Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

With May 2027 approaching, businesses have a limited window to prepare for the major DPDP compliance requirements scheduled to take effect then. Our first post in this series called 2026...

If your business collects, stores, or otherwise processes digital personal data, India’s Digital Personal Data Protection (DPDP) Act, 2023, may affect how you handle that information. Understanding whether the Act...

The agentic AI security conversation has, for good reason, spent most of its energy on the agents an organization builds or deploys directly: what they're authorized to do, what data they can reach, how their behavior is monitored. I think that focus is necessary and also increasingly incomplete, because the fastest-growing risk surface in agentic AI right now isn't the agents themselves.

Why Traditional Data Governance Fails in the Age of Autonomous Agents—and What Replaces It.

Following reported strikes on Yandex data centers, claims circulated on the Internet that Russian bot farms and influence operations had been knocked offline. HTTP traffic charts showed steep drops, fueling speculation that the infrastructure damage had stopped these malicious actors. However, aggregate traffic metrics can easily mislead. There are two autonomous system numbers (ASNs) associated with Yandex: AS13238 is used by Yandex’s search engine, while AS200350 runs its cloud services.

A cyberattack is an expensive—and dare I say, inefficient—way to discover whether your cyber resilience strategy works. By the time an executive asks how long it will take to get the business back online, the answer depends on preparation that should already be in place: clearly defined responsibilities, protected data, and a recovery process that someone has actually tested.

For years, companies treated shadow IT primarily as a policy and control problem. Employees have always found and used technology outside the approved IT stack, from unauthorized endpoint applications and browser extensions to personal cloud services. It left a trail: an install, a device on the network, something a scan or an agent could eventually catch. From there, an analyst had to investigate the finding and assess the risk before deciding how to respond.

A VMware migration is usually planned as a hypervisor decision and experienced as an operations project. The virtual machines are rarely the hard part. What takes the time is everything that grew up around the platform over the last decade: the backup configuration, the monitoring, the runbooks, the automation, and the assumptions your team stopped noticing years ago. This is a practical account of what changes when you move, what does not, and what to settle before the first workload is touched.

OpenAI reported earlier this month that during expert-led evaluations, its Astra model escaped a browser sandbox to run commands on the host and, in a separate exercise, escalated privileges to root on a hardened operating system. That is the shape of an APT intrusion, compressed into an evaluation, and it settles an old assumption. Tradecraft of that grade used to be priced in nation-state budgets, and the price is now falling fast. Our concern at Astra Security is what that means for how companies test.