Public benchmarks in AI provide important signals and allow for regression testing, directional validation of model updates, and public discussion of capabilities and limitations. But the more attention a benchmark…
A joint Tenable-SentinelOne analysis of 93 CVE-actor attribution pairs reveals that both state-sponsored actors and cybercriminals independently converge on the same edge infrastructure. Special thanks to SentinelOne® Incident Readiness &…
Varonis Threat Labs uncovered another one-click vulnerability in Microsoft Copilot Personal dubbed CoSnitch (critical, CVE-2026-24301), which quietly executes an attack chain that exfiltrates data from enterprises without obvious red flags.
Every era of computing eventually exposes the assumptions that made the last era work. For decades, networking succeeded because it was mostly identity agnostic. Packets moved because they had addresses….
Over the past few months, Okta has made considerable progress in our quest to deliver zero standing privileges to administrators of the Okta Platform. As we discussed in Part 1…
For the latest discoveries in cyber research for the week of 24th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Latvia’s Road Traffic Safety Directorate (CSDD) has confirmed…
In this article MacSync Stealer is a macOS-focused information stealer that relies on changing infrastructure to deliver payloads, communicate with compromised devices, and exfiltrate data. Earlier reporting by RST Cloud…
You likely noticed the recent redesign of the Cloudflare Blog. We added dark mode, modernized the look and feel, and made a lot of other small improvements along the way….
Disconnecting a compromised phone from the internet is usually the first line of defense, but a nasty new piece of Android malware just found a way to bridge the air…
This is Part 1 of a three-part series. Read Part 2 and Part 3. Table of Contents Introduction Motivating Example: ip-distance Unit Tests 1. Introduction As someone who ships a…
