Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Elastic Support Hub now provides instant self-service lookup for CVE impact statements.

This guide walks through how to deploy microservices with Zero Trust using SPIFFE identities, service mesh mTLS, and short-lived certificates. You’ll learn how to deploy a secure microservices application, configure default-deny authorization policies, and rebuild service connectivity with explicit SPIFFE-based allow rules.

For MSPs, vulnerability assessment and patch management are challenging primarily because of scale. Every new customer adds another tenant to configure, monitor and maintain, which multiplies operational overhead and increases the risk of inconsistency. The newly released cross-tenant, partner-level vulnerability assessment and patch management in Acronis RMM is designed to break this pattern.

Typosquatting, registering a typoed version of a popular package and waiting for a developer to accidentally type and install the wrong package, has been around for a decade in npm. It’s nothing new— the registry has protections for it. Then AI came along and changed everything again. Slopsquatting is the new, AI flavor of typosquatting. Instead of betting on human typos, attackers bet on AI hallucinations, the package names that LLMs confidently recommend that don't actually exist.

Many teams share credentials in Slack out of convenience, but this seemingly harmless habit introduces serious security and compliance risks. From accidental exposure to unauthorized access, sharing passwords in Slack can create major vulnerabilities across your organization. Keeper’s Slack workflow replaces risky password sharing in Slack with secure, Just-in-Time (JIT) access requests and approvals.