Create Custom File Classifiers with Nightfall AI. No Regex Required

DLP solutions have a challenge in detecting standard document types: financial records, source code, and customer lists. Moreover, what happens when your organization needs to protect business-critical documents that don't fit pre-built categories? Or when you need more granular classification to support specific workflows? Traditional approaches force you to choose between brittle regex patterns that generate false positives.

Agentic Era: The Myths and Realities of It All

After four sessions covering the technical realities, business imperatives, and security challenges of agentic AI, Salt Security’s Co-Founder and CEO Roey Eliyahu, and Salt's CMO Michael Callahan, come together for an unfiltered conversation about where the industry actually stands and where it's headed. The gap between AI ambition and operational readiness has never been wider.

What's the Difference Between IAM and IGA?

As cyber threats grow more advanced, organizations need more than firewalls and traditional password policies to protect sensitive data. Two essential parts of a modern identity security strategy are Identity and Access Management (IAM) and Identity Governance and Administration (IGA). While IAM focuses on verifying identities and enabling secure access to systems, IGA ensures that access rights are appropriate and continuously monitored.

2025 in review: What innovations and milestones defined AlgoSec's transformative year in 2025?

As we close out 2025, I find myself reflecting on what has been an extraordinary journey for AlgoSec. This year was marked by breakthrough innovations, significant industry recognition, and an unwavering commitment to our vision of secure application connectivity. From launching game-changing solutions to earning accolades on the global stage, 2025 challenged us to push boundaries – and we rose to the occasion with confidence and purpose.

Secure External User Access in JSM: How SSO Prevents Spam Tickets

Managing external customer access in Jira Service Management (JSM) often seems straightforward, but it can create recurring problems for many teams: large volumes of spam tickets. When the customer portal allows anonymous submissions, bots and unsolicited traffic can freely enter the system, slowing support operations, affecting the customer experience, and introducing unnecessary security exposure. Teams usually see the same symptoms.

20 Causes of Data Loss Threatening Businesses in 2026

Data is not just a strategic asset. It’s the lifeblood of your organization. Losing access to any strategic asset can threaten an organization’s viability; without plants and equipment, manufacturers would find it difficult to succeed, and service providers can’t operate without brand recognition. Similarly, without data, your organization could be left in a state of complete and utter paralysis, unable to function or recover.

Veracode 2025 Year in Review: Scaling Security for a New Era

This year, the cybersecurity landscape shifted. Between the rapid adoption of AI-generated code and the increasing complexity of software supply chains, security teams faced unprecedented challenges. According to IBM’s annual Cost of a Data Breach Report, the global average cost of a data breach in 2025 was USD 4.44 million. Organizations needed more than just tools; they needed a partner capable of moving at the speed of modern development.

How a Government Entity Transformed Atlassian User Management with miniOrange

In the public sector, IT efficiency isn't just about convenience - it’s about fiscal responsibility and strict compliance. Government agencies often manage thousands of users across Jira, Confluence, and Jira Service Management (JSM). As these environments grow, so does the complexity of managing access.

Lazarus Group (APT38 / APT-C-26) Exploits WinRAR Vulnerability CVE-2025-8088 for Archive Poisoning Attacks

During routine threat research and monitoring of Chinese-language underground distribution channels, our team identified a malicious RAR archive. Specifically, this archive abuses a critical WinRAR directory traversal vulnerability to achieve arbitrary file write and persistence on Windows systems. To accomplish this, the archive leverages a combination of NTFS Alternate Data Streams (ADS) and directory traversal logic.