How we found a bug in the hyper HTTP library
The Images service, built in Rust on Workers, runs on every machine in Cloudflare’s edge network. To handle client connections, we use hyper, an open-source HTTP library for Rust. Last…
-
-
AI-Driven Attacks, Critical Exploits, and Global Breaches Define this Week in July 2026 in Cybersecurity
Major Threats & Vulnerabilities Critical Exploits and Zero-Day Vulnerabilities CISA warned of active exploitation of a critical Adobe ColdFusion flaw (CVE-2026-48282), urging immediate patching and heightened monitoring for unusual activity…
-
Burp On Tour 2025: bringing the AppSec community together around the world | Blog
Amelia Coen | Friday, 12 December 2025 at 11:34 UTC In 2025, we set out with a simple mission: take Burp Suite on the road and meet the global AppSec…
-
Enabling ISO/IEC 27001:2022 Compliance with Okta
ISO/IEC 27001 continues to be a globally recognized security standard and a consistently popular choice for today’s organizations seeking to demonstrate robust security controls and the effectiveness of their Information…
-
The White House’s post-quantum executive order is an important milestone. It’s time to get to work
On June 22, 2026, President Trump signed Executive Order 14412, “Securing the Nation Against Advanced Cryptographic Attacks.” The order sets a December 31, 2030, deadline for federal agencies to transition…
-
Autonomous AI Defense: It’s Time to Take AI Off the Leash
This is the final article in our series by Curt Aubley, CEO of Sevii. If you missed the prior installments, please read the first and second articles in the series….
-
13 in-demand IT security certifications for higher pay
OffSec Experienced Penetration Tester (OSEP) The OffSec Experienced Penetration Tester is ideal for penetration testers and ethical hackers who need more advanced techniques to sharpen offensive skills against modern enterprise defenses. Across…
-
Functional PoCs in less than a minute? Julen Garrido Estévez puts Burp AI to the test | Blog
Hassan Ud-Deen | Friday, 16 January 2026 at 00:00 UTC Note: This is a guest post by pentester Julen Garrido Estévez (@b3xal). Pentester Julen Garrido Estévez (@b3xal) wanted to verify whether Burp…
-
Building Confidence in Support Comms with Caller Verify at Okta
In many of the most impactful incidents of the past two years, attackers gained privileged access to systems by tricking IT support personnel into resetting the passwords and MFA factors…
-
Unlocking the Cloudflare app ecosystem with OAuth for all
Cloudflare provides services that help run 20% of the web, but we don’t do it alone. Developers on our platform use a myriad of tools and services from other companies…
