Temporary Cloudflare Accounts for AI agents
Everyone’s writing code with AI agents today. But the moment an agent needs to deploy something — and needs to sign up and create an account — it slams face-first…
-
-
Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)
Overview On June 10, 2026, Oracle published a security alert for CVE-2026-35273, a critical vulnerability in the Updates Environment Management component of PeopleSoft Enterprise PeopleTools. Oracle released an out-of-band patch…
-
Tudou Guarantee Successors Expand Cybercrime Marketplace
The shutdown of Tudou Guarantee in early 2026 marked the end of one of the largest cybercrime escrow marketplaces in operation. However, according to research from Flare, it did not…
-
DAST without disruption: Burp Suite DAST winter update 2025 | Blog
Rob Samuels | Thursday, 11 December 2025 at 13:09 UTC AppSec teams are under constant pressure to secure fast-moving applications without slowing anything down. But scanning windows, fragile authentication, and…
-
Azure-Hosted Scanning Cluster Launches WordPress Webshell Discovery Campaign
Introduction Just as we continually analyze the threat landscape, we also look to broaden and improve our telemetry to provide the best possible insights from our datasets. With this, in…
-
OpenClaw: Cato Governance Controls and Sector Exposure Insights from the Cato SASE Platform
Agentic AI does not just answer, it acts. The moment an agent has a reachable control plane, you have effectively created a “remote hands” interface into your environment. In our…
-
Okta’s Secure by Design Pledge – One Year On
Foreword A year ago, Okta was among the first technology providers to pledge our commitment to the US Cybersecurity and Infrastructure Security Agency (CISA)’s seven Secure by Design principles. To…
-
How we found a bug in the hyper HTTP library
The Images service, built in Rust on Workers, runs on every machine in Cloudflare’s edge network. To handle client connections, we use hyper, an open-source HTTP library for Rust. Last…
-
New Kerberos/Certificate tracing options, and multiple new modules
New Tracing Options As hard as we try to ensure that Metasploit is bug free, issues inevitably come up. Whether you’re running a module on an op or writing a…
-
AI-Driven Attacks, Critical Exploits, and Global Breaches Define this Week in July 2026 in Cybersecurity
Major Threats & Vulnerabilities Critical Exploits and Zero-Day Vulnerabilities CISA warned of active exploitation of a critical Adobe ColdFusion flaw (CVE-2026-48282), urging immediate patching and heightened monitoring for unusual activity…
