🌐 Cloudflare Threat Updates Why we're rethinking cache for the AI eraIntroducing EmDash — the spiritual successor to WordPress that solves plugin securityOur ongoing commitment to privacy for the 1.1.1.1 public DNS resolverIntroducing Programmable Flow Protection: custom DDoS mitigation logic for Magic Transit customers 🔴 Critical Alerts (CISA) ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More StoriesResearchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto MinersThe State of Trusted Open Source ReportWhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action 🧠 Threat Intelligence (Mandiant) vSphere and BRICKSTORM Malware: A Defender's GuideNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackM-Trends 2026: Data, Insights, and Strategies From the FrontlinesThe Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors 🛡 Microsoft Security Updates CVE-2026-34043 Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objectsCVE-2026-33542 Incus does not verify combined fingerprint when downloading images from simplestreams serversCVE-2026-33936 python-ecdsa: Denial of Service via improper DER length validation in crafted private keysCVE-2026-33750 brace-expansion: Zero-step sequence causes process hang and memory exhaustion