Selected coverage, commentary, and announcements. For interview requests, speaking opportunities, or source inquiries, reach out directly.
via Cloudflare Blog
Byline on Cloudflare Managed Defense’s multi-AI-agent security operations harness, separating deterministic evidence collection from model inference to reduce hallucinations and scope drift.
via Cloudflare Blog
Byline on combining WAF data and OpenAI Daybreak models to prioritize vulnerabilities, prepare edge mitigations, and propose code patches.
via CYBERUK
Speaking profile for Blake Darche at CYBERUK 2026, highlighting his 20+ years of experience from NSA to CrowdStrike to Cloudflare.
via ExecEdge
Fireside chat at RSA Conference 2026 on Cloudforce One, threat intelligence, and industry challenges.
via Cloudflare Blog
Byline on new visualization, automation, and enrichment tools that turn massive telemetry into instant security posture without ETL pipelines.
via The Connectivity Cloud Podcast
Podcast discussion with Blake Darché, Head of Cloudforce One, and Vladimir Krupnov of Revolut on AI-driven attacks, fake North Korean worker schemes, and Cloudforce One disruption operations.
" Threat intelligence is useless without actionability — organizations must build workflows and cross-functional pipelines before collecting signals. "
via Cloudflare Blog
Byline announcing Cloudforce One REACT, an elite incident response team bridging perimeter defense and internal response.
via Cloudflare Blog
Byline introducing the Cloudforce One threat events platform for real-time, actionable threat-actor context.
via The CyberWire Research Saturday
Podcast interview with Blake Darche, head of Cloudforce One at Cloudflare, on the SloppyLemming espionage campaign and cloud-platform abuse.
" Cloudflare has been observing a variety of threat actors using disparate cloud services to make tracking of their operations very difficult and hinder response. "
via Cloudflare Press Release
Press release on Cloudforce One making its threat intelligence public, with comment from Head Blake Darche.
" Threat intelligence is a non-negotiable when it comes to tipping the scale back in favor of defenders. "
via Cloudflare Blog
Byline on a malicious Android app impersonating Israel’s Red Alert rocket-alert system, discovered by Cloudforce One.
via Cloudflare Blog
Byline on how threat actors use topical events like the Silicon Valley Bank collapse as lures for opportunistic phishing campaigns.
via Cloudflare Blog
Byline announcing that Cloudforce One is open for business and conducting threat briefings.
via Cloudflare Blog
Byline by Blake Darché announcing Cloudforce One, Cloudflare’s threat operations and research team focused on tracking and disrupting threat actors.
" While this team will publish research, that’s not its reason for being. Its primary objective: track and disrupt threat actors. "
via SecurityWeek
Funding coverage noting Area 1’s pre-emptive detection capabilities and its founding team including Blake Darche as CSO.
via POLITICO
Blake Darche, chief security officer of Area 1 Security, cited on the EU diplomatic cable breach attributed to Chinese PLA-affiliated hackers.
" The attack shows that hackers continue to exploit the weakest links in the digital chain. "
via Courthouse News
Co-founder Blake Darche describes how Area 1 followed forensic clues from a phishing email to an unsecured server holding EU diplomatic cables.
" We estimate that the ones we found are a small fraction of the overall operation. "
via CyberScoop
Blake Darché, former NSA analyst and founder of Area 1 Security, on the DOJ complaint against the North Korean hacker behind Sony, WannaCry, and SWIFT attacks.
" I think it’s a total waste of money. It does nothing to deter the cyberthreat and makes it look like the United States can’t even bring the people to justice that we charged. "
via CyberScoop
Blake Darche, former NSA computer network exploitation analyst, on how antivirus software can extend a host’s attack surface and serve as a distribution point if its central server is compromised.
" Aside from the remote risks, antivirus can extend the attack surface of a host. If an attacker can gain access to the central antivirus server within an organizations network, that central server can be used for malware distribution. "
via CNBC
CNBC interview with Blake Darche, co-founder of Area 1 Security and former NSA counter-intelligence analyst, on the Kaspersky-linked NSA breach.
via Marine Corps Times
Blake Darche, former NSA worker and then chief security officer of Area 1, reacts to the report that Russian hackers stole NSA secrets via Kaspersky antivirus on a contractor’s personal computer.
" Kaspersky copying NSA information from an NSA person’s computer? That’s shocking. "
via The Boston Globe
Quoted as a former NSA TAO operator and then head of security research at Area 1 on the significance of leaked NSA exploitation tools.
" They are expensive software used to take over firewalls used in the largest and most critical commercial, educational, and government agencies around the world. "
via NBC News
Coverage of Area 1 Security’s $8 million Series A led by Kleiner Perkins, founded by Oren Falkowitz, Blake Darche, and Phil Syme.
via Fortune
Long-form feature on Area 1 Security’s founding by three NSA alumni, including Blake Darche, and its pre-emptive anti-phishing mission.
" At the end of the day, the idea is to prevent breaches before they happen. "