Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Episode 4 - Staying Curious: Lessons from 25 Years in Cybersecurity

In Episode 4 of Corelight Defenders, I sit down with Angela Loomis, Corelight's Director of Technical Account Management, to explore her remarkable 25-year journey in cybersecurity. Angela shares her unconventional entry into the field, starting from a background in television production to becoming a leader in security strategy. We delve into the importance of curiosity in cybersecurity, discussing how diverse experiences enrich the profession, and whether formal education might dampen that curiosity.

AIOps in the Cato SASE Platform: Using Predictive AI Networking to Shift from Reactive to Proactive IT

It was a quiet Monday morning until John, head of IT, opened his laptop and saw 424 new support tickets. Users across the office were reporting issues like “apps won’t load” and “internet not working.” After hours of investigation that stretched into the next day, the team traced the problem to a branch router overwhelmed by malformed DNS queries from a misbehaving IoT device.

7 Best Proxy Tools for eCommerce Sellers

Proxies have become essential tools for eCommerce sellers who want to stay competitive in today's data-driven marketplace. Between constantly changing product prices, fluctuating demand, and global competition, sellers need reliable ways to gather market insights without triggering blocks, captchas, or account restrictions. This is where proxy tools come in.

Link11 Identifies Five Cybersecurity Trends Set to Shape European Defense Strategies in 2026

Link11 releases new insights outlining five key cybersecurity developments expected to influence how organizations across Europe prepare for and respond to threats in 2026. The findings are based on analysis of current threat activity, industry research, and insights from the Link11 European Cyber Report, alongside broader market indicators such as PwC's Global Digital Trust Insights 2026.

Troubleshooting Cilium network policies: Four common pitfalls

Cilium network policies (CNPs) extend Kubernetes’ L3/L4 controls to the application layer (L7). CNPs provide teams with advanced networking capabilities, but they can also introduce new ways for connectivity to fail, especially in environments running thousands of workloads. Many of these issues stem from differences in how Kubernetes and Cilium interpret the same concepts, such as label scoping, IP-based rules, service identities, and how default-deny behavior is applied.

How to detect React2Shell attacks using network-based threat hunting

How do you find React2Shell vulnerabilities or detect React2Shell attacks in real environments? In this video, Corelight cloud security researcher David Burkett walks through how to threat hunt React2Shell by focusing on post-exploitation behavior at the network level. Instead of relying on exploit signatures, the approach uses application baselining and network traffic analysis to identify abnormal behavior.

Why Network Validation Matters and Why GigaOm Names Forward Networks as a Leader and an Outperformer

Enterprise networks are highly dynamic environments. They span campuses, data centers, and multiple clouds, requiring constant maintenance. Configuration updates, security policies, patches, capacity shifts, and automation-driven enhancements occur continuously. At this scale and velocity, every change carries risk unless it is verified against intended network behavior.