# Endpoint security Published articles for Endpoint security. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## CrowdStrike Accelerates Real-Time Data Classification with On-Device AI DevFeed: [CrowdStrike Accelerates Real-Time Data Classification with On-Device AI]() Original publisher: [Read original article]() Author: Lior Ribak Published: 2026-09-17T01:38:53.400452Z Content type: article Language: en Sources: [Blog]() Topics: [On-device AI](), [sensitive data](), [Language models](), [Endpoint security](), [Hardware](), [intel]() Tags: [data-security](), [endpoint-security](), [intel](), [language-models](), [npu](), [on-device-ai]() ### AI overview CrowdStrike and Intel introduced a Falcon Data Security capability that uses language models running on-device on dedicated AI hardware to classify sensitive data. The article explains that local inference is intended to avoid cloud latency and keep sensitive customer data on the endpoint while meeting real-time protection requirements. ### Source excerpt CrowdStrike worked closely with Intel to introduce a new capability in Falcon Data Security that classifies sensitive data using language models that run on-device using dedicated hardware for AI. Learn more! ## How to Build an Endpoint Data Loss Prevention Strategy for Your Development Team DevFeed: [How to Build an Endpoint Data Loss Prevention Strategy for Your Development Team]() Original publisher: [Read original article]() Author: Alex Tray Published: 2026-09-15T21:03:09Z Content type: tutorial Language: en Sources: [freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More]() Topics: [data loss prevention](), [Development](), [Access Control](), [data]() Tags: [access-control](), [cybersecurity](), [cybersecurityawareness](), [data-loss-prevention](), [data-protection](), [database](), [development](), [encryption](), [endpoint-security](), [hardcoded-credentials](), [it-security](), [net-conf](), [remote-access](), [secrets](), [sensitive-data](), [web-development]() ### AI overview A tutorial for development teams on building endpoint data loss prevention strategies. It covers auditing laptops for secrets and sensitive data, removing unnecessary copies, rotating exposed credentials, and establishing access controls. ### Source excerpt A developer's laptop holds more sensitive data than most people realize: API keys, database credentials, staging environment secrets, and sometimes entire copies of production data pulled down "just f ## The hidden work of modernizing Malwarebytes DevFeed: [The hidden work of modernizing Malwarebytes]() Original publisher: [Read original article]() Author: Anna Tukhtarova Published: 2026-09-04T17:15:42Z Content type: article Language: en Sources: [Malwarebytes]() Topics: [.NET](), [migration](), [Endpoint Security & XDR](), [Operating system]() Tags: [diagnostics](), [drivers](), [endpoint-security](), [engineering](), [inside-malwarebytes](), [migration](), [modernization](), [net](), [security]() ### AI overview The article explains Malwarebytes' migration of its managed Windows components to .NET 10 and why runtime and dependency upgrades require security-feature-level rigor in endpoint software. ### Source excerpt Why disciplined dependency modernization is one of the highest-leverage engineering investments a security product can make. ## The security attack that hid inside your observability data DevFeed: [The security attack that hid inside your observability data]() Original publisher: [Read original article]() Author: Roberto Arico Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [SIEM, Security, Observability](), [telemetry](), [cpu]() Tags: [cost](), [cpu](), [endpoint-security](), [endpoint-security-observability-security-siem-log-analytics](), [observability](), [security](), [security-analytics-security-compliance-threat-hunting-tool-consolidation-agentic-ai-alerting]() ### AI overview The article explains how separating observability and security platforms can conceal threats such as cryptominers, duplicate data costs, and prevent teams from seeing the full operational and security picture. ### Source excerpt Your ops team sees a CPU spike. Your security team sees nothing. The cryptominer runs for six hours. Avoid duplication of cost and time and see how a unified observability and security platform with grounded AI closes the gap. ## Bring your security stack into Edge for Business -- with support for more partners DevFeed: [Bring your security stack into Edge for Business -- with support for more partners]() Original publisher: [Read original article]() Author: Microsoft Edge Team Published: 2026-08-04T16:00:24Z Content type: article Language: en Sources: [Microsoft Edge Blog]() Topics: [Edge for Business](), [browser](), [Cisco Secure Access](), [Security](), [Endpoint Security & XDR](), [MFA](), [telemetry](), [Microsoft]() Tags: [browser](), [cisco-secure-access](), [edge-for-business](), [endpoint-security](), [integrations](), [mfa](), [microsoft](), [security](), [telemetry](), [uncategorized]() ### AI overview This Microsoft Edge Blog article announces expanded Edge for Business security connector integrations. It highlights Cisco Secure Access, Tanium, and Clever integrations for browser-based security, telemetry, endpoint visibility, compliance validation, data protection, AI guardrails, and streamlined MFA in education environments. ### Source excerpt At a glance Edge for Business security connectors extend your security tools into the browser, so you gain visibility and enforcement where work happens. This update adds new partner integrations, including Cisco Secure Access, The post Bring your security stack into Edge for Business -- with support for more partners appeared first on Microsoft Edge Blog. ## Securing the future of AI agents DevFeed: [Securing the future of AI agents]() Original publisher: [Read original article]() Author: Rohin Shah; Four Flynn Published: 2026-06-16T15:46:31Z Content type: article Language: en Sources: [Google DeepMind News]() Topics: [Artificial Intelligence](), [AI Agent](), [Cybersecurity](), [Security](), [Threat Research](), [Endpoint security](), [Google]() Tags: [agents](), [ai](), [ai-agents](), [best-practices](), [cybersecurity](), [endpoint-security](), [google](), [knowledge-base](), [model](), [prompt-injection](), [responsibility-safety](), [security]() ### AI overview The article presents Google's AI Control Roadmap for securing internal systems against increasingly capable but imperfectly aligned AI agents. It combines model alignment with defense-in-depth safeguards such as sandboxing, endpoint security, prompt injection resistance, behavior-based permissions, and threat modeling based on adversary tactics and techniques. ### Source excerpt Securing internal systems with an AI Control Roadmap, combining traditional safeguards and real-time monitoring. ## Chainguard customers safe from Mini Shai-Hulud worm targeting @redhat-cloud-services npm packages with 100K+ weekly downloads DevFeed: [Chainguard customers safe from Mini Shai-Hulud worm targeting @redhat-cloud-services npm packages with 100K+ weekly downloads]() Original publisher: [Read original article]() Published: 2026-06-01T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [npm](), [Security](), [GitHub Actions](), [npm packages](), [GitHub](), [obfuscation](), [payload](), [OpenID connect (OIDC)]() Tags: [chainguard-actions](), [chainguard-libraries](), [endpoint-security](), [github](), [github-actions](), [malware](), [mini-shai-hulud](), [npm](), [obfuscation](), [oidc](), [packages](), [payload](), [red-hat](), [redhat-cloud-services](), [security](), [shai-hulud](), [tokens]() ### AI overview The article reports that the Mini Shai-Hulud worm compromised more than 90 @redhat-cloud-services npm packages through a hijacked GitHub account and GitHub Actions OIDC trusted publishing. The worm spreads tampered packages and malicious workflows, executes an obfuscated payload during installation, and steals cloud, Vault, GitHub, npm, and CI credentials. Chainguard customers using Chainguard Libraries for JavaScript and Chainguard Actions were unaffected. ### Source excerpt A new npm worm hit 90+ Red Hat packages. Chainguard customers stayed protected by blocking install-time scripts and hardening CI/CD workflows. ## Seeking symmetry during ATT&CK® season: How to harness today's diverse analyst and tester landscape to paint a security masterpiece DevFeed: [Seeking symmetry during ATT&CK® season: How to harness today's diverse analyst and tester landscape to paint a security masterpiece]() Original publisher: [Read original article]() Author: Márk Szabó James Shepperd Ben Tudor Published: 2025-12-10T15:03:51Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Endpoint Security & XDR](), [Cybersecurity](), [Resilience](), [Detection engineering](), [Threat Research]() Tags: [2025](), [analysts](), [article](), [attacks](), [business-security](), [ciso](), [cybersecurity](), [endpoint-security](), [enterprise](), [incident](), [industry](), [infrastructure](), [practitioner](), [report](), [resilience](), [security](), [testing]() ### AI overview The article explains how security practitioners can interpret and connect cybersecurity reports and tests from analyst firms and independent testing labs. It focuses on endpoint security, including product evaluations, feature testing, broader market analyses, and assessments against known advanced adversary attacks, to support more informed protection-stack and purchasing decisions. ### Source excerpt Interpreting the vast cybersecurity vendor landscape through the lens of industry analysts and testing authorities can immensely enhance your cyber-resilience. ## Rolling out Santa without freezing productivity: Tips from securing Figma's fleet DevFeed: [Rolling out Santa without freezing productivity: Tips from securing Figma's fleet]() Original publisher: [Read original article]() Author: Aaron Osborne Published: 2025-07-02T00:00:00Z Content type: article Language: en Sources: [Figma Blog]() Topics: [Endpoint security](), [Security](), [Authorization](), [macOS](), [Credential theft](), [App](), [Tooling](), [Malware](), [Script](), [Extension]() Tags: [authorization](), [browser](), [credential-theft](), [endpoint-security](), [macos](), [malware](), [open-source](), [santa](), [security](), [workflows]() ### AI overview Figma describes rolling out Santa, an open-source binary authorization tool, across its employees' macOS laptops to improve endpoint security without disrupting productivity. The article covers monitoring-based ruleset development, user self-service for unblocking, file access authorization for browser cookies, and a staged rollout. ### Source excerpt We scaled Santa, an open-source binary authorization tool, across all Figmates' laptops to boost endpoint security while keeping workflows seamless. Here's how we tackled the challenges and ensured a smooth rollout. ## Designing for security and usability: Figma's modern endpoint strategy DevFeed: [Designing for security and usability: Figma's modern endpoint strategy]() Original publisher: [Read original article]() Author: Lamarr Henry Published: 2025-04-04T00:00:00Z Content type: article Language: en Sources: [Figma Blog]() Topics: [Endpoint Security & XDR](), [Security](), [Usability](), [User experience (UX)](), [macOS]() Tags: [browsers](), [endpoint-security](), [macos](), [malware-prevention](), [security](), [usability](), [ux]() ### AI overview Figma describes an endpoint security strategy designed around usability. Its Endpoint Security Baseline uses controls such as browser updates, disabled remote login, and prevention of kernel extensions to protect corporate devices while keeping security self-serve and minimizing employee friction. ### Source excerpt At Figma, security doesn't have to slow you down. We've designed our corporate endpoint security with UX in mind, making it seamless and self-serve. ## What caused 8.5 million Windows computers to crash in the CrowdStrike Falcon incident DevFeed: [What caused 8.5 million Windows computers to crash in the CrowdStrike Falcon incident]() Original publisher: [Read original article]() Author: Richard Oliver Bray Published: 2024-08-28T13:00:58Z Content type: article Language: en Sources: [Hacking Scale by Better Stack]() Topics: [Security](), [Endpoint Security & XDR](), [Windows](), [Kernel](), [Machine learning]() Tags: [endpoint-security](), [kernel](), [machine-learning](), [security](), [windows]() ### AI overview This article explains how a CrowdStrike Falcon software issue caused 8.5 million Windows machines to crash on July 19, 2024. It describes Falcon's endpoint-security architecture, including cloud servers, machine-learning analysis, threat intelligence, and kernel-level sensors. ### Source excerpt How one security product crippled the world because of bad programming ## Cybersecurity hygiene in co-working spaces: A practical guide DevFeed: [Cybersecurity hygiene in co-working spaces: A practical guide]() Original publisher: [Read original article]() Published: 2024-01-02T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [Cybersecurity](), [Kubernetes](), [Endpoint security](), [network security](), [Application Security](), [Incident response](), [Git](), [MFA](), [USB]() Tags: [cybersecurity](), [endpoint-security](), [git](), [github-vulnerability](), [guide](), [incident](), [incident-response](), [kubernetes](), [kubernetes-security](), [least-privilege](), [network-security](), [security-best-practices](), [usb]() ### AI overview A practical guide to cybersecurity hygiene in co-working spaces. It covers Kubernetes security, Git repository protection, device safety, layered defenses, incident response, and security awareness training. ### Source excerpt Navigate the cybersecurity landscape in shared work environments with essential tips on device safety and incident response. ## Unmanaged Code Execution with .NET Dynamic PInvoke DevFeed: [Unmanaged Code Execution with .NET Dynamic PInvoke]() Original publisher: [Read original article]() Author: bohops Published: 2022-04-02T16:45:49Z Content type: tutorial Language: en Sources: [Bohops]() Topics: [.NET](), [C#](), [Code](), [Endpoint Security & XDR]() Tags: [c-sharp](), [code](), [endpoint-security](), [interop](), [native](), [net](), [security](), [uncategorized]() ### AI overview This developer article explains classic P/Invoke in .NET and introduces Dynamic PInvoke, a technique for calling and executing native code differently from managed code. It discusses limitations, .NET executable structure, and possible defensive-evasion implications. ### Source excerpt Yes, you read that correctly - "Dynamic Pinvoke" as in "Dynamic Platform Invoke" Background Recently, I was browsing through Microsoft documentation and other blogs to gain a better understanding of .NET dynamic types and objects. I've always found the topic very interesting mainly due to its relative obscurity and the offensive opportunities for defensive evasion. [...] ## Investigating .NET CLR Usage Log Tampering Techniques For EDR Evasion DevFeed: [Investigating .NET CLR Usage Log Tampering Techniques For EDR Evasion]() Original publisher: [Read original article]() Author: bohops Published: 2021-03-16T04:08:58Z Content type: article Language: en Sources: [Bohops]() Topics: [Endpoint Security & XDR](), [Logging](), [.NET](), [Security](), [Threat Hunting & Intel](), [Machine Learning, Security Attacks]() Tags: [code](), [endpoint-security](), [logging](), [net](), [process](), [processes](), [security](), [uncategorized]() ### AI overview This article examines how .NET CLR Usage Logs can help defenders detect and investigate .NET execution, including assembly injection into process memory. It describes how the CLR creates Usage Log files and discusses tampering techniques intended to evade endpoint detection, along with monitoring opportunities for identifying that tampering. ### Source excerpt Introduction In recent years, there have been numerous published techniques for evading endpoint security solutions and sources such as A/V, EDR and logging facilities. The methods deployed to achieve the desired result usually differ in sophistication and implementation, however, effectiveness is usually the end goal (of course, with thoughtful consideration of potential tradeoffs). Defenders can [...]