Datadog says high and critical cloud flaws quadrupled since May
Among monitored workloads, the median count rose from four in May to 16 in November, Datadog claims.
1
Stories per day · 30 days
2 RSS
Relatedcloud-security3funding2upwind2agent-security1appsec1buyers-guide1cnapp1contrast1credentials1cribl1dependencies1dynatrace1elastic1fastly1jev1langchain1log-management1m-and-a1
15 stories, newest first · one card per story
Stories tagged #datadog
Security log management tools ranked for 2026
Splunk leads for analytics depth while Elastic offers open resource-based pricing in 2026 log management tools.
1
Upwind raises $400 million Series C, declines Datadog offer
Nine months after a $250 million round, the startup is valued at $3.8 billion with about $90 million forecast ARR.
Upwind Security raises $400 million Series C at $3.8 billion valuation
The round comes nine months after a $250 million raise and follows disputed reports that Datadog offered nearly $4 billion to acquire the startup.
10 Best RASP Tools Compared (2026): Features & Pricing
A 2026 buyer's guide compares ten RASP and runtime-protection products, led by Contrast and Waratek.
Jev as a judge: How counterfeit policy steers Jev
Datadog tests whether prompt injection can steer TypeSafe’s Jev and bypass LangChain tool-risk gating.
10
9 Best IAST Tools Compared (2026): Features & Pricing
A 2026 comparison ranks nine IAST tools, led by Contrast Security, Seeker, Dynatrace, and Datadog.
Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access
Datadog found harvesters testing stolen AWS keys specifically for Amazon Bedrock access.
6
Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals
Datadog found over 3,500 dangerous RBAC grants to Kubernetes built-in principals across 65,000 clusters.
7
OpenCode AI Coding Agent Flaw Lets Malicious Websites Execute Code on Developer Machines
OpenCode versions 1.14.30 through 1.18.21 let a malicious site run code on a developer's machine via the local upgrade API.
Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4)
Datadog demonstrates remote code execution in OpenCode AI coding agent via content-type confusion in the /global/upgrade endpoint, fixed in 1.18.22.
12 Serverless Security Options Compared (2026): Features & Pricing
A buyer-focused comparison of twelve serverless security offerings concludes no standalone SKU is worth buying in 2026, with function protection bundled inside CNAPP contracts.
3
Mapping out your unknown: A threat hunter’s guide to GitHub
Datadog Security Labs publishes a threat-hunting guide with audit-log queries to detect GitHub token theft, device code phishing, and source code exfiltration.
8
N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it
Datadog researchers detonated a new N4D Mesh Controller sample in microVMs, revealing rotated infrastructure, a UPX-packed go-titan agent, and persistence behavior.
Putting models to the secure coding test: Plan vs default mode
Datadog Security Labs tested Sonnet 5, Composer 2.5, and GPT 5.5 to see if plan mode yields more secure code than default mode.