Ideas for building
better software.

"The Persian MâR-Nâmeh Or, the Book for Taking Omens from Snakes" (1892)

Comments

Audit Log Drains now support Datadog, Splunk, and Panther

Audit Log Drains now stream your team's audit events into , , and , joining the existing custom HTTPS endpoint and Amazon S3 destinations. DatadogSplunkPanther An forwards every event from your team's Activity Log, plus additional audit metadata, to the destination you choose. They're available on Enterprise plans. Audit Log Drain To create one, go to in your team settings. Click Add Drain, choose Audit Log as the data type, and pick a destination. Drains Audit Log Drains replace . If you alre

ISC Stormcast For Friday, August 7th, 2026 https://isc.sans.edu/podcastdetail/10042, (Fri, Aug 7th)

One of China’s Most Powerful AI Models Has Also Escaped Containment

Security researchers say that Kimi K3, an open-weight model from China, wandered off to the internet in an attempt to cheat on a test it was given.

MCP allowlists in enterprise managed settings

Enterprise owners can now centrally control which Model Context Protocol (MCP) servers GitHub Copilot clients are allowed to run by using the new allowedMcpServers and deniedMcpServers keys in enterprise managed… The post MCP allowlists in enterprise managed settings appeared first on The GitHub Blog.

New Mexico court orders Meta to pay $567m over harms to children’s mental health

Comments

Load Balancing - Load Balancing health notifications now resolve automatically

Load Balancing health notifications are now stateful. When a pool or endpoint becomes unhealthy, the notification opens an incident in your alerting tool as before. When that same pool or endpoint recovers, the follow-up notification is matched to the original alert and resolves that incident automatically, so you no longer have to close it by hand. As part of this change, Load Balancing also sends a notification when a pool or endpoint returns to a healthy state, not only when it becomes unheal

WAF - WAF Release - 2026-08-07

This release updates WordPress XSS rule metadata in the Cloudflare Managed Ruleset and Cloudflare Free Ruleset to identify XSS2Shell (CVE-2026-64638). It also disables the Command Injection - Obfuscation rule. Key Findings CVE-2026-64638: A pre-authentication reflected cross-site scripting vulnerability affecting the WordPress login screen. Exploitation requires social engineering and explicit interaction by the target user. Under additional conditions, it may be escalated to remote code executi