Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CrushFTP—a Java-based, multi-protocol file-transfer server—ships with an Amazon S3–compatible API.

As Change Your Password Day rolls around on 1st February, it’s a great opportunity to highlight the importance of secure password practices. While traditional advice has often encouraged frequent password changes, this approach has been reconsidered by cybersecurity experts, including the National Institute of Standards and Technology (NIST). Modern best practices now recommend focusing on creating strong, memorable passwords and using multi-factor authentication (MFA) to enhance security.

The increasing reliance on open-source software coupled with the accelerated pace of software development has created a growing need for support of deprecated packages. The significant majority of open-source software packages are not actively maintained, meaning vulnerabilities are not patched, thereby leaving systems open to attack. Malicious actors often target deprecated open-source packages for this very reason.

The standout themes at KubeCon + CloudNativeCon Europe 2025 in London strongly centered on how identity is rapidly becoming the linchpin for securing cloud-native infrastructure. The recurring theme I saw wasn’t just Kubernetes innovation—it was the rising urgency of securing the who behind every action across platforms, clusters, services, and tools.