Malware vs Virus: What's the Difference?
Malware and viruses are often used interchangeably, but they’re not the same! Watch this short video to learn the key differences between the two, how they work and how to protect yourself from them.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Verifying Bots and Agents with Cryptography in the Age of AI
In this episode, host João Tomé is joined in Cloudflare’s Lisbon office by our Senior Research Engineer Thibault Meunier to explore a new proposal that could reshape how bots interact with the web in the age of AI. Timestamps: We go into Cloudflare’s proposal of using cryptographic signatures for bots, enabling websites to verify their identity. Why is this important? As AI systems rely increasingly on online content, this standard could help build a better relationship between content creators and AI platforms.
Performance measurements... and the people who love them
Principal Engineer Kevin Guthrie walks us through his blog post, “Performance measurements… and the people who love them,” which explores how teams can better measure, visualize, and communicate web performance—beyond just raw metrics. Part of the “This Week in NET” show/podcast.
Master CIS Benchmark compliance: Simplify network security with automation
As a network admin, balancing optimized configurations with compliance requirements often feels like managing competing priorities. With networks growing more complex every day, achieving and sustaining compliance with the Center for Internet Security (CIS) Benchmarks can feel like a constant uphill battle. However, it doesn't have to be an overwhelming burden. The CIS Benchmarks offer practical, best practice guidelines for securing devices, systems, and applications against evolving threats.
Regulations Rising, Risks Persisting: The Cybersecurity Crossroads Facing Australian Hospitality
The hospitality industry’s cybersecurity posture is approaching an inflection point. Businesses are increasingly having to balance cost pressures in a challenging economic environment, while balancing technological innovation with escalating threats. Australia’s regulatory reforms, including heightened penalties and critical infrastructure protections, provide a framework for resilience; yet enforcement gaps will remain.
DoD Cyber Clause Flowdown: What Suppliers Must Do
The Department of Defense DFARS Cybersecurity Clause, more commonly known as the DoD Cyber Clause (or just DFARS 7012), is the long-standing set of rules the DoD has put in place for all members of the DoD supply chain and defense industrial base. It has also spread beyond those boundaries through the use of DFARS 7012 clauses in contracts for other parts of the federal government.
12 Penetration Testing Myths Blocking MSP Revenue, Margins, and Client Trust
Managed Service Providers (MSPs) sit on the front line of cyber‑defence for thousands of small and midsize businesses. Yet many still hesitate to add penetration testing (pentesting) to their security stack, largely because of persistent myths—myths that are steadily being dismantled by real‑world breach data. Fresh breach evidence makes the cost of that hesitation impossible to ignore.
OWASP Top 10 2021 - A09: Security Logging and Monitoring Failures
Logging and monitoring failures occur when security-relevant events are not properly captured, stored, or analyzed, making it difficult or impossible to detect ongoing attacks or respond effectively. These failures include missing logs, incomplete data, ineffective alerting mechanisms, insecure log storage, and inadequate retention policies. Such gaps are often exploited by attackers who rely on invisibility to move laterally across systems.
OWASP Top 10:2021 - A02 Cryptographic Failures
Cryptographic failures refer to the improper use, implementation, or management of cryptographic systems. These issues often result in unauthorized exposure of sensitive data like passwords, credit card numbers, or personal records. In the OWASP Top 10 – 2021, this category replaced the broader ‘sensitive data exposure’ from the 2017 list, with a sharper focus on the misuse or failure of cryptographic mechanisms.
Falcon Adversary OverWatch with Next-Gen SIEM
Discover how CrowdStrike Falcon Adversary OverWatch with Next-Gen SIEM expands threat hunting across endpoints, identities, cloud, and third-party data to stop breaches quickly. By correlating subtle signals and enhancing them with world-class intelligence, OverWatch helps detect threats earlier and reduce alert fatigue. Gain 24/7 proactive threat hunting across your entire environment because breaches never wait.