How we found a bug in the hyper HTTP library
The Images service, built in Rust on Workers, runs on every machine in Cloudflare’s edge network. To handle client connections, we use hyper, an open-source HTTP library for Rust. Last…
-
-
AI-Driven Attacks, Critical Exploits, and Global Breaches Define this Week in July 2026 in Cybersecurity
Major Threats & Vulnerabilities Critical Exploits and Zero-Day Vulnerabilities CISA warned of active exploitation of a critical Adobe ColdFusion flaw (CVE-2026-48282), urging immediate patching and heightened monitoring for unusual activity…
-
Burp On Tour 2025: bringing the AppSec community together around the world | Blog
Amelia Coen | Friday, 12 December 2025 at 11:34 UTC In 2025, we set out with a simple mission: take Burp Suite on the road and meet the global AppSec…
-
Weekly Threat Bulletin – April 15th, 2026
Acrobat Reader Zero-Day Exploited in the Wild for Many Months A zero-day vulnerability in Adobe Acrobat Reader has been actively exploited since November 2025, and potentially earlier, as discovered by…
-
Code Review That Learns: Inside Cato R&D’s Self-Evolving PR Review Agent
TL;DR Agentic AI promises to improve work processes in all domains and industries. R&D is no different. Recently, Cato R&D built an internal self-evolving pull request (PR) review agent that…
-
Enabling ISO/IEC 27001:2022 Compliance with Okta
ISO/IEC 27001 continues to be a globally recognized security standard and a consistently popular choice for today’s organizations seeking to demonstrate robust security controls and the effectiveness of their Information…
-
Building the Agentic SOC at Cisco Live Americas 2026
Building on the Cisco Live EMEA SOC, Cisco Live Americas placed the Security Operations Center (SOC) and Network Operations Center (NOC) at the center of the World of Solutions, demonstrating…
-
The White House’s post-quantum executive order is an important milestone. It’s time to get to work
On June 22, 2026, President Trump signed Executive Order 14412, “Securing the Nation Against Advanced Cryptographic Attacks.” The order sets a December 31, 2030, deadline for federal agencies to transition…
-
Using AI to Translate CVEs into Real-World Business Risk
Security leaders rarely struggle to gather data, but they often struggle to turn that data into something clear and meaningful for the business. In a typical week, a CISO might…
-
Autonomous AI Defense: It’s Time to Take AI Off the Leash
This is the final article in our series by Curt Aubley, CEO of Sevii. If you missed the prior installments, please read the first and second articles in the series….
