HTTP/2 Crash: A Denial of Service (DoS) in HTTP/2 Flow Control
At a glance On April 7, 2026, the Okta Red Team reported a denial-of-service condition in HTTP/2 flow control via VINCE that could allow a remote, unauthenticated threat actor to…
-
-
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
In this article Since early May 2026, Microsoft Threat Intelligence has observed Storm-2945, a sub-cluster of Midnight Blizzard, conducting widespread but targeted traffic manipulation attacks involving hospitality sector networks served…
-
Welcome to Agents Week | The Cloudflare Blog
This week is Agents Week. As we started thinking about and planning the week, we wrestled with a broader question of what it means to support this new era of…
-
Anthropic Says Claude Found New Attacks on HAWK and Reduced-Round AES
AI is beginning to do more than find software vulnerabilities. Anthropic says its Claude Mythos Preview model has now contributed new techniques for analyzing the mathematics behind cryptographic systems. The…
-
Your Black Hat agenda: 5 key priorities and what to avoid
Like RSA, Black Hat also changed in 2005 but for a completely different reason. The conference was sold to CMP Media that year for $14m (CMP is now part of…
-
From capable AI models to trusted security testing | Blog
Kieron Hughes | Thursday, 30 July 2026 at 14:58 UTC This week, we launched Burp AT in public beta for Burp Suite Professional users. Next week at Black Hat, PortSwigger…
-
The Good, the Bad and the Ugly in Cybersecurity – Week 31
The Good | Authorities Disrupt “The Com”, Release Security Guidelines & Charge Telegram CEO Europol and law enforcement partners from nine countries have flagged over 4000 URLs for removal to…
-
Falcon AIDR Now Protects Copilot Studio Agents and Claude Code
Employees are already using AI at work. They build agents in Microsoft Copilot Studio, write code with Claude Code, and paste sensitive data into chatbots in the browser. Each of…
-
When AI Assistant Share Links Become Public Exposure
Every major AI assistant likely includes a “Share” button. The mental model users hold is a private hand-off, like a link you paste to a colleague. However, the mental model…
-
Okta Social Engineering Impersonation Report – Response and Recommendation
Summary Okta has identified an increase in phishing social engineering attempts claiming to be from Okta Support. This report provides guidance on what you can expect when getting technical assistance…
