How your guardrails might become the attacker’s best friend
Welcome to this week’s edition of the Threat Source newsletter. Hello, everyone. Long time reader, first time writer here at the Threat Source newsletter! I wanted to start out by…
-
-
What we learned about AI agent security by monitoring our agents
AI agents comprise models, instructions, data, and tools, so thoroughly investigating potential security risks requires evidence from several components. As Datadog teams build AI agents for internal workflows, we use…
-
The Vulnerability Tax: What CVE Response Costs at the Network Edge
Network edge vulnerabilities are accelerating. Cato’s cloud-native architecture reduces customers’ attack surface and shortens exposure to emerging vulnerabilities. The Cato CVE Exposure Calculator shows what that difference could mean for…
-
Building Multi-Region Active-Active Architectures with CloudFront VPC origins and Advanced Routing
Building a multi-region active-active architecture with Amazon CloudFront requires careful coordination of traffic routing to address performance, traffic management, and session consistency requirements, along with automated failover to maintain availability…
-
The Cure for Exceptional Zeek Package Testing (Part 1)
This is Part 1 of a three-part series. Read Part 2 and Part 3. Table of Contents Introduction Motivating Example: ip-distance Unit Tests 1. Introduction As someone who ships a…
-
Weekly Threat Bulletin – August 26th, 2026
CVE-2026-19490: Critical Citrix NetScaler Authentication Bypass Exposes Enterprise Gateways Cloud Software Group has released critical security updates to address CVE-2026-19490, an authentication bypass vulnerability (CWE-288) in NetScaler ADC and NetScaler…
-
Cisco bulks up AI infrastructure portfolio with Supermicro liquid-cooled servers
“This expansion enables customers to easily manage complex, high-density AI clusters alongside non-AI workloads. Customers will also now be able to deploy rack-to-fabric liquid cooling, featuring Cisco liquid-cooled AI networking…
-
Closing the Observability Gap: Connecting Application Traces to Database Execution Plans
The alert fires on p95 latency. A high-traffic API endpoint whose p95 normally sits under 100ms is now sitting at 380ms at the 95th percentile. That’s not right. You go…
-
Palo Alto Networks Recognized as the Only Vendor to be Named a 4X Leader in SASE and SSE Gartner Magic Quadrant Reports
As organizations race to deploy agentic AI, legacy network security solutions are ill-equipped to keep up, forcing productivity tradeoffs while exposing coverage gaps. At the same time, Frontier AI is…
-
CloudFront Functions Unified Logging | Networking & Content Delivery
CloudFront Functions (CF2) lets you run lightweight code inside Amazon CloudFront Points-of-Presences (POPs) to analyze and manipulate viewer requests and responses at scale. Until now, gaining visibility into the decisions…
