Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Silence of the Daemons: Why Evasion Isn't About Location and NDR's Role in the Cloud

In this talk, David Burkett, Cloud Security Researcher at Corelight, highlights how timeless evasion tactics create critical blind spots in cloud workloads, and illustrates the role of Network Detection and Response (NDR) as a resilient countermeasure. Presented on October 30, 2025 for Datadog Detect.

The Goldilocks Approach: Finding Detections That Are Just Right

In this talk, Megan Roddie-Fonseca, Sr. Security Engineer at Datadog, addresses the challenge of finding "just right" detections, leveraging data classification techniques like recall and precision to balance false positives and missed attacks. Presented on October 30, 2025 for Datadog Detect.

Stay SEBI-Compliant: Strengthen Your Security with AppTrana WAAP

Are you prepared for SEBI’s latest cybersecurity mandates? In this video, discover how AppTrana WAAP helps financial institutions effortlessly meet SEBI cybersecurity compliance requirements. From continuous vulnerability scanning and managed WAF protection to real-time threat detection and compliance reporting, AppTrana ensures your applications stay secure and compliant at all times.

ASM Turning Awareness into Actionable Defense || Sedara October Cyber Bytes Webinar by Julian

Watch the final session of Sedara’s October Cyber Bytes 2025 series — ASM: Turning Awareness into Actionable Defense with Julian Anjorin. In this webinar, Julian explores the importance of Attack Surface Management (ASM) as a foundational layer of any security program. Learn how understanding your organization’s full digital footprint helps identify blind spots, reduce exposure, and strengthen overall security posture.

Quantifying Risk in the SOC: From Analyst Actions to Measurable Impact

How much value are you really getting from your logs, and what are you giving up to stay on budget? In this episode of Logs and Lattes, host Palmer Wallace sits down with Seth Goldhammer, VP of Product Management at Graylog, for a candid conversation about the hidden cost of traditional SIEM pricing. Seth explains how ingest-based and resource-heavy licensing models pressure security teams into tough tradeoffs, such as dropping logs, tuning down detections, or limiting retention just to avoid budget overages.

SOCast: No Shortcuts - A Discussion on Cyber Resilience

Why do people take shortcuts in security, and how can we prevent them? Join us for a special live episode of Arctic Wolf SOCast as our experts unpack the psychology behind risky security behaviors and explore how AI is influencing decision-making in today’s workplaces. We’ll also reveal new data on how IT leaders and employees are using tools like ChatGPT and other generative AI platforms, and what that means for your organization’s security posture.

CVSS 4.0 and its Evolving Role in Vulnerability Management

Adam Dudley, Nucleus VP of Strategy and Alliances, provides some background on the Common Vulnerability Scoring System (CVSS) version 4.0 in this Nucleus conversation. He discusses the improvements made in the new version, the evolving role of CVSS in vulnerability management, the limitations practitioners face, and the future of scoring systems in the context of emerging technologies like AI. The conversation emphasizes the importance of context and quality inputs in effectively utilizing CVSS for risk assessment.

Episode 1: Typhoon Season with Vincent Stoffer

Richard Bejtlich sits down with Vince Stoffer, Corelight's Field CTO, to dive into the recent wave of cyberattacks attributed to Chinese threat actors, known as "Typhoon" groups. Vince unpacks the distinctions between "Volt Typhoon," targeting critical infrastructure sectors such as energy and transportation, and "Salt Typhoon," which is infiltrating telecommunications networks for espionage. The conversation explores the evolving tactics, techniques, and procedures (TTPs) used by these groups, including their exploitation of zero-day vulnerabilities and outdated infrastructure.