🧰 Cloudflare

The items that name it 78

• What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
  articleas classification.key entities2026-10-29
• Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants
  articleas classification.technologies2026-10-29
• Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
  articleas classification.technologies2026-10-29
• TLP Is Not a Suggestion
  articleas classification.key entities2026-10-28
• Malicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Wallet Secrets
  writeupas classification.technologies2026-10-27
• What took the Internet offline in Q3 2026
  articleas classification.technologies2026-10-27
• Introducing the Cloudflare PHP Capture the Flag challenge
  articleas classification.technologies2026-10-27
• Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
  writeupas classification.technologies2026-10-26
• Keystone to destroy almost 19,000 wallets after device key leak
  articleas classification.technologies2026-10-26
• Industrial Vendors Check Products for PHP2Shell Vulnerabilities
  articleas classification.technologies2026-10-26
• 953 Online Stores Infected in Long-Lasting Malware Campaign
  articleas classification.technologies2026-10-26
• Bringing post-quantum cryptography to geographically fenced key management
  articleas classification.technologies2026-10-23
• Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
  articleas affected products2026-10-23It is written here as Cloudflare (used to hide a second Tornado second-stage server from 24 August 2026).

  used to hide a second Tornado second-stage server from 24 August 2026

• Daily Vibe Casting (@vibecastingapp) on X
  threadas classification.technologies2026-10-22
• Localizing compliance at scale: achieving South Korea’s ISMS certification
  articleas classification.technologies2026-10-22
• PHP2Shell Exploitation Started Days Before Patches
  articleas classification.technologies2026-10-22
• [AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
  articleas classification.technologies2026-10-22
• [AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
  articleas classification.technologies2026-10-22
• Trail of Bits (@trailofbits) on X
  threadas classification.technologies2026-10-21
• PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
  articleas classification.technologies2026-10-21
• PHP critical vulnerabilities rated 9.2 as attacks emerge and sites go offline
  articleas classification.technologies2026-10-21
• Remotely exploitable PHP bug found on 70% of world’s websites
  articleas classification.technologies2026-10-21
• PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
  articleas classification.technologies2026-10-21
• PHP2Shell: Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) | Endor Labs
  advisoryas classification.technologies2026-10-21
• PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out
  articleas classification.technologies2026-10-21
• PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
  articleas classification.technologies2026-10-21
• Cloudflare deploys protections against php2shell vulnerability
  articleas classification.technologies2026-10-21
• Introducing full transaction detection for Cloudflare WAF
  articleas classification.technologies2026-10-21
• Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
  articleas classification.technologies2026-10-21
• eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC
  repoas classification.technologies2026-10-21
• 8 eMudhra certificates are compromised. Here's what you need to know
  writeupas classification.technologies2026-10-20
• Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities
  articleas classification.technologies2026-10-19
• A fully programmable secure web gateway
  articleas classification.technologies2026-10-15
• Yandex outage: Data shows that instead of going dark, malicious bots went on the move
  articleas classification.technologies2026-10-14
• The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
  articleas affected products2026-10-14It is written here as Cloudflare (used for DNS, SSL certificates and domain routing by Storm-3119).

  used for DNS, SSL certificates and domain routing by Storm-3119

• Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
  articleas classification.technologies2026-10-14
• Bypass Web Application Firewall (WAF) with EvilWAF
  articleas affected products2026-10-08

  operates through hundreds of global data centers; analyzes TCP/IP and TLS fingerprints, HTTP/2 structure, and behavioral patterns; uses machine learning models to detect deviations from legitimate browser traffic

• Introduction to Web Application Firewall (WAF) and Ways to Bypass It
  articleas affected products2026-10-05
• China-aligned TA419 impersonates Anthropic employee, ex-White House official to phish AI policy experts
  articleas classification.technologies2026-10-02
• Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)
  advisoryas classification.technologies2026-09-30
• China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
  writeupas classification.technologies2026-09-30
• Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix
  writeupas classification.technologies2026-09-28
• [tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards
  articleas classification.technologies2026-09-17
• AI Agent Hacking Writeups
  repoas affected products2026-09-17It is written here as cloudflare (AI Playground XSS).

  AI Playground XSS

• Post-Quantum: Lattice or Hash-Based (one question, two right answers)
  articleas classification.technologies2026-09-15
• Cloudflare security-audit-skill
  repoas classification.technologies2026-09-15
• Top MCP Security Resources — September 2026 (Adversa.ai)
  articleas classification.technologies2026-09-07
• Cloudflare Computer
  repoas classification.technologies2026-08-25
• [tl;dr sec] #342 - Figma's Agentic Detection, Agent Identity, Uber's Agent-(E)DR
  articleas classification.technologies2026-08-20
• N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it
  writeupas classification.technologies2026-08-20
• 0sec-labs/0
  repoas tools2026-08-19

  Integration via plugins/MCP

• How Trail of Bits helps verify the integrity of your Signal chats
  writeupas classification.technologies2026-08-11
• GhostJacking Attacks: AI Agent Takeover via Firewall Evasion
  writeupas affected products2026-08-10

  Managed Ruleset (Pro+ plans), GraphQL MCP (analytics read), API MCP (execute/write tool), firewallEventsAdaptive log; DNS/domain hijack via agent acting on blocked-request log fields; reproduces on Cloudflare's own recommended email-hardening config

• UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments
  articleas classification.technologies2026-08-06
• Critical N-able N-central Vulnerability and Active Exploitation
  writeupas classification.technologies2026-08-03
• S3 Clones in the Neoclouds
  writeupas classification.technologies2026-07-31
• Master Urlscan.io Dorking for Bug Bounty Hunting
  videoas technologies2026-07-23
• HackingLZ/gibson
  repoas classification.technologies2026-07-22
• wp2shell CVE-2026-63030: The WordPress RCE Putting 500+ Million Sites at Risk
  articleas classification.technologies2026-07-21
• Socket: Fake Braintree NuGet Package Skims Credit Cards
  writeupas classification.technologies2026-07-15
• The triage is the product: running AI agents against Ethereum's protocol code
  articleas classification.technologies2026-07-09
• Meta Phishers Abuse Business Account Manager Service | Huntress
  writeupas tools2026-07-07

  Used to host/front the attacker domain sw[.]run that framed the phishing pages

• No (Bad) CAP: Inside an Ongoing LSHIY Password Spray Attack
  writeupas tools2026-06-30

  Cited as having identified 3xK Tech GmbH (AS200373) as the largest source of ASN DDoS attacks last summer

• Potemkin Loader & RMMProject The Anatomy of a ClickFix Attack
  writeupas classification.technologies2026-06-16
• Socket: 152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Faked Google Search Traffic
  writeupas classification.technologies2026-06-13
• Move over, Mythos. Here comes... pretty much any other model with a good harness
  articleas classification.technologies2026-06-01
• musana/CF-Hero
  repoas classification.technologies2026-05-21
• Digital Sovereignty
  writeupas classification.technologies2026-05-13
• Phishing Techniques Spotted: Email Examples & Red Flags
  articleas classification.technologies2026-03-16
• How Threat Actors Abuse Remote Management Tools | Huntress
  writeupas tools2026-03-11

  Legitimate service abused by threat actors to shield malicious delivery infrastructure and obscure origin hosting details.

• Velociraptor Misuse, Pt. II: The Eye of the Storm
  writeupas classification.technologies2025-12-03
• Datacenter Infrastructure & Identity Attacks
  writeupas affected products2025-12-02

  Listed among top 10 AS organizations by authentication event count

• Abusing the “search-ms” URI protocol handler
  writeupas classification.technologies2024-08-04
• Weekly Research Brief: PHP Vulnerability; Objections to OKX-ICE’s Stock Tokenization; Solana Alpenglow Ships
  articleas classification.technologies
• Sizing the PHP exposure window for CVE-2026-109618 and CVE-2026-109619 with VirusTotal
  articleas classification.technologies
• Proving Humanity
  articleas classification.technologies
• AI Agents Aren’t Waiting for Global Safety Rules
  articleas tools

  web infrastructure/CDN sitting in front of roughly a fifth of the web; tracked automated vs. human traffic crossover, revising its forecast from end of 2027 to early 2027, with CEO Matthew Prince announcing in June that the crossover had already occurred

• Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
  articleas classification.technologies

In every workspace you can read 114