Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Engineering the Datadog Agent for FedRAMP High Certification

Software that runs inside customer-managed infrastructure creates a particular challenge at the FedRAMP High baseline. It still has to meet the applicable security and compliance requirements, even though the vendor does not control the surrounding operating system, libraries, network configuration, or maintenance practices. For Datadog, that challenge centers on the Datadog Agent, which runs directly on customer-managed hosts to collect logs, metrics, traces, and security signals.

Atlanta's $17M Ransomware Attack: What Could Have Stopped It

In March 2018, the SamSam ransomware attack on the city of Atlanta became one of the most expensive ransomware incidents ever to hit a US local government. It remains a useful case study in what happens when an organization has no way to detect, stop or recover from ransomware in real time.

Defeat Frontier AI Attacks: Charlotte AI AgentWorks Meets Falcon for IT

Frontier AI has armed adversaries with unprecedented speed, finding and exploiting vulnerabilities faster than humans can respond. To keep pace, defenders need agentic AI operating on defense. In this demo, see how a Frontier AI Exploitation Defense Agent in Charlotte AI AgentWorks identifies and prioritizes critical risk, then hands off to Falcon for IT Risk-Based Patch Management for controlled remediation, all within the CrowdStrike Falcon platform.

Securing the Agentic Enterprise

We're living through the biggest shift in how work gets done in a generation. In every industry, every company is becoming an agentic enterprise, meaning a business where humans and autonomous AI work side by side. What makes an agentic enterprise successful is its workflows: how it combines intelligence, both human and machine, with its proprietary data.

AI Agents and MCP: Security Implications

The Model Context Protocol has quietly become the connective tissue of enterprise agentic AI. MCP standardizes how AI agents discover, request, and invoke tools, data sources, and external systems, replacing the custom integration code that used to sit between every agent and every backend. ‍ That standardization is what made agents commercially viable at scale. It is also what turned MCP into one of the largest and least-understood attack surfaces in enterprise AI.

How to Quantify Cyber Risk for Board-Level Reporting

Quantifying cyber risk for the board means translating technical exposure into dollar-denominated financial risk that the audit committee, CFO, and directors can act on. Boards care about strategic business impact like operational downtime, regulatory penalties, and reputational damage. ‍ They do not care about patch rates, blocked emails, or firewall logs, which are the metrics cyber teams have historically brought to board meetings and which board members have historically ignored.

Distributed systems in disguise with Maxim Fateev from Temporal | Zero-Shot Learning

When most developers write code, crash recovery logic is at the bottom of their priorities, until crashes and delays force them to incorporate resiliency logic. That’s why Temporal co-founder and CTO Maxim Fateev built a system to turn code into durable execution. In his conversation with 1Password CTO Nancy Wang and VP of Engineering for Developer and AI Jeff Malnick, Maxim explains why the distributed systems thinking that shaped his work is now essential for building reliable AI agents, with a live demo of a durable agent surviving a crash.