Cloudflare Adds MCP Traffic Detection and Security Controls

Cloudflare adds Clef-omni multimodal model, speeds Clef and cuts Clef-flash pricing

Cloudflare expanded its Clef decision model family with Clef-omni, which natively processes audio, video, images, and text in a single pipeline. The company also increased Clef inference speeds by up to 2.0x and lowered pricing for Clef-flash.

Microsoft urges early testing of post-quantum certificate ecosystems

Microsoft published guidance urging organizations to begin testing certificate ecosystems for post-quantum authentication now, highlighting its PQC TLS Pilot Program as a way to advance future readiness. The post appeared on the Microsoft Security Blog.

CISA: Chinese Government-linked Hackers Target US Critical Infrastructure

CISA published an advisory stating Chinese government-linked cyber threat actors, enabled by China-based Integrity Technology Group, combine automated scanning, botnets, and hands-on exploitation to steal sensitive data from organizations worldwide, including US critical infrastructure. Tactics include cross-site scripting and password spraying on Microsoft Exchange servers, VPN persistence, and email and credential exfiltration via scripts.

Cisco Talos Ties UAT-11985 to AI-Assisted Google AitM Phishing

Cisco Talos identified an APT spear-phishing campaign, tracked as UAT-11985, targeting individuals affiliated with Taiwan research organizations. The operation used legitimate public event themes and impersonated reputable academic and policy institutions, delivering real-time Google adversary-in-the-middle phishing.

Cisco Talos details malware techniques for evading AI analysis

Cisco Talos published research on "AI-analysis evasion," describing real-world techniques malware authors use to obstruct or defeat automated AI analysis layers. The blog examines the current state of these evasion methods, which are designed to interfere with AI-driven malware detection and analysis pipelines.