Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Connect and Validate Third-Party Data with Falcon Next-Gen SIEM

See how the Falcon Next-Gen SIEM Data Onboarding Agent simplifies the process of connecting and validating third-party security data. Using natural language, teams can identify the right connector, understand setup requirements, configure credentials, and create connections through a guided workflow.

Ep. 85 - FortiBleed: The Campaign With No CVE That Locks You Out of Your Own Firewall

The FBI and US Secret Service just dropped joint advisory JCSA 2026-1601 on FortiBleed—and there is no CVE to patch. Tova Dvorin and Adrian Culley walk the full chain: credential stuffing against internet-facing FortiGate SSL VPNs, legacy SHA-256 admin hashes cracked on rented GPUs, fake vendor-style admin accounts, and attackers deleting your accounts to lock you out of your own firewall. Plus the INC/Lynx ransomware link, what the 86,000 figure really means, and the question that matters: would a new admin on your edge device at 3am fire anything?

One Identity: Governing Every Identity - Human, Machine, and AI

Every enterprise runs on identity — and machines and AI agents now outnumber people in many environments. This 2-minute overview covers why identity has become a board-level priority, and how One Identity governs every identity — human, machine, and AI agent — on one unified platform. Validated by Omdia: 150% ROI, go-live in as little as one day, zero-touch onboarding.

Episode 25 - Zeek at 30: Vern Paxson on Origins and Enduring Logs (Part 1)

Richard Bejtlich sits down with Vern Paxson, Corelight co-founder and Chief Scientist, to explore Zeek's 30-year journey from a Berkeley Lab research project to a data-rich backbone of modern NDR. They unpack how Zeek evolved from early TCP health measurements into a flexible, scriptable network analysis platform, the value of neutral, long-term logs over real-time alerts, comparisons to intrusion-detection approaches like Snort, and the challenges and opportunities of visibility in enterprise gear.

What is Zero Trust Architecture? Why is it important? [Quick Question Ep. 3]

What is Zero Trust Architecture, and why is it important? Zero Trust is a security framework built on one core principle: never trust, always verify. In this episode of Quick Question, we explain how Zero Trust shifts security from protecting the front door to locking everything inside by default, granting access room by room based on identity, context, and authorization.

Proactive Security in Action Across the CrowdStrike Falcon Platform

Proactive security starts with understanding the environment before an attacker can take advantage of it. In this demo, see how the CrowdStrike Falcon platform brings together proactive telemetry and context across endpoint, cloud, identity, network, applications, SaaS, and more to build a connected view of risk.