🛡️ Security

Cloudflare Tunnel

A Cloudflare service in which a lightweight client on a host opens an outbound connection to Cloudflare's edge so the host can be reached from the internet without inbound firewall rules. Legitimate for publishing internal services, it is also abused by intruders as a persistent backdoor that survives console cleanup, as seen in the N-central intrusions.

📚 Deep Dive

Learn Article

How to Audit an RMM Console After a Vendor Zero-Day

Patching an exploited RMM flaw does not tell you whether the window was used. A seven-step audit: exposure window, accounts, remote sessions, pushed scripts, endpoint persistence, rebuild, exposure.

intermediate 5 min read

Back to Glossary