Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

We have some big news to share today: Replicate, the leading platform for running AI models, is joining Cloudflare. We first started talking to Replicate because we shared a lot in common beyond just a passion for bright color palettes. Our mission for Cloudflare’s Workers developer platform has been to make building and deploying full-stack applications as easy as possible. Meanwhile, Replicate has been on a similar mission to make deploying AI models as easy as writing a single line of code.

Welcome to The researcher’s desk – a content series where the Detectify security research team conducts a technical autopsy on vulnerabilities that are particularly interesting, complex, or persistent. For this issue, we look at CVE-2025-64446, a critical authentication bypass that has been actively exploited in the wild, targeting Fortinet’s Web Application Firewall (WAF) product, FortiWeb.

Security questionnaires are now a standard part of doing business. Whether you’re closing enterprise deals or expanding into regulated markets, every buyer expects proof of your security posture—often in the form of long, repetitive questionnaires. The challenge isn’t finding the answers; it’s answering fast and consistently across formats, languages, and requirements. ‍ That’s where security questionnaire automation software comes in.

BlueVoyant’s Threat Fusion Cell and SOC have been tracking a significant and persistent social engineering campaign that cleverly exploits trusted communication channels to gain initial access to target networks. Since at least mid-October 2025, BlueVoyant has observed a consistent playbook where threat actors employ inbox sabotage as a pretext for highly convincing IT support impersonation over Microsoft Teams.

The Government of Canada’s launch of an Anti-Fraud Strategy and Financial Crimes Agency acknowledges a reality that banks, fintechs and payment processors already know: the scale, sophistication and speed of digital fraud are outpacing traditional defences. These are vital national commitments, to be sure, but they also underscore the need for companies, institutions and governments to evolve faster than the attacks they face. Fraud has become one of the defining challenges of our time.

The question is no longer whether your business will face an attempt, but whether you are prepared to detect and respond before damage is done.

Over the next decade, wallet infrastructure will be a defining factor in onchain finance. Institutions that invest in robust wallet capabilities in the next 18–24 months will shape how value is moved, held, managed, and issued. This shift isn’t driven by hype. It’s grounded in a real transformation of how financial markets function. From banking to payments to capital markets, leading institutions are doing more than building products.