Cloudflare Pages is a technology platform tracked across 7 threat clusters and 10 intelligence report mentions on ThreatCluster. First observed November 5, 2025; most recent activity July 2, 2026.
Cloudflare Pages is Cloudflare's Jamstack hosting platform that enables developers to deploy static sites and front-end apps via Git workflows, leveraging Cloudflare's edge network. Its significance in cybersecurity arises from being a high-profile cloud-hosted service that threat actors can impersonate in phishing campaigns to steal credentials or session data from Pages users and Zendesk customers, potentially enabling account compromise and abuse of hosting resources.
The InstallFix campaign targets users by creating fake installation pages for Anthropic's Claude AI, tricking them into executing malware. This sophisticated social engineering tactic exploits the growing reliance on AI…
A new attack technique named ConsentFix v3 has emerged, automating the hijacking of Microsoft Azure accounts through sophisticated phishing methods. This attack builds on previous versions by enhancing automation and…
Manufacturing organizations are increasingly targeted by cyberattacks, with a focus on identity-driven methods. Attackers exploit credential leaks and social engineering tactics such as vishing and impersonation to…
Cybercriminals are exploiting fake download pages that impersonate Claude Code, a legitimate AI coding assistant, to distribute infostealer malware. Developers and IT professionals are particularly at risk as they may…
Push Security has been awarded the 2026 Pinnacle Award as a Diamond honoree in the Best AI-Powered Threat Detection category. This recognition is for their innovative agentic threat hunting pipeline, which integrates AI…
A phishing campaign is targeting Zendesk users and customer support channels by utilizing typosquatted domains. Over 600 malicious domains have been registered to mimic legitimate support portals, with more than 40…
A new phishing campaign is targeting customer support channels by abusing Cloudflare Pages and ZenDesk. Attackers have registered over 600 typosquatted domains to mimic legitimate support portals, aiming to steal user…