Anthropic’s new whitepaper outlines a Zero Trust framework for AI agents, detailing emerging threats, four key differences from traditional software, a three‑tier capability roadmap, eight concrete deployment phases, and operational practices needed to keep autonomous agents secure at machine speed.
The article analyzes the rapid adoption of AI agents in office environments, outlines three emerging security trends—including task‑execution risks, unlimited CLI permissions, and alert overload—and presents Feilian's integrated endpoint‑network‑cloud ADR approach to achieve full‑stack, intent‑aware protection.
The article presents a comprehensive security analysis of AI Agent Skills, outlining a four‑stage attack surface—from creation to execution—detailing core risks such as malicious logic injection, supply‑chain poisoning, and persistent trust abuse, and proposes a full‑lifecycle governance framework, OWASP‑style top‑10, and emerging mitigation tools.
Ghost APIs—deprecated endpoints that remain active in production—create invisible attack surfaces, allowing adversaries to bypass modern defenses, as illustrated by incidents like Optus and T‑Mobile; the article dissects their risks, how attackers locate them, and practical three‑step defenses to eliminate these hidden vulnerabilities.
A 2025‑2026 deep‑fake attack on Arup’s finance team used publicly gathered intelligence to create a real‑time, AI‑generated video of the CFO and colleagues, resulting in a $25 million transfer and exposing the economic asymmetry that makes video‑call authentication unreliable, prompting a shift to multi‑channel, zero‑trust verification.
A leading identity verification provider exposed over one billion personal records after a cloud storage bucket was misconfigured, revealing names, IDs, biometric data and more; the breach impacted finance, e‑commerce, government and social platforms, prompting analysis of technical and managerial failures and a set of remediation steps for individuals, enterprises and the industry.
Economic pressure, massive layoffs and the rapid deployment of AI agents are amplifying insider risk, turning unstable staff and privileged machine identities into a systemic security threat that demands integrated behavioral and technical controls.
Moltworker, Cloudflare’s open‑source middleware, lets you host the openclaw (Clawdbot) AI assistant on the edge for just $5 a month, offering multi‑platform chat support, persistent storage, browser automation, and secure Zero Trust access, while outlining its simple deployment steps, strengths, and limitations.
This guide explains how to set up Alibaba Cloud Service Mesh (ASM) on an ACK Kubernetes cluster, covering prerequisites, two methods of cluster registration, creation of north‑south and east‑west gateways, traffic routing with HTTPRoute, security policies using PeerAuthentication and AuthorizationPolicy, and observability configuration via Telemetry.
This article explains why traditional VPNs are increasingly insecure, outlines the core principles of zero‑trust security, reviews twelve leading zero‑trust solutions with features, real‑world red‑team examples and quick‑setup commands, and provides a step‑by‑step migration guide from VPN to zero‑trust.
This article explains why traditional perimeter security fails in modern distributed environments and presents a comprehensive zero‑trust model, covering core design principles, technical implementation layers, practical YAML and Python examples, phased rollout strategies, technology choices, common challenges, and future trends.
This guide walks you through a ten‑step zero‑trust framework for hardening container security—from supply‑chain image signing and SBOM generation to runtime threat detection, network policies, secret encryption, and continuous monitoring—targeted at production Kubernetes clusters of any scale.
This comprehensive guide walks you through securing container workloads by defining applicable scenarios, setting up prerequisites, installing Trivy and Falco, hardening Dockerfiles, integrating CI/CD scanning and signing, configuring Kubernetes security contexts, network policies, pod security admission, runtime protection, Harbor registry hardening, regular scanning, monitoring, troubleshooting, and best‑practice recommendations.
Alipay’s trusted deep defense architecture, built on security parallel slices and trusted computing, was selected as a flagship case for the 2025 Important Industry Security Protection list, demonstrating zero‑false‑positive, zero‑miss, and zero‑business‑disruption protection against advanced threats such as 0‑day and APT attacks during high‑traffic events like Double 11.
Designing a medical data platform that meets both GDPR and HIPAA requires embedding compliance into the architecture from the start, using a five-layered security model that covers network perimeter, identity, data processing, storage, and audit, with key management, encryption, and policy-as-code automation.
This article examines the exponential growth of permission complexity in micro‑service architectures, outlines zero‑trust design principles, and provides concrete Java and YAML implementations for fine‑grained, context‑aware access control, caching, dynamic evaluation, and audit monitoring.
The article examines the emerging security challenges of AI agents, outlines four fundamental vulnerabilities, and introduces the AgentArmor framework—featuring a graph constructor, property registry, and type system—to compile agent behavior into verifiable programs and dramatically reduce attack success rates.
This article examines the rising security risks in microservice architectures, explains why traditional perimeter defenses fall short, and presents a comprehensive zero‑trust strategy that combines service‑mesh mTLS, API‑gateway hardening, token‑exchange authentication, OPA policies, data‑level encryption, observability, and container‑level safeguards.
This guide walks through hardening SSH against massive brute‑force attacks by switching to ed25519 key authentication, disabling password logins, obscuring the default port, tightening user permissions, adding two‑factor authentication, configuring bastion hosts, setting connection limits, centralizing logs, rotating keys regularly, and adopting a zero‑trust architecture with HashiCorp Vault.
Ant Group’s award‑winning ‘Aspect Fusion Intelligence’ system, unveiled at the 2025 Zhejiang Cybersecurity Promotion Week, leverages AI, large models, blockchain and zero‑trust principles to tackle trillion‑scale data, rapid threat response, and financial‑grade reliability, setting new standards for intrusion detection.
The article analyzes AWS Bedrock AgentCore and related hardware and software requirements for Agentic AI, covering runtime isolation with microVMs, memory architectures, identity and gateway design, zero‑trust networking, and the challenges of multi‑tenant KVCache and context engineering.
Teleport is an open‑source identity‑native access proxy that consolidates SSH, Kubernetes, databases, and internal web apps into a single, zero‑trust platform, replacing traditional bastion hosts, VPNs, and database gateways with short‑lived certificates, reverse tunnels, and unified audit logs for enhanced security and operational simplicity.
This article examines Nacos 3.0’s architectural evolution from Nacos 2.0, highlighting performance and extensibility upgrades, the new AI Registry with model, tool, and application layers, zero‑trust security enhancements, MCP Registry capabilities, and the roadmap toward a comprehensive AI‑native cloud‑native platform.
This article reviews a recent cloud‑native event, explains how Nacos 3.0 upgrades its architecture, introduces the MCP Registry for AI Agent development, and details zero‑trust security measures, while also showing integration patterns with Spring AI Alibaba and Higress for enterprise AI solutions.
This article outlines a comprehensive, financial‑grade security blueprint for a three‑person operations team using AWS services such as IAM, Secrets Manager, Session Manager, GuardDuty, and WAF, emphasizing Zero Trust, Least Privilege, and Defense‑in‑Depth to protect against external attacks, internal risks, and to enable clear audit trails for incident investigation.
This article explores iQIYI’s comprehensive testing ecosystem, detailing industry trends, the platform’s multi‑terminal challenges, fragmented legacy solutions, and the unified, cloud‑native “Qijing” environment that streamlines test access, zero‑trust security, and real‑world validation for rapid product delivery.
This article details Alibaba Cloud’s practical experience in designing secure DevSecOps architectures, outlining the challenges of balancing development speed with security, the roles and processes for security architecture design, layered defense strategies, and zero‑trust implementations to help enterprises strengthen product security from the outset.
This article examines why many enterprises repeatedly suffer data breaches, highlighting common security flaws such as manual permission management, account sharing, lack of least‑privilege, insufficient environment isolation, weak audit logging, and offers practical recommendations to strengthen information security.
This article explains how Istio provides comprehensive security for microservices by using traffic encryption, flexible access control, TLS, mutual authentication, JWT request validation, and fine‑grained authorization policies, enabling zero‑trust networking across Kubernetes and other environments.
This article explains how Microsoft Dynamics 365 leverages Azure’s multi‑layer security architecture—including zero‑trust, encryption, role‑based access control, identity management, continuous monitoring, and compliance features—to safeguard data against threats and ensure privacy for enterprises adopting cloud ERP solutions.
This article explains how to protect Nacos configuration data by applying zero‑trust principles, covering transport encryption with TLS, storage encryption using plugins, and fine‑grained access control through authentication and RBAC, while providing practical configuration steps.
XiaoHongShu’s award‑winning Zero‑Trust SASE Office Security Solution integrates all‑in‑one DLP, anti‑virus, identity‑bound access and distributed POPs to replace fragmented agents, delivering real‑time risk control, data‑non‑landing protection, multi‑level disaster recovery, and achieving 100% device coverage, an 80% reduction in data leakage and a 70% internal NPS after one year.
This whitepaper explains how the shift to cloud‑native development reshapes security, analyzes the challenges of moving from perimeter‑based models to label‑driven protection, and offers practical recommendations for embedding security across development, distribution, deployment, and runtime stages.
This article explains how to achieve zero‑trust security in Kubernetes by using a service mesh such as Linkerd, covering workload identity, mTLS, certificate management, policy definition with CRDs, and the practical limitations of mesh‑based protection.
This whitepaper outlines JD.com's practical zero‑trust security approach, detailing a five‑element framework that includes asset digitization, asset identity, diversified security checkpoints, a strategy center, and a zero‑trust cockpit, to help digital enterprises strengthen security, reduce costs, and meet regulatory requirements.
Sysdig’s 2023 Cloud‑Native Security and Usage Report uncovers that most container images carry critical vulnerabilities, a majority of granted permissions go unused, many containers lack proper CPU limits, and significant cloud‑cost waste persists, prompting urgent recommendations for identity‑access management, vulnerability prioritisation, and zero‑trust adoption.
The 2023 DevSecOps forecast highlights five major trends—including prioritizing software supply‑chain security, embedding security education in DevOps, pervasive AI/ML across the SDLC, deeper value‑stream analysis, and left‑shifting observability—while emphasizing zero‑trust, SBOM adoption, and the growing role of security in cloud‑native environments.
During the COVID‑19 pandemic, reliance on traditional VPNs surged, exposing growing security risks, while Zscaler’s report highlights attackers exploiting VPN vulnerabilities and underscores that adopting a zero‑trust architecture can dramatically reduce attack surfaces and protect remote workforces.
This article explains the fundamentals of service mesh as a cloud‑native infrastructure layer, covering its control‑plane and data‑plane architecture, sidecar and waypoint proxies, L4/L7 decoupling, eBPF acceleration, zero‑trust security, traffic management, observability, and real‑world deployment scenarios.
Istio's ambient mesh introduces a shared‑node ztunnel and optional waypoint proxies to provide zero‑trust security and optional L7 features without sidecar injection, reducing invasiveness, resource waste, and operational complexity while maintaining full mesh functionality.
This article examines the evolving security risks of cloud‑native architectures, explains why traditional perimeter defenses are insufficient, introduces zero‑trust principles for Kubernetes, outlines common K8s threat vectors, and presents a complete data‑collection and monitoring solution based on the open‑source iLogtail agent.
This article examines the evolution from traditional perimeter‑based security to zero‑trust models, compares their advantages, presents industry case studies, and details Ant Financial’s integrated zero‑trust architecture—including SDP, IAM, and micro‑segmentation—along with implementation practices and future outlook.
This article presents a detailed overview of data security governance in China, covering policy milestones, major security incidents, current challenges, a three‑layer governance model, practical workflow steps, classification methods, emerging zero‑trust concepts, and real‑world case studies, offering actionable insights for organizations seeking robust data protection.
This article explains the zero‑trust security model, its dynamic trust evaluation, common SDP components, three implementation approaches (application‑layer proxy, traffic‑layer proxy, hybrid), deployment scenarios for office, remote and data‑center environments, and practical steps for successful adoption.
The article presents a comprehensive case study of the Magic Butler system—a zero‑trust security management solution developed by 58 Group’s TEG department—detailing its business drivers, design principles, architecture, key technical features, deployment scale, and future outlook for enterprise network security.
This article provides a comprehensive analysis of Zero Trust security, explaining its core principles, SDP‑based architecture, various implementation models—including user‑to‑resource and service‑to‑service schemes—deployment options, practical use cases, and guidance for successful enterprise adoption.
This article provides a comprehensive overview of zero‑trust security, explaining its core principles, architectural models such as SDP, various implementation approaches (application‑layer proxy, traffic‑layer proxy, hybrid), deployment patterns for office and multi‑branch environments, practical rollout experience, and how zero‑trust integrates with existing security products.
This article provides a comprehensive overview of zero‑trust security, explaining its core principles, SDP‑based architecture, three main implementation models (application‑layer proxy, traffic‑layer proxy, and hybrid), various deployment scenarios, and practical guidance for enterprise adoption.
This whitepaper explains Google’s BeyondProd security framework, detailing how cloud‑native microservice architectures replace traditional perimeter models with zero‑trust principles, mutual authentication, service mesh, and automated tooling such as ALTS, Binary Authorization, and gVisor to protect workloads across shared infrastructure.
This article examines the origins, strategic importance, architecture, and key features of ZTO’s internally‑developed “Box” platform, illustrating how it unifies seamless user experience with deep security through zero‑trust principles, cross‑platform development, and integrated collaboration tools for a large logistics enterprise.
This article provides a comprehensive overview of Data Processing Units (DPUs), tracing their evolution from smart NICs, explaining their architecture, advantages such as workload offloading, zero‑trust security, and compute‑storage separation, and discussing future trends and NVIDIA's roadmap for integrated CPU‑GPU‑DPU solutions in data‑center and edge environments.
This article explains how the Alibaba Cloud Service Mesh (ASM) implements a zero‑trust security model for Kubernetes microservices, covering workload identity, mutual TLS, request authentication with JWT, authorization policies, OPA integration, performance optimizations, and step‑by‑step deployment commands, while referencing official guidance and practical examples.
The 2021 Trusted Cloud Conference in Beijing unveiled ten key cloud computing trends—including cloud native, high‑performance computing, chaos engineering, hybrid cloud, edge computing, zero‑trust, optimized governance, digital government, low‑carbon cloud, and enterprise digital transformation—highlighting the strategic direction of China's cloud industry.
At the 2021 ACM China Turing Conference in Hefei, leading academics and industry experts presented cutting‑edge research on AI‑driven security, mobile OS vulnerability detection, IoT sensor risks, ARM confidential computing, and zero‑trust frameworks, highlighting how emerging technologies reshape secure mobile and industrial ecosystems.
In the post‑pandemic era, remote work and multi‑cloud adoption have exposed the limits of traditional perimeter defenses, prompting a shift toward zero‑trust models where Software‑Defined Perimeter (SDP) plays a pivotal role in safeguarding enterprise networks.
At the 2021 Trusted Cloud Conference, the China Academy of Information and Communications Technology released the top ten cloud computing keywords—cloud native, high performance, chaos engineering, hybrid cloud, edge computing, zero trust, optimized governance, digital government, low‑carbon cloud, and enterprise digital transformation—highlighting their significance and future development directions.
This article details the design and implementation of a zero‑trust network architecture, covering policy modeling (SARE), management realms, decision center components, L4/L7 gateways, security clients, risk assessment, and integration with SIEM for continuous trust evaluation.
This article outlines the limitations of traditional perimeter‑based IT security, introduces the Zero Trust philosophy and its six core principles, and presents a practical, layered architecture with components and prioritized steps for building a Zero Trust network in modern enterprises.
This article explains the Zero Trust security model, its advantages over traditional perimeter defenses, core technologies such as SDP, IAM, and micro‑segmentation, implementation principles, essential components, real‑world deployment scenarios, future trends, and Tencent's practical contributions to the industry.
This article examines Service Mesh security by outlining core requirements, detailing Istio’s built‑in zero‑trust mechanisms—including mutual TLS, AAA, and automatic certificate rotation—and comparing the security features of Linkerd and Alauda Service Mesh, offering practical insights for designing robust microservice protection.
This article translates Google’s 2019 BeyondProd whitepaper, explaining the shift from perimeter‑based to zero‑trust cloud‑native security, the key terminology, design motivations, core security principles, internal tools such as ALTS, Binary Authorization, gVisor, and concrete examples of data‑access and code‑change flows.
During the stay‑at‑home period, this article suggests nine concise programming books covering Python neural networks, web crawling, deep learning with PyTorch, machine learning fundamentals, zero‑trust network security, classic programming pearls, Python mathematics, AI algorithms, and Vim text processing, each with brief descriptions and images.
The article analyzes why conventional antivirus, firewall, and intrusion‑detection approaches have reached their limits, identifies trust as the root cause of internet security problems, and proposes a decentralized architecture using blockchain, IPFS, and zero‑trust principles to rebuild identity, network, computing, and storage with intrinsic security.
Tencent led the creation of the world’s first zero‑trust security standard at the ITU‑T SG17 meeting, detailing the concept, its industry impact, and real‑world deployments across sectors such as government, healthcare, transportation, and finance.
This talk outlines Alibaba’s massive global host infrastructure, the evolving security governance from manual controls to data‑driven, automated systems, the challenges of compliance and operational efficiency, and future directions such as zero‑trust and invisible security.
