Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Patch the browser you code in

AI IDEs such as Cursor and Windsurf include their own browser engine. If that engine is not up to date, it carries known vulnerabilities. This week’s signals show Cursor 2.0 released on Oct 29, 2025 without a stated browser upgrade in the Cursor 2.0 changelog. Users also posted About screenshots that still show older builds. Windsurf’s October notes list a newer baseline in the Windsurf changelog. Treat these tools like browsers: verify versions, reduce risky paths, upgrade when available.

Silence of the Daemons: Why Evasion Isn't About Location and NDR's Role in the Cloud

In this talk, David Burkett, Cloud Security Researcher at Corelight, highlights how timeless evasion tactics create critical blind spots in cloud workloads, and illustrates the role of Network Detection and Response (NDR) as a resilient countermeasure. Presented on October 30, 2025 for Datadog Detect.

The Goldilocks Approach: Finding Detections That Are Just Right

In this talk, Megan Roddie-Fonseca, Sr. Security Engineer at Datadog, addresses the challenge of finding "just right" detections, leveraging data classification techniques like recall and precision to balance false positives and missed attacks. Presented on October 30, 2025 for Datadog Detect.

Stay SEBI-Compliant: Strengthen Your Security with AppTrana WAAP

Are you prepared for SEBI’s latest cybersecurity mandates? In this video, discover how AppTrana WAAP helps financial institutions effortlessly meet SEBI cybersecurity compliance requirements. From continuous vulnerability scanning and managed WAF protection to real-time threat detection and compliance reporting, AppTrana ensures your applications stay secure and compliant at all times.

When APIs Become Attack Paths: What the Q3 2025 ThreatStats Report Tells Us

Wallarm’s latest Q3 2025 API ThreatStats report reveals that API vulnerabilities, exploits, and breaches are not just increasing; they’re evolving. Malicious actors are shifting from code-level weaknesses to business logic flaws, from web apps to partner integrations, and from REST to AI-powered APIs. Here’s what stood out this quarter, and what security leaders should do about it.

ASM Turning Awareness into Actionable Defense || Sedara October Cyber Bytes Webinar by Julian

Watch the final session of Sedara’s October Cyber Bytes 2025 series — ASM: Turning Awareness into Actionable Defense with Julian Anjorin. In this webinar, Julian explores the importance of Attack Surface Management (ASM) as a foundational layer of any security program. Learn how understanding your organization’s full digital footprint helps identify blind spots, reduce exposure, and strengthen overall security posture.

Quantifying Risk in the SOC: From Analyst Actions to Measurable Impact

How much value are you really getting from your logs, and what are you giving up to stay on budget? In this episode of Logs and Lattes, host Palmer Wallace sits down with Seth Goldhammer, VP of Product Management at Graylog, for a candid conversation about the hidden cost of traditional SIEM pricing. Seth explains how ingest-based and resource-heavy licensing models pressure security teams into tough tradeoffs, such as dropping logs, tuning down detections, or limiting retention just to avoid budget overages.

SOCast: No Shortcuts - A Discussion on Cyber Resilience

Why do people take shortcuts in security, and how can we prevent them? Join us for a special live episode of Arctic Wolf SOCast as our experts unpack the psychology behind risky security behaviors and explore how AI is influencing decision-making in today’s workplaces. We’ll also reveal new data on how IT leaders and employees are using tools like ChatGPT and other generative AI platforms, and what that means for your organization’s security posture.