Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Featured Post

Organisations Don't Need a Cloud-Native Network to Adopt SASE

In a perfect world, every business would design its network from day one with the need for scalability, connectivity from anywhere and zero-trust security in mind. In the real world, of course, few organisations have this luxury. Most have entrenched technology investments in place, and overhauling them to conform with modern network access and security paradigms isn't always feasible.

Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities

Cloudflare has deployed new Web Application Firewall (WAF) protections for two critical vulnerabilities affecting WordPress. The protections address an Unauthenticated Remote Code Execution (RCE) vulnerability in WordPress's REST API and a related SQL Injection vulnerability. The WordPress security team disclosed the vulnerabilities to Cloudflare before public release so that we could prepare protections for customers.

The 30-Minute Cloud Risk Assessment Every MSP Should Be Offering

Every time a client gets breached through a cloud app, it's the MSP who gets the call. Compromised Microsoft 365 accounts, unauthorized AI tools, and misconfigured sharing settings. Attackers aren't breaking in anymore. They're logging in through gaps that your endpoint, firewall, and MDR tools were never designed to see.

GitProtect 2.4.0: Complete QA Protection in Azure DevOps, FIPS-Compliant Encryption, and More

The new 2.4.0 release delivers complete protection for your entire Quality Assurance (QA) workloads in Azure DevOps. Teams on platforms hosted locally in Windows can now secure them with the AES encryption compliant with the federal, enterprise-grade FIPS standards. This release also packs other notable upgrades, including seamless Active Directory integration, a smarter repository exclusion mechanism, and full German language support. Dive into the full breakdown below.

Backup Azure DevOps Test Plans w GitProtect.io | Ochrona QA i Test Suites

Zabezpiecz pełny cykl zapewnienia jakości w swoich projektach programistycznych! W wersji 2.4 GitProtect wprowadza wyczekiwaną funkcję: pełną kopię zapasową oraz odzyskiwanie planów testowych Azure DevOps Test Plans (w tym powiązanych zestawów testów — Test Suites). W tym wideo pokazujemy, jak łatwo dodać i skonfigurować plan ochrony dla Azure DevOps, zachowując przy tym pełną strukturę powiązań między przypadkami testowymi, konfiguracjami i historią ich wykonania.

Building a More Secure Workplace Technology Environment

One weak password. One rushed click. One laptop left in a rideshare. That's all it can take to create a very real problem for your business. Strong workplace technology security is no longer just about locking down computers. It protects payroll, customer records, employee privacy, contracts, financial data, and the trust you've worked hard to earn.

A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed

On July 3, 2026, the Albanian communications authority (AKEP), the operator of the.AL country-code top-level domain (TLD) of Albania, attempted a DNSSEC key rollover. Something went wrong, resulting in DNSSEC validation failures. Any validating DNS resolver receiving these signatures was required by the DNSSEC specification to reject them and return errors to clients. That includes 1.1.1.1, the public DNS resolver operated by Cloudflare.

Demo Discover Enterprise AI Workloads Running on AWS

AI workloads are appearing across AWS environments faster than most teams can inventory them. New APIs, EKS clusters, model integrations, and AI services are showing up across accounts and regions without a clear ownership trail or centralized visibility. By the time security catches up, the environment has already changed again.

Introducing Precursor: detecting agentic behavior with continuous client-side signals

Bot mitigation is an adversarial game: attackers adapt, defenders respond, and the cycle continues. At Cloudflare, we stay ahead by combining visibility across our global network with signals from the client-side environment. At the network level, we analyze over 1 trillion requests per day to understand reputation, patterns, and anomalies across more than 20% of the web.