Do Son Russia has begun systematically blocking Cloudflare, throttling internet connections to 16KB after the initial download, impacting vast numbers of websites and other major hosting providers.
cloudflare
APT36 is targeting Indian defense personnel with sophisticated phishing, using fake NIC documents and multi-layered malware to steal sensitive data and evade analysis.
Cloudflare successfully mitigated a record-breaking 7.3 Tbps DDoS attack in May 2025, delivering 37.4 TB in 45 seconds with no service disruption.
A critical SSRF flaw (CVE-2025-6087) in @opennextjs/cloudflare allows unauthenticated users to proxy arbitrary remote content via /_next/image endpoint.
Explore the massive June 12, 2025 global cloud outage that took down Google, Cloudflare, and more. Uncover the ripple effects and lingering questions from this unprecedented digital disruption.
Malicious scripts disguised as Cloudflare human verification are embedded in WordPress themes, tricking users into executing PowerShell commands that deliver malware.
A deep dive into a sophisticated multi-stage malware attack using Cloudflare to deliver AsyncRAT. Learn how attackers evade detection and compromise systems.
Uncover the capabilities of Cloudflare in protecting online IP website assets and exposing real IP addresses using CF-Hero.
Uncover the LegionLoader Campaign's deceptive tactics. Learn how fake CAPTCHAs and CloudFlare Turnstile are used in malware distribution.
Learn about the Cloudflare outage that impacted R2 services. Discover the causes and effects of this significant disruption.
Explore how AI Labyrinth effectively mitigates AI crawler threats by redirecting suspicious bots into a resource-depleting maze.
Learn how the LummaStealer Trojan exploits fake verification prompts to install malware through PowerShell commands.
The latest report details how malicious actors are leveraging YouTube, Cloudflare, and MediaFire to distribute the Lumma Stealer malware
Discover the details of the Cloudflare R2 outage, its impact on website content loading, and the root cause of the disruption.
Microsoft 365 VPN service to be discontinued in 2025. Learn about the limited availability and low profile of this feature.
Uncover the operations of the prolific cybercriminal group Crazy Evil. Dive into their sophisticated social engineering tactics and cross-platform malware toolkit.
Beware of generic phishing pages that adapt to target victims. Learn how these pages impersonate brands and trick users into surrendering sensitive credentials.
Learn about a record-breaking DDoS attack that targeted an internet service provider in East Asia. Discover how Cloudflare's advanced defense system neutralized the threat.
Discover the Sneaky 2FA phishing kit, a sophisticated tool that bypasses MFA to exploit Microsoft 365 accounts. Stay informed about the latest threats.
Learn about the Skuld infostealer malware and its impact on the npm ecosystem. Discover how deceptive packages targeted developers and organizations.
Discover a major misconfiguration vulnerability affecting top WAF vendors. Find out how attackers can exploit this flaw to bypass WAF protections.
Discover the Gabagool phishing kit that targets corporate and government employees. Learn how it leverages Cloudflare's R2 storage service to bypass security measures.