Wallarm: API Security Platform of the Year 2025

2025 has been one of Wallarm’s biggest years yet. In the last few months alone, we unveiled our industry-first API Revenue Protection capability, launched our next-gen Security Edge offering, were included in the 2025 Inc. 5000 list of fastest-growing private companies in America, and announced our $55M Series C funding round. This October, we’re proud to see our dedication and our customers’ confidence recognized.

What You Missed at the AI Agent Security Summit

When the day wrapped up at the Commonwealth Club, one thing was clear: we are in a moment unlike anything the security community has faced before. Hundreds of practitioners and thought leaders from around the world came together, and the turnout alone showed just how urgent and relevant this topic has become. Michael Bargury opened his keynote with a question that lingered well past the event: Are we actually making progress in securing agents?

Inside the Crimson Collective Attack Chain-and How to Break It with Zero Standing Privileges

New details are emerging in recent weeks on how the Crimson Collective threat group has been conducting a large-scale campaign targeting Amazon Web Services cloud environments. Recent reports highlight how easily the attackers progressed once they obtained valid credentials. The Crimson Collective claims to have exfiltrated ~570 GB across ~28,000 internal GitLab projects; Red Hat has confirmed access to a Consulting GitLab instance but hasn’t verified the full scope of those claims.

Engine Fault: Search engine poisoning targets airline support numbers

This blog explores a CYJAX investigation into a search engine poisoning campaign impersonating 14 global airlines, including KLM, Delta, and Lufthansa. Over 150 fake support pages were found hosting fraudulent contact numbers, tricking users into calling threat actors. The post examines how these scams exploit SEO, manipulate AI-enhanced search results, and what users can do to stay protected.

Vault-Free PAM - Because Engineers Deserve Better

Traditional Privileged Access Management (PAM) tools rely on static passwords, long-lived SSH keys, and endless manual approvals. In today’s cloud-native, hybrid, and multi-cloud environments, legacy PAM creates bottlenecks — slowing engineers down and leaving your infrastructure exposed. In this video, we break down: If you’re searching for PAM alternatives, passwordless privileged access, or a modern approach to identity-based security, this video will show you how vault-free PAM can replace outdated solutions.

Why Managed Detection and Response (MDR) is Now Mission-Critical

The digital landscape across Asia/Pacific (excluding Japan) (APEJ) is characterized by rapid growth in the acceptance of Managed Detection and Response (MDR), and driven by a corresponding surge in cyber threats, according to IDC’s just released report IDC MarketScape: Asia/Pacific (Excluding Japan) Managed Detection and Response Services 2025 Vendor Assessment. IDC recognized Trustwave, A LevelBlue Company, as a Leader in the report.

Powerful guide: Avoid devastating data breach compliance failures

When living in a world powered by data, there’s a hard truth many organizations still overlook: the moment you shrug off a regulatory checkbox, you don’t just risk a fine, you invite a full-scale crisis of data breaches. Picture this: you wake up to a news headline proclaiming that your company’s customer records are now public. Your CEO is answering media questions. Investors are rethinking their bets. And your best customers? They’re quietly looking elsewhere.

Veracode Crowned a Leader in the Q3 2025 Forrester Wave for SAST

Discover why Veracode was named a leader in the Q3 2025 Forrester Wave report on Static Application Security Testing (SAST) solutions. Key Highlights from the Report: Unmatched Detection Power: Spot vulnerabilities with precision and virtually zero false positives, keeping your code clean and secure. Developer-First Fixes: Say goodbye to workflow disruptions with Veracode Fix – automated remediation in IDEs and pull requests that lets devs fix issues on the fly.