From 345f238c402b203004fc6346644ed8530acc8038 Mon Sep 17 00:00:00 2001 From: alexmoraru7 <40365465+alexmoraru7@users.noreply.github.com> Date: Thu, 20 Nov 2025 17:48:17 +0100 Subject: [PATCH 1/5] Add threat insights to Threat Events platform The threat events platform now includes insights curated by threat intelligence analysts, accessible for relevant parent events. Insights are indicated by a lightning icon in the dashboard and may connect multiple events related to the same threat actor. --- ...25-11-21-Threat-Events-now-show-events-insights.mdx | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx diff --git a/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx b/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx new file mode 100644 index 000000000000000..be99b2f55400500 --- /dev/null +++ b/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx @@ -0,0 +1,10 @@ +--- +title: Threat insights are now avaoilable in the Threat Events platfrom +description: Threat events users can now access threat insights curaated by our threat intelligence analysts. +date: 2025-11-21 +--- + +The threat events platform now has threat insights available for some relevant parent events and threat intelligence analyst users can access these insights for their threat hunting activity. +Insights are also flagged in the dashboard by a small `lightning icon` and the insights can refer to multiple, connected events, potentially part of the same attack or campaign and associated with the same threat actor. + +For more information, check out our [threat events platform documentation](security-center/cloudforce-one/#analyze-threat-events). From dc349896629a166ccdd1cb052ce65888c82d2540 Mon Sep 17 00:00:00 2001 From: Pedro Sousa <680496+pedrosousa@users.noreply.github.com> Date: Thu, 20 Nov 2025 18:08:05 +0000 Subject: [PATCH 2/5] Some fixes --- .../2025-11-21-Threat-Events-now-show-events-insights.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx b/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx index be99b2f55400500..a323c4a942dc4d7 100644 --- a/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx +++ b/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx @@ -1,10 +1,10 @@ --- -title: Threat insights are now avaoilable in the Threat Events platfrom -description: Threat events users can now access threat insights curaated by our threat intelligence analysts. +title: Threat insights are now available in the Threat Events platform +description: Threat events users can now access threat insights curated by our threat intelligence analysts date: 2025-11-21 --- The threat events platform now has threat insights available for some relevant parent events and threat intelligence analyst users can access these insights for their threat hunting activity. Insights are also flagged in the dashboard by a small `lightning icon` and the insights can refer to multiple, connected events, potentially part of the same attack or campaign and associated with the same threat actor. -For more information, check out our [threat events platform documentation](security-center/cloudforce-one/#analyze-threat-events). +For more information, check out our [threat events platform documentation](/security-center/cloudforce-one/#analyze-threat-events). From ea8c0eafa38116f46699344adc7cdfe540ae9359 Mon Sep 17 00:00:00 2001 From: Pedro Sousa <680496+pedrosousa@users.noreply.github.com> Date: Fri, 21 Nov 2025 16:51:59 +0000 Subject: [PATCH 3/5] Small update --- .../2025-11-21-Threat-Events-now-show-events-insights.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx b/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx index a323c4a942dc4d7..60feb458e151631 100644 --- a/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx +++ b/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx @@ -4,7 +4,7 @@ description: Threat events users can now access threat insights curated by our t date: 2025-11-21 --- -The threat events platform now has threat insights available for some relevant parent events and threat intelligence analyst users can access these insights for their threat hunting activity. +The threat events platform now has threat insights available for some relevant parent events. Threat intelligence analyst users can access these insights for their threat hunting activity. Insights are also flagged in the dashboard by a small `lightning icon` and the insights can refer to multiple, connected events, potentially part of the same attack or campaign and associated with the same threat actor. For more information, check out our [threat events platform documentation](/security-center/cloudforce-one/#analyze-threat-events). From 57aa0628324c5465bd02e8f0afb48771f21b82a3 Mon Sep 17 00:00:00 2001 From: alexmoraru7 <40365465+alexmoraru7@users.noreply.github.com> Date: Wed, 26 Nov 2025 11:31:14 +0100 Subject: [PATCH 4/5] Update src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx Co-authored-by: Maddy <130055405+Maddy-Cloudflare@users.noreply.github.com> --- .../2025-11-21-Threat-Events-now-show-events-insights.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx b/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx index 60feb458e151631..8705d70e2a77845 100644 --- a/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx +++ b/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx @@ -5,6 +5,6 @@ date: 2025-11-21 --- The threat events platform now has threat insights available for some relevant parent events. Threat intelligence analyst users can access these insights for their threat hunting activity. -Insights are also flagged in the dashboard by a small `lightning icon` and the insights can refer to multiple, connected events, potentially part of the same attack or campaign and associated with the same threat actor. +Insights are also highlighted in the Cloudflare dashboard by a small `lightning icon` and the insights can refer to multiple, connected events, potentially part of the same attack or campaign and associated with the same threat actor. For more information, check out our [threat events platform documentation](/security-center/cloudforce-one/#analyze-threat-events). From bf95588fd6cf166c747fff083406ea5d16f993dc Mon Sep 17 00:00:00 2001 From: alexmoraru7 <40365465+alexmoraru7@users.noreply.github.com> Date: Wed, 26 Nov 2025 11:31:23 +0100 Subject: [PATCH 5/5] Update src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx Co-authored-by: Maddy <130055405+Maddy-Cloudflare@users.noreply.github.com> --- .../2025-11-21-Threat-Events-now-show-events-insights.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx b/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx index 8705d70e2a77845..9f9d5dd72cde73f 100644 --- a/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx +++ b/src/content/changelog/security-center/2025-11-21-Threat-Events-now-show-events-insights.mdx @@ -7,4 +7,4 @@ date: 2025-11-21 The threat events platform now has threat insights available for some relevant parent events. Threat intelligence analyst users can access these insights for their threat hunting activity. Insights are also highlighted in the Cloudflare dashboard by a small `lightning icon` and the insights can refer to multiple, connected events, potentially part of the same attack or campaign and associated with the same threat actor. -For more information, check out our [threat events platform documentation](/security-center/cloudforce-one/#analyze-threat-events). +For more information, refer to [Analyze threat events](/security-center/cloudforce-one/#analyze-threat-events).