Dimitris Georgiou has been a self-professed computer geek since the early 80s. At university, he studied the convergence of educational technology with computer science as part of his psychology MA – finding, to his disbelief, that systems were perilously insecure. Since then, he’s always worked in and around cybersecurity.

We’ve been going back and forth on whether to publish this post. As the maintainers of Kubescape, a fellow CNCF open-source security project, we feel the weight of what happened to Trivy not as distant observers, but as people who see their successes and failures as our own. The Trivy maintainers are our friends. We share the same CNCF community, attend the same KubeCon-s, and fight the same fights (and share the same flights ).

Domains are foundational to digital trust. You visit your favorite online store or log in to your email without thinking twice about the web address in your browser. But what happens if that domain has been hijacked and you have just entered your personal information into an attacker’s trap?

LevelBlue is proud to announce that Cyber Defense Magazine has named it the winner of its Global InfoSec Awards 2026 for Trailblazing Managed Security Service Provider (MSSP) and Market Disruptor Threat Detection, Incident Response, Hunting and Triage Platform.

Non-human identities (NHIs) and AI Agents including service accounts, CI/CD credentials and cloud workload identities, now eclipse human identities in enterprise identity systems by 50:1 to 100:1. Modern identity security platforms must assign identities to these assets and furthermore, apply roles, access control policies, visibility and governance in order to secure the modern enterprise.

Jira Cloud APIs are widely used for automation and integrations across CI/CD, DevOps, reporting, and internal tools. Atlassian provides native REST API authentication using API tokens and OAuth. This works well for simple scripts and internal automation. However, modern organizations often require stronger controls when APIs are used by multiple services, integrations, and automated systems. As integrations grow, teams often need a more controlled authentication model than user-based tokens alone.

As organizations race to adopt new AI tools, deploy AI agents, and build AI-powered software, they create new attack surfaces that traditional security controls were never designed to protect. A key example is the prompt and agentic interaction layer, which faces novel threats like indirect prompt injection and agentic tool chain attacks.