Explore real-world engineering experiences from top tech companies.
Receive daily AI-curated summaries of engineering articles from top tech companies worldwide.
This article provides a complete guide to GitLab's five container scanning approaches for detecting vulnerabilities throughout the container lifecycle.
This article introduces Cloudflare's always-on Attack Signature Detection framework that eliminates the traditional WAF trade-off between log visibility and block protection.
Cloudflare announces two new SASE tools—mandatory authentication and independent MFA—to close enforcement gaps in zero trust deployments.
Cloudflare introduces the Gateway Authorization Proxy, enabling identity-based traffic filtering for unmanaged devices without requiring client software installation.
This article discusses Cloudflare's partnership with Nametag to counter deepfake-enabled identity fraud and the growing "remote IT worker" threat through identity-verified zero trust onboarding.
Cloudflare introduces User Risk Scoring integrated into zero trust network access (ZTNA) policies on its Cloudflare One SASE platform.
GitLab's Security Compliance team built a custom control framework (GCF) after finding existing frameworks like NIST SP 800-53 inadequate for their multi-product, cloud-native environment.
Cloudflare evolved its Threat Intelligence Platform to eliminate ETL pipelines using a sharded, SQLite-backed Durable Objects architecture with GraphQL running at the edge.
Google Threat Intelligence Group (GTIG) identified "Coruna," a powerful iOS exploit kit targeting iPhones running iOS 13.0 through 17.2.1, containing 23 exploits across five full exploit chains.
Cloudflare's 2026 Threat Report details a shift from brute-force attacks to high-trust exploitation, measured by attacker Measure of Effectiveness (MOE).
Cloudflare CASB introduces Remediation, allowing customers to fix risky file-sharing configurations directly from the Cloudflare One dashboard without switching to each app's admin UI.
Cloudflare describes how integrating LLMs into their email security pipeline shifts phishing detection from reactive to proactive by mapping the threat landscape at scale.