How to Set Up AWS Traffic Mirroring for Astra API Monitoring | Full Step-by-Step Guide

This tutorial provides a complete walkthrough for setting up AWS VPC Traffic Mirroring to enable packet-level monitoring with Astra’s API Security platform. You'll learn how to configure a scalable and production-ready environment using Network Load Balancers, Nitro-based EC2 instances, and properly filtered traffic sessions. The guide includes: It also covers key assumptions, unsupported configurations (like classic/Xen instances), and best practices for a secure and efficient deployment.

Security for AI: enabling secure AI adoption across the enterprise

AI is transforming productivity across every industry—from marketing and design to legal and engineering. But while employees rush to embrace tools like ChatGPT, Gemini, and Microsoft Copilot, many are using other tools without oversight from IT or security. As this grassroots usage grows, so does the volume—and sensitivity—of data flowing into AI tools.

Whole-of-State Cybersecurity: A Unified Approach to Protecting Government

In today’s era, where the digital landscape is as critical as the physical, the urgency to adapt and reinforce our cybersecurity infrastructure is more pressing than ever. For government operations, where data breaches and cyberattacks frequently make the headlines, adopting a whole-of-state approach to cybersecurity isn’t just a precaution—it’s a strategic imperative to protect our communities and safeguard our future.

Egnyte CMMC Compliance Overview

Cybersecurity Maturity Model Certification (CMMC) is a certification program that’s required for all U.S. Department of Defense (DoD) contractors to ensure they have the necessary controls to protect sensitive information. CMMC is anticipated to appear in DoD contracts as early as mid-2025. Egnyte provides an EgnyteGov secure data enclave to help manage CUI and FCI and to help you achieve compliance. Sign up for our CMMC consultation to learn how Egnyte can help with your CMMC compliance journey, so you can continue bidding on DoD contracts.

How to Set Up Astra Traffic Collector in a Linux VM | Complete Installation & Troubleshooting Guide

This tutorial provides a complete guide to deploying Astra Traffic Collector inside a Linux-based VM across cloud platforms like AWS, GCP, Azure, or DigitalOcean. It includes all necessary installation steps and configuration best practices for traffic monitoring in VM environments. In this video, we cover: This guide is designed for DevOps, security engineers, or platform teams looking to integrate deep traffic visibility into their environments with minimal overhead.

AI and Compliance with Adam Winston

This week on the podcast, we bring in Adam Winston, former CSO of ActZero and current Field CTO for Managed Services at WatchGuard to discuss automating the SOC with AI. We cover the history of AI in SecOps, the good and bad applications of AI and Machine Learning, what the future looks like, and how compliance might impact our ability to get there.

Yet Another NodeJS Backdoor (YaNB): A Modern Challenge

During an Advanced Continual Threat Hunt (ACTH) investigation conducted in early March 2025, Trustwave SpiderLabs identified a notable resurgence in malicious campaigns exploiting deceptive CAPTCHA verifications. These campaigns trick users into executing NodeJS-based backdoors, subsequently deploying sophisticated NodeJS Remote Access Trojans (RATs) similar to traditional PE structured legacy RATs.

Unlocking New Jailbreaks with AI Explainability

In this post, we introduce our “Adversarial AI Explainability” research, a term we use to describe the intersection of AI explainability and adversarial attacks on Large Language Models (LLMs). Much like using an MRI to understand how a human brain might be fooled, we aim to decipher how LLMs can be manipulated.