The Cloudflare Business Intelligence team manages a petabyte-scale data lake and ingests thousands of tables every day from many different […]
Building Jetflow: a framework for flexible, performant data pipelines at Cloudflare Read More »
Active Directory Certificate Services (ADCS) is used to manage certificates for systems, users, applications, and more in an enterprise environment.
Detecting ADCS Privilege Escalation Read More »
The Windows banking trojan known as Coyote has become the first known malware strain to exploit the Windows accessibility framework
New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials Read More »
Security experts have been talking about Kerberoasting for over a decade, yet this attack continues to evade typical defense methods.
Kerberoasting Detections: A New Approach to a Decade-Old Challenge Read More »
Welcome to the first episode of Humans of Talos, a new video interview series that shines a spotlight on team
Google has announced the launch of a new initiative called OSS Rebuild to bolster the security of the open-source package
Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages Read More »
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two security flaws impacting SysAid IT support software to its Known
CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF Read More »
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on July 22, 2025, added two Microsoft SharePoint flaws, CVE-2025-49704 and CVE-2025-49706,
On July 19, 2025, Microsoft disclosed CVE-2025-53770, a critical zero-day Remote Code Execution (RCE) vulnerability. Assigned a CVSS 3.1 base
Cloudflare protects against critical SharePoint vulnerability, CVE-2025-53770 Read More »
