Cloudflare WARP

Reported Context (6)

🖥️ Warp breached through a vendor: Agent traces and telemetry exposed for up to about 1% of users, a week after OpenCode. Blue October Roundup, Upwind’s $400M Raise and AI Audit-Trail Book Launch
Warp discloses breach exposing AI agent logs, user telemetry data Warp Says Third-Party Vendor Attack Exposed Agent Logs and Telemetry
We have released updates for the Cloudflare One Clients, also known as WARP or the 1.1.1.1 app, and Cloudflare Tunnel, also known as cloudflared. We have also deployed mitigations across our CDN, Developer, and Zero Cloudflare Details Response to Compromise of Eight eMudhra Certificates
“VPN connections originated from IP addresses in the Russian segment linked to Cloudflare WARP tunnels, as well as from IP addresses associated with European virtual infrastructure providers.” Kaspersky Details Three Groups’ Attacks on Russian Enterprises
VPN connections originated from IP addresses in the Russian segment linked to Cloudflare WARP tunnels, as well as from IP addresses associated with European virtual infrastructure providers. NightEagle APT Uses GhostContainer and Tunneling Tools in Attacks on Russian Organizations

CVE (6)

Malware (11)

People (2)

Threat Actors (15)

MITRE ATT&CK (32)

Vendors (16)

Products (37)

Tools (15)

Countries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.