From Reactive to Resilient - How CTEM Modernizes Cybersecurity
Continuous Threat Exposure Management (CTEM) is a proactive cybersecurity framework that continuously reduces your attack surface in response to emerging threats.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Teleport Updates its Release Process
We are reducing the number of supported major versions of Teleport from three to two. We are extending the support for each major version to 24 months. New major versions will come out once per year in August. The most recent major version of Teleport, referred to as the Current Version, is the only major version of Teleport that will receive new features. The previous major version, referred to as the Stable Version, will only receive bug fixes and security patches.
Introducing CTRL: ARMO's Cloud Threat Readiness Lab
If you are dealing with securing cloud infrastructure, containers and applications, you probably have several security tools in place including cloud posture (CSPM/CNAPP), container security and runtime security. Tool coverage might look good on paper, but how can you know they work against real attacks? ARMO CTRL (Cloud Threat Readiness Lab) helps you test your cloud security tools by deploying a safe, controlled attack lab that mimics real attack behaviors end‑to‑end.
Introducing The GitGuardian IDE Extension for VS Code, Cursor, Antigravity, And Windsurf
Ship fewer secrets with your code. In this video we walk you through installing and using the GitGuardian IDE extension in Visual Studio Code, Cursor, Antigravity, Windsurf, and any VS Code compatible editor. You will see how the extension uses ggshield, the GitGuardian command line tool, to scan for 500+ types of secrets and catch plaintext credentials as soon as you save a file, long before they can be committed.
Searching Certificate Transparency Logs (Part 2)
In the last post we discussed why we’re building our own Certificate Transparency (CT) search tool. There’s good background on the CT ecosystem in that post, so check it out if you haven’t. This post assumes a certain understanding of terminology covered previously. Now that we know where the CT logs live, and the different kinds of logs, we need to start reading them.
How to Build AI Agents That Don't Break: Design, Risk & Defense Explained #aiagents #AISecurity
Agentic AI is evolving fast — but building agents that are *both* effective and secure is still a major gap for most teams. In this webinar, Mend.io’s Bar-El Tayouri and AI21 Labs’ Yehoshua “Shuki” Cohen share a practical, deeply technical walkthrough of what it really takes to design and defend AI agents. You’ll learn: This is a tactical, no-fluff guide for anyone building AI agents in production engineers, security leaders, and innovators shaping the next wave of AI systems.
Best SAST tools: Top 10 solutions in 2025
SAST (Static Application Security Testing) tools analyze an application’s source code to identify potential security vulnerabilities without executing the code. They are crucial for finding security flaws early in the development lifecycle, helping developers address issues before they become more costly and difficult to fix. Unlike dynamic analysis techniques, SAST operates without executing the program, focusing entirely on the static codebase.
Building Secure Customer Journeys with Modern Data Infrastructure
Organizations today want experiences that feel personal without exposing customers to unnecessary risk. I believe that goal requires a clear strategy that treats data as a business asset rather than a technical afterthought. Secure customer journeys depend on a modern data infrastructure that captures behavioral signals, processes them responsibly, and protects them through every stage of analysis and activation. The companies that achieve this balance earn durable trust and raise their competitive ceiling. A small detail often makes the biggest difference, and as the idiom says, a chain is only as strong as its weakest link.
AppSec metrics fail, Mend.io's Risk Reduction Dashboard fixes it
Today, we’re introducing our Risk Reduction Dashboard. This is a new way for security leaders to quantify their AppSec program’s impact, prioritize high-value fixes, and prove ROI with data-backed insights that go beyond raw vulnerability counts.