A fully programmable secure web gateway
Cloudflare lets Gateway and DLP call Workers inline for custom traffic handling and policy checks.
Cloudflare lets Gateway and DLP call Workers inline for custom traffic handling and policy checks.
Cloudflare open-sourced Void Platform, SDK, and CLI to deploy Vite full-stack apps on Workers with shared guardrails.
Cloudflare made Hyperdrive MySQL generally available after fixing a rare cache bug that returned empty results.
Cloudflare explains how the D1 control plane scales to millions of serverless SQLite databases.
Cloudflare is acquiring Deno to advance self-hosted Workers, then will end Deno runtime development after one year.
Cloudflare added on-demand CPU and memory flamegraph profiling for Workers and Durable Objects.
Deno is joining Cloudflare to make the open-source Workers runtime a first-class self-hosted platform.
OpenTelemetry guidance explains how products can export logs, traces, and metrics to any OTLP backend.
Cloudflare launched Streamline for custom video pipelines using Stream, Workers, and Containers.
Cloudflare Traces open beta follows requests across security, cache, routing, Workers, and origin with OpenTelemetry export.
Cloudflare combined logs, traces, SQL queries, alerts, and dashboards into one observability platform with new pricing.
Cloudflare opened Logpush, Transformers, and broader RBAC to non-Enterprise plans while expanding multi-account management.
Cloudflare Workers Web Crypto now supports ML-KEM and ML-DSA post-quantum algorithms behind a compatibility flag.
Cloudflare asks developers to build an agent-native Git platform on Artifacts, now in open beta.
Cloudflare Workers Issues, now in open beta, groups production errors and sends them to coding agents.
Cloudflare shipped Vinext 1.0, a Vite-based runtime that makes Next.js apps portable to Workers and other hosts.
Cloudflare launched cf, an agent-oriented CLI that exposes more than 3,000 API operations with JSON by default.
Cloudflare’s Kitesurf agent browser adds WebMCP, more web standards, and full Browser Run coverage.
Cloudflare open-sources Forge, a pipeline that generates SDKs, CLIs, docs, and agent-facing API surfaces.
Cloudflare previews Emscripten support in wasm-bindgen so native Rust and Tokio can run on Workers.
Cloudflare fixed a Containers flaw that let Workers Paid customers read residual data from other tenants on the same host.
Cloudflare patched a Containers flaw that could let one tenant read residual disk data from another.
Cloudflare fixed a Containers flaw that could expose residual cross-tenant disk data; no malicious exploitation was found.
Cloudflare launches Worker Previews, isolated per-branch environments for testing agent code changes.
Attackers with a stolen Cloudflare API key turned Brevo's CDN into a malware channel, injecting code into 100,000+ customer websites.
A developer launched ResolveHQ, an open helpdesk application built entirely on Cloudflare's Workers, D1, R2, and Queues infrastructure.
Cisco Talos details ClearFake's fake-CAPTCHA chain deploying ZigCryptoStealer with a BYOVD attack that kills EDR processes, observed at a Ukrainian government organization in April 2026.
Cisco Talos details ClickFix campaigns abusing fake Google CAPTCHA prompts, WebDAV and BNB Smart Chain to deploy the Amatera infostealer.
Cloudflare rewrote the Workers (workerd) module registry for Node.js-compatible URL-based module resolution, shipped behind the new_module_registry flag with a 64 MiB bundle limit.
Cloudflare launches invitation-only Vulnerability Discovery and Remediation within Managed Defense, using OpenAI Daybreak models and WAF context to prioritize and patch vulnerabilities.
US agencies warn of AI-assisted attacks on exposed Siemens PLCs; the week also saw GitLab CVE-2026-19478 exploited and trojanized npm packages found.
Socket found 40 malicious Firefox extensions impersonating OKX, Rabby Wallet, and TronLink to steal cryptocurrency wallet recovery phrases and private keys.
Researchers demonstrated a remote Spectre attack leaking a JWT between co-located Cloudflare Workers at 12 bits per second, 360x the 2021 rate.
Cloudflare details its 2024-2025 reassessment of remote Spectre attacks on Workers, covering new attack primitives and hardened defenses.
Cloudflare launched Access for Workers, letting admins attach one zero-trust policy to a Worker across all routes, domains, and previews automatically.
Nearly 800 typo-squatted npm packages deliver WEL1DROPPER, a cross-platform downloader installing RAT and infostealer payloads on Windows, macOS, Linux.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 384 readers · 416 views · 313 reads · all time 158K views