Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #19060

G

GuidePoint Security

Company blog · guidepointsecurity.com/blogsecurity

GuidePoint Security is the company blog at guidepointsecurity.com, writing about security. Since 2019, 4 different Hacker News readers have linked it 5 times, most often “Tunnel Vision: CloudflareD AbuseD in the Wild”. It is still writing: the last post was on 2026-10-28, and you can follow it by feed.

Visit the blog
5mentions?
4HN people?
2019–2025first – last linked?
Links on Hacker News per year · peak 1 in 2019

Too few sampled comments (2) to say how often HN recommends it.?

Why HN links it

HN readers link GuidePoint's security research posts on threat actors abusing Cloudflare tunnels to deliver remote access trojans, and on a Zoom outage tied to the zoom.us domain. Comments only reference the posts.

Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

GuidePoint Security provides trusted cybersecurity consulting expertise, solutions, and services that help organizations make better decisions and minimize risk.

Most-linked posts?

  1. Tunnel Vision: CloudflareD AbuseD in the Wild
    2 people · 3 mentions · first linked 2023-08-09

What Hacker News says?

  1. This shafted me hard when I registered the domain I used to research and write a company blog post ( https://www.guidepointsecurity.com/blog/tunnel-vision-cloudf... ). I’ll never deal with a .us domain again, even if it means missing out on a good text string.

    Comment linking /blog/tunnel-vision-cloudflared-abused-in-the-wild/

    on “Zoom outage caused by accidental 'shutting down' of the zoom.us domain”
  2. Submitted Tunnel Vision: CloudflareD AbuseD in the Wild as a story · 2 points

    HN discussion
  3. I actually wrote about malicious use of this very tool a year ago[0] (almost to the day). The only thing new here seems to be what they’re doing through the tunnels, and the apparent success they’re having with this method for it to increase as a proportion of their overall attack techniques. TryCloudflare, IMO, is the real problem here. It doesn’t require an account at all, so attribution becomes nearly impossible.…

    Comment linking /blog/tunnel-vision-cloudflared-abused-in-the-wild/

    on “Threat actor abuses Cloudflare tunnels to deliver remote access trojans”
  4. Submitted GuidePoint Security Stands with CoalFire as a story · 2 points

    HN discussion
  5. Submitted Why GitHub Won’t Protect PHP as a story · 1 points

    HN discussion

Search all of HN for guidepointsecurity.com