Defending QUIC from acknowledgement-based DDoS attacks

On April 10th, 2025 12:10 UTC, a security researcher notified Cloudflare of two vulnerabilities (CVE-2025-4820 and CVE-2025-4821) related to QUIC packet acknowledgement (ACK) handling, through our Public Bug Bounty program. These were DDoS vulnerabilities in the quiche library, and Cloudflare services that use it. quiche is Cloudflare's open-source implementation of QUIC protocol, which is the transport protocol behind HTTP/3.

Exabeam Security Intelligence Summit UKI 2025 | Event Highlights & Key Takeaways

Relive the highlights from the Exabeam Security Intelligence Summit in London, where security leaders, users, and partners across the UK and Ireland gathered for a day of innovation and collaboration. From breakthrough AI advancements in SIEM and UEBA to inspiring customer success stories and hands-on breakout sessions, this event was more than just a conference, it was a community redefining the future of cybersecurity. Don’t miss the energy, insights, and connections that made this summit one to remember.

Threat-Led Penetration Testing by Astra Security

Basic security audits won’t stop ransomware criminals who move faster than most teams can deploy patches, especially now, as supply chain attacks leverage trusted partners, and advanced persistent threats (APTs) hide undetected in networks for months. Fifty-two percent of organizations worldwide report at least one supply chain partner targeted by ransomware, putting their own networks dangerously at risk.

Resellers & MSPs: The Quota Trap (and Why It Kills Your Profit)

You’ve seen it before. A vendor slides across a partnership agreement that looks promising—great margins, solid technology, and market demand. But buried in the fine print are the real deal-breakers: minimum monthly commitments, annual sales quotas, and escalating targets that turn what should be a profitable partnership into a financial liability. This is the quota trap.

Introducing new .env file support in 1Password environments

The new.env destination in 1Password environments makes it easy for developers to use and collaborate on.env files securely, right from the desktop app. 1Password environments provide a secure workspace to store, organize, and manage project secrets – the same credentials you would normally handle as environment variables. Each environment acts as a dedicated space for a project or app, helping teams manage and maintain consistent credentials.

How to Detect and Mitigate Common Active Directory Attacks

Active Directory is the heart of enterprise identity and access management, and its crucial role makes it a target for hackers looking for control, persistence, and privileged access. The fact that AD is central to organizational functions makes proactive, multi-layered, and intelligence-driven security strategies a must in order to ensure it is always able to withstand even the most sophisticated, continuously evolving threat actors.

The Evolving Landscape of Cybersecurity: Why Risk Management Is More Important Than Ever

In today's interconnected business world, every organization relies on a network of partners - from software providers and payment processors to data storage and cloud services. While this interconnectedness drives innovation and efficiency, it also introduces serious cybersecurity risks. A single vulnerability in your vendor ecosystem can open the door to data breaches, ransomware attacks, and compliance failures.

Step-by-Step: Producing a Staff Training Book for Phishing Awareness Workshops

Nowadays, with the development of technology, more teams are operating remotely. Companies have realized that it's important that these teams also get some kind of cybersecurity training. Data breaches happen often and no company wants its private data leaking and being out in the world. Seeing your team recognize and report a phishing email with confidence is what every IT security department aims for. When your training materials are finally ready and employees are actively using them, you realize that you've created something that strengthens your organization's awareness and preparedness.