Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Cloudflare's client-side security made the npm supply chain attack a non-event

In early September 2025, attackers used a phishing email to compromise one or more trusted maintainer accounts on npm. They used this to publish malicious releases of 18 widely used npm packages (for example chalk, debug, ansi-styles) that account for more than 2 billion downloads per week. Websites and applications that used these compromised packages were vulnerable to hackers stealing crypto assets (“crypto stealing” or “wallet draining”) from end users.

Securing agentic commerce: helping AI Agents transact with Visa and Mastercard

The era of agentic commerce is coming, and it brings with it significant new challenges for security. That’s why Cloudflare is partnering with Visa and Mastercard to help secure automated commerce as AI agents search, compare, and purchase on behalf of consumers. Through our collaboration, Visa developed the Trusted Agent Protocol and Mastercard developed Agent Pay to help merchants distinguish legitimate, approved agents from malicious bots.

Cybersecurity Trends in 2026: From AI Defense to Digital Trust

In 2026, cybersecurity has evolved from being an IT concern to becoming one of the most strategic levers of global stability. As artificial intelligence systems become self-learning, quantum computing moves closer to commercialization, and consumer data flows multiply across platforms, cybersecurity is no longer about preventing attacks-it's about maintaining trust in an increasingly automated world.

How Lobbyist Bill Tracking Software Saves Hours of Research Every Week

Lobbyist bill tracking software has completely changed how policy professionals monitor and manage legislation. Instead of spending late nights combing through endless government portals, lobbyists now have tools that streamline tracking, notifications, and reporting-all in one place.

AI Sidebar Spoofing Attack: SquareX Uncovers Malicious Extensions that Impersonate AI Browser Sidebars

SquareX released critical research exposing a new class of attack targeting AI browsers. The AI Sidebar Spoofing attack leverages malicious browser extensions to impersonate trusted AI sidebar interfaces, which is used to trick users into executing dangerous commands that can lead to credential theft, device hijacking, and password exfiltration.

Seeing the Invisible: Visualizing and Protecting AI-Agent Activity with Exabeam & Google

Artificial intelligence is no longer just an emerging technology in security operations and modern SIEMs. AI agents now enrich alerts, drive investigations, generate reports, and increasingly act as extensions of human analysts. But as with any powerful technology, new risk surfaces follow. From the Exabeam perspective, every entity in your environment deserves protection.

How I 'Hacked' an Online Store #businesslogic #ecommerce #cybersecurity #apisecurity

A $10,000 Order for $1? Your Business Logic is Broken Attackers aren't just breaking code; they're exploiting the rules of your business to commit fraud. When your application's logic is flawed: Your payment and fulfillment systems can be desynchronized. You can lose massive revenue to easily preventable abuse. Your inventory and financial reporting become unreliable. Watch how a simple business logic flaw can lead to catastrophic financial loss in this real-world example. Is your e-commerce platform safe?