Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

NIST Special Publication 800-53 is a cybersecurity and privacy framework developed by the National Institute of Standards and Technology (NIST). It provides a standardized set of security controls for federal information systems, covering everything from access control and incident response to system monitoring and supply chain risk management.

Regardless of size or industry, all companies are exposed to potential cyber threats. Digitalization has brought countless benefits to today’s world, but as technology has evolved, so have the strategies used by cybercriminals to access and compromise company data and operations. Implementing computer network security has become a must. In recent years, cyberattacks have increased exponentially, posing a serious risk to organizational security.

Cloudflare’s SASE platform is on a mission to strengthen our platform-wide support for hostname- and domain-based policies. This mission is being driven by enthusiastic demands from our customers, and boosted along the way by several interesting engineering challenges. Today, we’re taking a deep dive into the first milestone of this mission, which we recently released in open beta: egress policies by hostname, domain, content category, and application. Let’s dive right in!

Threat detection and response is the dynamic, ongoing process of monitoring, detecting, investigating, responding to, and remediating cyber threats.

The Australian Essential Eight is a cybersecurity framework that helps organisations protect their systems against common cyber threats. Although compliance isn’t mandatory for non-government entities, the Australian Cyber Security Centre (ACSC) strongly encourages organisations to implement it due to its broad coverage. ‍ Depending on your organisation’s size and tech environment, implementing the Essential Eight can require a significant investment.

As the European Cyber Resilience Act (CRA)'s enforcement date approaches (October 2026), cybersecurity requirements on manufacturers, developers, and service providers responsible for software and hardware connected to the internet will need to start thinking - if they haven't already -about what they need to do to comply. It may seem like a long time off, but the earlier you start, the better.

Security fatigue gets attention for a reason. Phishing emails, authentication prompts, and constant vigilance all take a toll. But alert fatigue is the deeper, more destructive force. It overwhelms analysts, delays response, and creates blind spots that adversaries exploit. Security teams today are buried under noisy alerts and fragmented tooling. False positives waste time. Manual triage eats up valuable analyst hours. Eventually, burnout sets in and threats slip by. It is not a hypothetical risk.