to build cross-cloud apps: Workers VPC. Workers VPC is our take on the traditional virtual private cloud (VPC), modernized for a network and compute that isn’t tied to a single cloud region. And we’re complementing it with Workers VPC Private Links to make building across clouds easier.

Splunk Security Ops: Building the Blueprint for Success

Let’s be real—running Security Operations is like trying to drink from a firehose while juggling chainsaws blindfolded at the same time. The threats don’t take weekends, the alerts never stop, and just when you think you’ve seen it all, some new attacker decides to get creative. And let’s not forget we are simultaneously managing the needs of the business and managing a global team seated all over the world.

5 mindset shifts security teams must adopt to master multi-cloud security

Level Up Your Security Game: Time for a Mindset Reset! Hey everyone, and welcome! If you're involved in keeping your organization safe online these days, you're in the right place. For years, security felt like building a super strong castle with thick walls and a deep moat, hoping the bad guys would just stay outside. But let's be real, in our multi-cloud world, that castle is starting to look a little... outdated. Think about it: your apps and data aren't neatly tucked away in one place anymore.

Thinking Critically About Security: The Assumed Breach Mindset

In a field flooded with tools, buzzwords, and compliance checklists, critical thinking is what cuts through the noise. It’s not just about following frameworks – its about asking the right questions. How does this control actually reduce risk? Is this alert meaningful, or just noise? What’s the intent behind the regulation, and how does it apply to my environment? Cybersecurity isn’t static. Threats evolve. So do the technologies and motivations behind them.

Analyzing llama.cpp Servers for Prompt Leaks

The proliferation of AI has rapidly introduced many new software technologies, each with its own potential misconfigurations that can compromise information security. Thus the mission of UpGuard Research: discover the vectors particular to a new technology and measure its cyber risk. This investigation looks at llama.cpp, an open-source framework for using large language models (LLMs).

From NIS to NIS 2: How to navigate the updated directive

The Network and Information Security 2 (NIS 2) directive is a successor to the original NIS directive. Its purpose is to strengthen the cybersecurity posture of the businesses and organizations it covers across different sectors. ‍ NIS 2 expands on the original directive with notable changes and updates aimed at consolidating and strengthening cybersecurity practices in EU Member States.

25 European Tech Companies Offering Private, Secure Services

Due to recent events happening worldwide, the US specifically, many people are looking for European tech companies to move away from big tech and switch to more private, secure solutions that value our data rather than profit from it. Moving away from any service can be challenging, and with companies like Google monopolizing the tech world, finding alternatives can seem almost impossible.

The evolution of the Sysdig Agent

For the past six years, I’ve had the unique privilege of contributing to and witnessing the evolution of Sysdig Agent. As a Technical Writer, I create educational content that helps Sysdig customers get the most value out of it. The Sysdig Agent, which began as a simple sniffer probing system calls, has transformed into a powerful defender of cyber threats and vulnerabilities, safeguarding workloads across regions—and even underwater in submarines! How cool is that?