Cloud Security Posture Management: CSPM, CNAPP, CWPP, and WAAP Explained

Posted on by Dean Lombardo

It’s an alphabet soup in the cloud security market: Cloud security posture management (CSPM), CNAPP, CWPP, and WAAP. These cybersecurity product categories address different security requirements, from cloud configuration monitoring and compliance to workload and application protection. Discover how they differ, where they overlap, and how Atomicorp addresses important cloud security requirements. What Is Cloud […]

HPC Security Beyond OS Hardening: Protecting Enterprise Linux and Advanced Computing Infrastructure

Posted on by Dean Lombardo

High-performance computing (HPC) and AI infrastructure providers deliver the operating systems, management tools, and expertise behind demanding workloads. Yet their OS hardening and patching alone cannot address every cyber threat. Continuous file integrity monitoring (FIM), intrusion detection, vulnerability management, and automated response extend security across enterprise Linux and heterogeneous computing environments. For customers, these capabilities […]

Protecting Industrial Operations from Legacy IT Security Risks

Posted on by Dean Lombardo

Legacy systems in OT environments often include aging Windows, Linux, and Unix-based computers that configure, monitor, and manage industrial equipment. These systems can introduce vulnerabilities into critical operations, while compatibility and uptime requirements complicate conventional security measures. Agentless EDR offers a way to extend continuous security and compliance monitoring to difficult-to-protect systems. Industrial operations rely […]

CVE Research Tools from Atomicorp

Posted on by Mike Shinn

Atomicorp CVE Research Tools provide answers during uncertain times. A new CVE has been identified! How do you determine whether it affects your environment, whether a patch is available, and what protections may already stand between the vulnerability and an attacker? Atomicorp CVE Research Tools at research.atomicorp.com provide a place to investigate selected CVEs and […]

The WAF Blind Spot: What Basic Web Application Protection Can Miss

Posted on by Dean Lombardo

A WAF can be running, correctly configured, and blocking known attacks while still leaving significant gaps in application security. Limited inspection, outdated WAF rules, exposed APIs, and unpatched software vulnerabilities can create security gaps that attackers may exploit. For enterprises, CDN providers, and security integrators, effective web application protection requires more than baseline OWASP Top […]

The Endpoint Never Went Away: Why Host-Based Security Still Matters

Posted on by Dean Lombardo

Host-based security remains a critical layer of cybersecurity even as organizations shift infrastructure and security operations to the cloud. Servers, workstations, virtual machines, cloud instances, container hosts, legacy systems, and OT endpoints still run applications, process data, and deliver the programs defenders need to protect. Host-based security monitoring provides visibility into what is running, what […]

Who—or What—Changed That File? File Change Monitoring for Modern Security

Posted on by Dean Lombardo

File change monitoring can tell organizations much more than whether an important file was modified. Modern file integrity monitoring (FIM) can provide valuable event data about what changed, when and where it happened, and who or what was responsible. Combined with real-time monitoring and other security telemetry, this information can help security, IT, OT, and […]

When AI Agents Become Attackers: Lessons from the OpenAI and Hugging Face Incident

Posted on by Mike Shinn

In July 2026, an autonomous AI agent escaped an OpenAI security evaluation environment, reached the public Internet, compromised third-party infrastructure, and ultimately penetrated production systems at Hugging Face. This was not a hypothetical demonstration. Hugging Face reconstructed approximately 17,600 attacker actions grouped into roughly 6,280 clusters between July 9 and July 13. According to Hugging […]

CMMC Phase 2 Suspension Isn’t a Reason to Stop Preparing

Posted on by Dean Lombardo

The CMMC Phase 2 suspension gives defense contractors more time to prepare, not a reason to stop preparing. Here are some reminders and recommendations for the meantime. The Cybersecurity Maturity Model Certification (CMMC) program was headed toward an important milestone on November 10, 2026. That was when Phase 2, also referred to as Phase I, […]

AI-Speed Vulnerability Exploitation, and Layered Security Countermeasures

Posted on by Dean Lombardo

Artificial intelligence is changing more than the sophistication of cyber attacks—it is changing the speed of attacks. AI-speed vulnerability exploitation enables attackers to discover weaknesses, generate exploits, perform reconnaissance, and launch attacks in a fraction of the time previously required by human operators. As the defender’s response window shrinks, defense in depth cybersecurity becomes increasingly […]