Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

In our hyperconnected landscape, software vulnerabilities are proliferating at a record pace. In 2024 alone, more than 40,000 Common Vulnerabilities and Exposures (CVEs) were published, marking a 38% increase over the previous year. Many of these vulnerabilities are weaponized within days, leaving organizations exposed if updates are not applied immediately. Patch management software addresses this risk by automating the detection, acquisition, and deployment of software updates across an IT environment.

Platform teams are tasked with keeping clusters secure and observable while navigating a skills gap. At KubeCon + CloudNativeCon North America, The New Stack spoke with Ratan Tipirneni, President and CEO of Tigera, about the future of Kubernetes security, AI-driven operations, and emerging trends in enterprise networking. The highlights from that discussion are summarized below.

Claude Skills is a new feature from Anthropic that has gained rapid adoption, with more than 17,000+ GitHub stars already since its launch in October 2025, allowing users to create and share custom code modules that expand Claude’s capabilities and streamline workflows. But as this ecosystem grows, Cato CTRL uncovered a serious oversight into how Skills are executed.

The network and information security directive 2 (NIS2) is an EU-wide cybersecurity law that contains strengthened cybersecurity regulations and is a general set of mandatory security requirements aimed at already identified critical and important sectors.

Application security is becoming increasingly fragmented. Development and security teams use a wide array of tools for testing, protection, and supply chain security. While each tool serves a purpose, they often operate in silos. This fragmentation creates a disconnected view of an organization’s security posture, making it difficult to prioritize and remediate risk effectively.

Unexpected attacks are the hardest to fend off. In the realm of cyber, Zero Day vulnerabilities are among the greatest risks, as these software flaws are unknown and exploited before a fix is available, potentially compromising the thousands of organizations that are unwittingly using vulnerable software.

JFrog Security Research found 3 zero-day critical vulnerabilities in PickleScan, which would allow attackers to bypass the most popular Pickle model scanning tool. PickleScan is a widely used, industry-standard tool for scanning ML models and ensuring they contain no malicious content.

Tokenization isn’t new, but 2025 forced everyone to rethink it. You’ve got AI pipelines ingesting messy text, microservices flinging data around like confetti, and regulators asking for deletion receipts like they’re Starbucks orders. Most companies slap together a regex mask and call it “privacy.” Spoiler: it isn’t. Real data protection often hinges on choosing the right type of tokenization for the job.

In November 2025, chaos struck India’s major airports when a series of GPS spoofing attacks misled pilots, showing their aircraft up to 60 nautical miles off-course. The attack was swift, unsettling, and eye-opening; not just for aviation, but for anyone who relies on technology for critical operations. This incident made me realize something crucial: Resilience matters more than ever.

The question is no longer whether to invest in cybersecurity, but how to do it in a way that is sustainable, effective, and resilient.