-
Windows_EndPoint_Audit – Endpoint Security Auditing Toolkit
Windows Endpoint Audit automates PowerShell checks for services, registry and file permissions, audit logs enabling red teams and defenders to find misconfigurations. Go to Source
-
The White House AI Action Plan: a new chapter in U.S. AI policy
On July 23, 2025, the White House unveiled its AI Action Plan (Plan), a significant policy document outlining the current administration’s priorities and deliverables in Artificial Intelligence. This plan emerged after the White House received over 10,000 public comments in response to a February 2025 Request for Information (RFI). Cloudflare’s comments urged the White House…
-
Multiple Vulnerabilities in Cisco ISE and ISE-PIC Could Allow for Remote Code Execution
Multiple vulnerabilities have been discovered in Cisco ISE and ISE-PIC that could allow for remote code execution. Cisco Identity Services Engine (ISE) is a security policy management platform that provides secure access to network resources. Successful exploitation of these vulnerabilities could allow the attacker to obtain root privileges on an affected device. Go to Source
-
Serverless Statusphere: a walk through building serverless ATProto applications on Cloudflare’s Developer Platform
Social media users are tired of losing their identity and data every time a platform shuts down or pivots. In the ATProto ecosystem — short for Authenticated Transfer Protocol — users own their data and identities. Everything they publish becomes part of a global, cryptographically signed shared social web. Bluesky is the first big example,…
-
KeePass v4: A Minor Annoyance and a Script to Tame It
KeePass v4: A Minor Annoyance and a Script to Tame It Go to Source
-
Malvertising and TDS Cloaking Tactics Uncovered
Cloaked malvertising and TDS attacks rise in complexity. Learn how attackers evade detection and how to build layered defenses against redirection threats. Go to Source
-
Serverless Statusphere: a walk through building serverless ATProto applications on Cloudflare’s Developer Platform
Social media users are tired of losing their identity and data every time a platform shuts down or pivots. In the ATProto ecosystem — short for Authenticated Transfer Protocol — users own their data and identities. Everything they publish becomes part of a global, cryptographically signed shared social web. Bluesky is the first big example,…
-
A Vulnerability in Grafana Could Allow for Arbitrary Code Execution
A vulnerability exists in Grafana which could result in arbitrary code execution. Grafana is an open-source platform used for visualizing and analyzing time series data. It allows users to connect to various data sources, query and transform data, and create interactive dashboards to monitor and explore metrics, logs, and traces. Successful exploitation could allow an…
-
Building Jetflow: a framework for flexible, performant data pipelines at Cloudflare
The Cloudflare Business Intelligence team manages a petabyte-scale data lake and ingests thousands of tables every day from many different sources. These include internal databases such as Postgres and ClickHouse, as well as external SaaS applications such as Salesforce. These tasks are often complex and tables may have hundreds of millions or billions of rows…
-
Cracking Gitea’s PBKDF2 Password Hashes
Cracking Gitea’s PBKDF2 Password Hashes Go to Source