network security news
6 stories
Introducing Cloudflare Traces: follow requests through our entire platform
Cloudflare has confirmed that it was targeted by a nation-state attacker in November 2023, with the incident involving a highly sophisticated attempt to gain persistent access to its systems. The company disclosed that the attacker, identified as a nation-state actor, exploited a zero-day vulnerability in Atlassian Confluence Data Center and Server to breach its self-hosted Atlassian server.…
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
France's tax administration recently experienced a significant data breach, where an attacker reportedly used stolen staff passwords to access sensitive tax data. The incident, which impacted hundreds of thousands of individuals and businesses, went undetected for seven weeks. The breach was only brought to light after the attacker publicly claimed responsibility online, prompting an…
New infosec products of the week: August 21, 2026
Several cybersecurity vendors have announced new product releases and enhancements this week, focusing on areas such as AI security, DDoS protection, security automation, and network segmentation. F5 Networks, Intezer, Netscout, and Tufin have all introduced updates to their respective platforms.
New CUSTODY Framework Constrains AI Agents Inside the Network
A new framework, dubbed CUSTODY, has been introduced by Jake Williams, aiming to constrain the actions of AI agents operating within an enterprise network. The framework’s release comes amid heightened industry attention to the security implications of autonomous AI systems, following recent incidents involving major AI platforms.
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
A critical command injection vulnerability affecting Progress Kemp LoadMaster has been added to the U.S. Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) catalog. The flaw, identified as CVE-2026-8037, reportedly enables unauthenticated attackers to achieve arbitrary code execution on vulnerable devices. This inclusion by CISA follows reports of…
China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware
A Chinese-linked threat actor identified as UAT-7810 is reportedly expanding its network of compromised devices, known as the Operational Relay Box (ORB) network, by deploying new custom malware. Cisco Talos researchers have observed this actor compromising internet-facing networking devices to achieve this expansion.