Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

GitLab's CISO Josh Lemos on the pros and cons of making security practices public

In this week’s episode of The Future of Security Operations podcast, I'm joined by Josh Lemos, CISO at GitLab. Throughout his 15-year career in security, Josh has led teams at ServiceNow, Cylance, and Square. Known for his expertise in AI-driven security strategies, Josh is also a board member with HiddenLayer. He drives innovation at GitLab with a relentless focus on offensive security, identity management, and automation. Josh and I discuss.

Introducing Mend's Integration with Microsoft Defender for Cloud

We’re excited to announce a powerful new integration between Mend.io and Microsoft Defender for Cloud (MDC)—a step forward in our mission to bring intelligent, actionable, and context-rich open source security directly into the cloud security workflow. As organizations embrace cloud-native architectures, security teams face the growing challenge of identifying and prioritizing the open source software risks that truly matter.

Yet Another NodeJS Backdoor (YaNB): A Modern Challenge

During an Advanced Continual Threat Hunt (ACTH) investigation conducted in early March 2025, Trustwave SpiderLabs identified a notable resurgence in malicious campaigns exploiting deceptive CAPTCHA verifications. These campaigns trick users into executing NodeJS-based backdoors, subsequently deploying sophisticated NodeJS Remote Access Trojans (RATs) similar to traditional PE structured legacy RATs.

The Role of Data Transfer Monitoring with DLP in Tracking Internal & External Data Movement

Data Loss Prevention (DLP) tools are crucial for protecting sensitive information as it moves within and outside an organization. They help prevent data leaks and unauthorized access by allowing organizations to monitor, control, and respond to potential data transfer risks. In this article, let’s learn more about how DLP tools play a vital role in secure data transfers.

Security for AI: enabling secure AI adoption across the enterprise

AI is transforming productivity across every industry—from marketing and design to legal and engineering. But while employees rush to embrace tools like ChatGPT, Gemini, and Microsoft Copilot, many are using other tools without oversight from IT or security. As this grassroots usage grows, so does the volume—and sensitivity—of data flowing into AI tools.

PrivateProxy: Unlocking the Power of Secure and Private Browsing

In today's digital-first world, privacy is no longer a luxury-it's a necessity. Whether you are an individual looking to protect your online activity, a business aiming to gather market intelligence, or a developer seeking seamless access to geo-restricted content, proxies have become indispensable tools. Among the various types of proxies available, PrivateProxy services stand out for their ability to provide unmatched anonymity, speed, and security.

Why Secure Custom Application Development Is a Must for Modern Businesses

Security isn't just a technical concern anymore it's a core part of doing business. Many companies find themselves relying on pre-built software that wasn't designed with their specific risks or workflows in mind. These off-the-shelf tools may offer basic functionality, but they often lack the control, adaptability, and protection modern teams need. That's why more organizations are investing in custom application development: to build systems that fit their operations and protect what matters most.

Create AI-Undetectable Content: Tips to Bypass AI Detection

Discover the full power of our robust AI detection tool by watching our short 2-minute video tutorial. You will see just how easily you can find AI-generated text and also modify it our AI Humanizer option. Suitable for professionals, students and authors, our AI Detector will ensure your content is always a natural, organic tone, which aligns with academic and more professional standards.

How Coworking Spaces Offer Enterprise-Level Data Protection to Businesses of All Sizes

Data protection is no longer a luxury; it's essential for business survival. Coworking spaces have evolved beyond simply offering desks and coffee as more companies embrace flexible work arrangements. Many now provide sophisticated security infrastructure that rivals traditional corporate offices.