2014–2026
243 posts
2026 119
October 2026
- Mythos access is expanding: what this means for vulnerability management
- In a pickle: Why every pickle defense in machine learning is bypassed the same way
- Three layers of open source defense for AI coding agents: OpenShell, Prempti, and Falco
- Node2Shell (CVE-2026-111497): Detecting the Node.js Brotli RCE
- Detecting and mitigating ZDI-CAN-33367 and five other Linux flaws
- PHP2Shell (CVE-2026-109618 and CVE-2026-109619): Detecting unauthenticated remote code execution in PHP core
- Why Cybersecurity Awareness Month still comes back to the basics
- Runtime AI Defense in a shared responsibility model
- AI agent exploits Zammad zero-days in DIVD breach: What we know and how to detect it
- Three AI governance questions every executive needs to answer
- AI agent exploits Zammad zero-days in DIVD breach: What we know and how to detect it | Sysdig
- Security briefing: September 2026
- With AI agents, runtime is the only place truth lives
September 2026
- AI adoption is a security survival metric
- AI adoption is a security survival metric | Sysdig
- Why are SBOMs failing to stop supply chain attacks?
- Risky identities continue to plague cloud infrastructures
- Every regulatory disclosure rule asks the same question. Each calls it something else
- Getting started with runtime security and Falco
- Closing the cloud security gap with runtime security
- Why runtime security should be a top priority for CISOs
- Closing the cloud security gap with runtime security | Sysdig
- Machine speed, hold the AI: Hand-rolled marimo CVE-2026-39987 exploit
- How runtime insights helps with container security
- Runtime is the real defense, not just posture
- Cloud security and the power of runtime insights
- Security briefing: August 2026
August 2026
- Defending the battlefield: Stateful detections for an agentic threat landscape
- Kubernetes 1.37 - New security features
- Defaulting on tech debt: When the bill comes due, AI is the collector
- Vulnerability response in the AI-discovery era: A four-part plan
- Security briefing: July 2026
- Agentic vulnerability management, end to end: 2,731 findings, one approved fix
- Introducing Sysdig Secure AI: Your expert AI security team
- Agentic vulnerability management, end to end: 2,731 findings, one approved fix | Sysdig
July 2026
- Introducing the Runtime Remediation Skill for headless cloud security
- Introducing the SysQL Skill: Ask your security graph anything.
- Four ways AI has fundamentally changed the threat landscape in 2026
- JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models
- The CISO's guide to headless cloud security
- No single pane of glass: Anatomy of an Azure permission takeover
- Security briefing: June 2026
- JADEPUFFER: Agentic ransomware for automated database extortion
June 2026
- Understanding Langflow CVE-2026-55255, and why higher CVSS vulnerabilities aren't always the most exploited
- FulcrumSec Playbook: Sådan opdager og stopper du gruppen bag Novo Nordisk-bruddet
- The FulcrumSec playbook: How to detect and stop the group behind the Novo Nordisk breach
- Build to learn, buy to scale: When to build your own AI SOC (and when to stop)
- Build to learn, buy to scale: When to build your own AI SOC (and when to stop) | Sysdig
- LLMjacking evolved: Attackers are using stolen AI compute to build offensive agentic tools
- How attackers are jailbreaking LLMs with CTF framing and how to catch them
- Sysdig and Anthropic: Turning Claude compliance events into real security signals
- Vulnerability management is reaching the limits of human scale
- Agentic threat actor hits the orchestration plane: AI agent-driven container escape
- Agentic threat actor hits the orchestration plane: AI agent-driven container escape | Sysdig
- Cloud security onboarding should move at cloud speed
- Security briefing: May 2026
May 2026
- Runtime security without privileged containers: Fast-tracking compliance with least privilege controls
- AI agent at the wheel: How an attacker used LLMs to move from a CVE to an internal database in 4 pivots
- Sysdig MCP server on Amazon Bedrock: AI-powered DSPM in action
- AI agent at the wheel: How an attacker used LLMs to move from a CVE to an internal database in 4 pivots | Sysdig
- Securing NVIDIA AI stacks for enterprise environments
- Streamline vulnerability remediation with headless cloud security
- The expendable extension name: Azure VMAccess naming chaos, password resets, and a detection gap
- Introducing the Runtime Investigation Skill for headless cloud security
- Agentic AI tooling: Why runtime security is the missing layer
- Agentic AI tooling: Why runtime security is the missing layer | Sysdig
- How to create custom cloud security controls faster with headless cloud security
- Falco turns 10. Congratulations from Sysdig!
- Securing AI in the cloud starts at runtime
- NATS-as-C2: Inside a new technique attackers are using to harvest cloud credentials and AI API keys
- CVE-2026-44338: PraisonAI authentication bypass in under 4 hours and the growing trend of rapid exploitation
- Introducing Prempti: Runtime security for AI coding agents, powered by Falco
- Dirty Frag (CVE-2026-43284 and CVE-2026-43500): Detecting unpatched local privilege escalation via Linux Kernel ESP and RxRPC
- Our founder's vision: Welcome to headless cloud security
- Introducing headless cloud security: Run Sysdig inside your AI coding agents
- Security briefing: April 2026
April 2026
- CVE-2026-31431: “Copy Fail” Linux kernel flaw lets local users gain root in seconds
- AI is the present of security
- PCI DSS v4.0.1 Compliance in the cloud and Kubernetes with Sysdig
- AI is the present of security | Sysdig
- How to secure workloads, containers, and Kubernetes the right way
- CVE-2026-42208: Targeted SQL injection against LiteLLM's authentication path discovered 36 hours following vulnerability disclosure
- Sysdig named a Leader in GigaOm Radar for Cloud Workload Security
- CVE-2026-33626: How attackers exploited LMDeploy LLM Inference Engines in 12 hours
- Why runtime security matters for PCI DSS compliance
- Anthropic Mythos just broke the four-minute mile in cyber offense
- Anthropic Mythos just broke the four-minute mile in cyber offense | Sysdig
- From air-gapped to private cloud: Security that adapts to your environment
- Cloud security has hit its human limits: Key takeaways from the 2026 Cloud-Native Security and Usage Report
- Sysdig Automations: Streamlining detection to response into a unified workflow
- CVE-2026-39987 update: How attackers weaponized marimo to deploy a blockchain botnet via HuggingFace
- Kubernetes 1.36 - New security features
- Masterclass: AI is more than ChatGPT and LLMs
- How Financial Services Organizations Can Stay Compliant Without Sacrificing Security
- Use in-use vulnerability prioritization to focus on critical risks
- Next-gen container security: Why cloud context matters
- Guidance for compliance with NIS2, DORA, & other regulations
- 5 steps to securing AI workloads
- 5 steps to securing AI workloads | Sysdig
- Marimo OSS Python Notebook RCE: From Disclosure to Exploitation in Under 10 Hours
- How to use AI to manage cloud security threats
- Security briefing: March 2026
- The Sysdig MCP server is now available in AWS Marketplace
- Risk isn’t reduced until you take action: How teams resolve issues in the cloud
March 2026
- AI infrastructure security: Why it deserves its own category
- Three pillars for building effective runtime-powered cloud defense, the right way
- AI infrastructure security: Why it deserves its own category | Sysdig
- Seeing risk isn’t stopping it: Why visibility alone isn’t enough
- El ENS no es un freno para tu estrategia en Oracle Cloud
- TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions
- AI coding agents are running on your machines — Do you know what they're doing?
- Runtime security for AI coding agents: Protecting AI-assisted development
- How runtime insights power every cloud security use case
- AI coding agents are running on your machines — Do you know what they're doing? | Sysdig
- CVE-2026-33017: How attackers compromised Langflow AI pipelines in 20 hours
- Inline Cloud Response: Accelerating AWS threat containment for SOC teams
February 2026
January 2026
2025 15
October 2025
- AI echolocation of cloud risks using Sysdig & Snyk MCP servers | Sysdig
- Open source spotlight: Bringing web application security to Falco with Falcoya's Nginx plugin | Sysdig
September 2025
August 2025
- Build your AWS incident response playbook with open source tools | Sysdig
- 2025 Gartner® CNAPP Market Guide: Runtime visibility is no longer optional | Sysdig
- The vision comes to life: Agentic cloud security with Sysdig Sage™ | Sysdig
July 2025
June 2025
- AI-powered CNAPP with Sysdig Sage™ | Sysdig
- Beyond prioritization: Accelerating vulnerability remediation at the source with AI and runtime context | Sysdig
- Attacker exploits misconfigured AI tool to run AI-generated payload | Sysdig
May 2025
- Cloud hasn’t killed the agent: A real-time reality check | Sysdig
- 5 ways AI improves cloud detection and response | Sysdig
April 2025
- 9 Open source cloud security tools for 2025 | Sysdig
- Measure what matters: 5 benchmarks every security leader should track | Sysdig
March 2025
2024 18
December 2024
November 2024
- 26 AWS security best practices to adopt in production | Sysdig
- A CISO’s grimoire for outsmarting attackers | Sysdig
- Adding runtime threat detection to Google Kubernetes Engine with Falco | Sysdig
October 2024
September 2024
- Introducing Sysdig and Torq – amplify SOC efficiency via automated cloud detection and response | Sysdig
- Bridging the cloud security skill gap with Sysdig GenAI Assistant | Sysdig
- Prioritize Security Without Sacrificing Productivity: Balancing Identity Management and Risk Tolerance | Sysdig
August 2024
July 2024
June 2024
- Securing AI in the cloud: Introducing AI workload security for AWS | Sysdig
- Happy 10th Birthday Kubernetes! | Sysdig
May 2024
April 2024
- Accelerating AI Adoption: AI Workload Security for CNAPP | Sysdig
- From Air Force to Sysdig: A Career in Cybersecurity | Sysdig
- Active Cloud Risk: Why Static Checks Are Not Enough | Sysdig
March 2024
2023 15
September 2023
- Introducing Agentless Vulnerability Management: A complete guide to strengthening your security | Sysdig
- The Sysdig Cloud Attack Graph – Accelerating Cloud Native Application Protection Platform (CNAPP) | Sysdig
- AWS’s Hidden Threat: AMBERSQUID Cloud-Native Cryptojacking Operation | Sysdig
August 2023
- Boost Detection and Response with Cybereason and Sysdig | Sysdig
- 2023 Global Cloud Threat Report: Cloud Attacks are Lightning Fast | Sysdig
July 2023
- Five Things CISOs in Financial Services can do to make Containers Secure and Compliant | Sysdig
- Architecting Cloud Instrumentation | Sysdig
- Cloud Defense in Depth: Lessons from the Kinsing Malware | Sysdig
March 2023
- Chaos Malware Quietly Evolves Persistence and Evasion Techniques | Sysdig
- AWS recognizes Sysdig as an Amazon Linux 2023 Service Ready Partner | Sysdig
- Bypassing Network Detection with Graftcp | Sysdig
February 2023
2022 16
November 2022
- Analysis on Docker Hub malicious images: Attacks through public container images | Sysdig
- Announcing AWS Lambda Telemetry API Support for Sysdig Monitor | Sysdig
- AWS CloudTrail vs CloudWatch: Log Differences | Sysdig
September 2022
- Sysdig 2022 Threat Report: Cloud-native threats are increasing and maturing | Sysdig
- AWS Security Groups Guide | Sysdig
July 2022
June 2022
- Adapting security to Amazon EKS Anywhere on Bare Metal | Sysdig
- Securing SSH on EC2: What are the real threats? | Sysdig
- Breaking down firewalls with BPFDoor (no e!) – How to detect it with Falco | Sysdig
- How to Secure Amazon EC2 with Sysdig | Sysdig
May 2022
- How to use Atomic Red Team to test Falco rules in K8s | Sysdig
- Hunting AWS RDS security events with Sysdig | Sysdig
April 2022
February 2022
- Will the Cloud Kill Security Agents? | Sysdig
- 4 Ways to Combat the DevOps and Security Workforce Shortage | Sysdig
January 2022
2021 11
December 2021
November 2021
October 2021
September 2021
August 2021
July 2021
June 2021
- Monitoring Availability Metrics with Blackbox exporter and Sysdig | Sysdig
- Bad guys are watching for new openings in your cloud, are you? | Sysdig
May 2021
March 2021
2020 6
December 2020
September 2020
- AWS threat detection using CloudTrail and Sysdig Secure | Sysdig
- A security journey to open source | Sysdig
August 2020
July 2020
March 2020
2019 2
November 2019
March 2019
2018 3
June 2018
May 2018
2017 5
October 2017
August 2017
June 2017
January 2017
2016 9
October 2016
September 2016
August 2016
June 2016
April 2016
March 2016
February 2016
January 2016
2015 14
December 2015
November 2015
October 2015
August 2015
July 2015
June 2015
- Announcing csysdig — think strace + htop + Lua + container support | Sysdig
- Announcing Sysdig 0.1.101 | Sysdig
May 2015
March 2015
- Alerting for today’s (and tomorrow’s) distributed, containerized environments | Sysdig
- Announcing Sysdig 0.1.99 | Sysdig
- Announcing Sysdig 0.1.98 | Sysdig
February 2015
January 2015
2014 10
December 2014
October 2014
August 2014
July 2014
June 2014
May 2014
April 2014