Everything you need to know about NIST's new guidance in "SP 1800-35: Implementing a Zero Trust Architecture"

For decades, the United States National Institute of Standards and Technology (NIST) has been guiding industry efforts through the many publications in its Computer Security Resource Center. NIST has played an especially important role in the adoption of Zero Trust architecture, through its series of publications that began with NIST SP 800-207: Zero Trust Architecture, released in 2020.

Leading the Next Evolution of Cybersecurity: From Threat Management to Real-Time Risk

The cybersecurity landscape has reached a turning point. In this article, George Patsis, CEO of Obrela, challenges the traditional, tool-centric approach to cyber defense and goes through Obrela’s ground breaking approach to: real-time risk management. With cyber threats growing more complex and unpredictable, organizations must shift from reactive threat detection to a context-aware, business-aligned risk management.

Defending the Internet: how Cloudflare blocked a monumental 7.3 Tbps DDoS attack

In mid-May 2025, Cloudflare blocked the largest DDoS attack ever recorded: a staggering 7.3 terabits per second (Tbps). This comes shortly after the publication of our DDoS threat report for 2025 Q1 on April 27, 2025, where we highlighted attacks reaching 6.5 Tbps and 4.8 billion packets per second (pps). The 7.3 Tbps attack is 12% larger than our previous record and 1 Tbps greater than a recent attack reported by cyber security reporter Brian Krebs at KrebsOnSecurity.

Private Cloud: Your Best Resource

The dictionary (at least the online version) defines the word trend as a general direction in which something is developing or changing. It also does have a secondary definition relating to fashion, but unless we want to cover off on some questionable choices I made when younger, we can skip that one. When does something move beyond being a trend, and create a lasting shift in behavior–or for the purposes of our discussion, technology?

Unleash the Tiger: Fast, Smart, and Targeted Cybersecurity Testing from Trustwave SpiderLabs

Trustwave's Consulting and Professional Services, spearheaded by our elite SpiderLabs team has been a leader in helping clients through our renowned red and purple team test. Now, we're taking a leap forward with the introduction of Tiger Team Testing, designed to deliver rapid, targeted results at a lower cost.

AI Security Guide: Protecting models, data, and systems from emerging threats

AI security is where traditional cybersecurity meets the chaotic brilliance of machine learning. It’s the discipline focused on protecting AI systems—not just the code, but the training data, model logic, and output—from manipulation, theft, and misuse. Because these systems learn from data, not just logic, they open up fresh attack surfaces like data poisoning, model inversion, and prompt injection.

How to Test Your Website Security Online

According to the Verizon 2025 Data Breach Investigations Report (DBIR), exploitation of vulnerabilities saw a sharp 34% increase as an initial access vector compared to the previous year. This places it among the top methods attackers use to infiltrate organizations, alongside phishing and credential theft. The message is clear: even one unpatched vulnerability on your website can lead to data breaches, service downtime, and long-term reputational damage. The good news? These threats are preventable.

Cryptography Terms Explained: Definitions And Concepts Made Simple

Interested in learning more about cryptography but don’t know where to start? We break down the common cryptography terms in a simple and clear way, to help you understand how companies encrypt your data in a safe and secure way. From there, you can dive deeper into the world of cryptography and learn more about this important and fascinating concept.