Cloudflare tracks forged certificates from eMudhra’s weak CA keys
About 22,000 handshakes presented the weak keys; Cloudflare says none intercepted its own connections.
88
Vendor
Cloudflare
- Mentions · 7d15
- Mentions · 30d100
- All mentions205
- First seenAug 11, 2026
- Last mentioned6h ago
Timeline
205 articles · newest firstFour labs' code-security agents share a find-then-disprove design
Claude Security, Codex Security, Cloudflare's skill and Google Mantis differ in runtime, access and how much proof they require.
32
Roundup: UEFI boot flaw, Anthropic access dispute, Cloudflare AI leak
The digest also covers suspected freezer tampering, an FEC filing outage, and breaches at Copenhagen and ENGIE.
62
Cloudflare private-origin application services are generally available
A proxied DNS record aimed at a private IP is reached over existing Cloudflare One links, with WAF and Workers unchanged.
36
Cloudflare mitigated 18.2 million DDoS attacks in Q3 2026
Attacks rose 208% year over year, but 98% stayed under 1 Gbps and most ended within ten minutes.
58
Cloudflare blocked over 8,200 network DDoS attacks an hour in Q3
Most attacks lasted under ten minutes and stayed below 1 Gbps, while terabit-scale floods fell nearly 69% from the prior quarter.
58
Cloudflare: short DDoS bursts rose 208% in Q3 2026
Attacks over 1 Tbps fell to 251 from 805 after takedowns of four large IoT botnets.
46
Cloudflare Image Transformations chain bypasses CSP for XSS
Researchers combined an SVG sanitizer bug, Chromium cache behavior, and redirects; no CVE or wild exploitation is confirmed.
58
Fake Cloudflare checks on hacked sites push ClickFix commands
SANS could not retrieve the Windows or macOS payload after test fetches returned HTTP 403 or failed to resolve.
58
Researchers chain Cloudflare image flaws into a CSP-bypass XSS
A public write-up shows script execution via /cdn-cgi/image/ using an SVG namespace bug and a Chromium cache quirk.
66
Cloudflare Radar records 49 Internet disruptions in Q3 2026
Exam shutdowns in Iraq and power failures, including large drops in Honduras, Cuba, and Sevastopol, led the quarter’s outages.
44
Cloudflare opens PHP CTF for php2shell WAF bypasses
HackerOne participants must get code execution on PHP 8.5.11, read a resetting flag, and privately report a distinct bypass.
52
Cloudflare GLM-5.3 leaked other customers' data through a KV cache bug
155 responses from August 27 to September 9 mixed in other users' data; Cloudflare found no deliberate exploitation.
62
Cloudflare adds log-only WAF rules tied to Brotli flaw CVE-2026-111497
The October 25 rules watch Brotli request bodies and Next.js /_next/image traffic; customers must opt in to blocking.
58
Cloudflare adds WAF rules for CVE-2026-111497, logging by default
Two Managed Ruleset detections cover Brotli request bodies and Next.js /_next/image traffic, and matches can include legitimate requests.
52
Cloudflare opens Origin Range Requests for partial file caching
A Cache Rule replaces per-zone range-size tuning; Cloudflare says R2 time to first byte fell by about half.
22
Cloudflare opens closed beta of post-quantum GeoKey Manager
Hybrid ML-KEM-768 and X25519 keep TLS private keys unwrappable only in a chosen region; general availability is planned for Q1 2027.
36
QPACK flaws let one HTTP/3 connection exhaust server memory
Seven of ten tested stacks were vulnerable; quic-go, quiche, lsquic and Wireshark had fixes as of October 20, 2026.
68
Critical PHP flaws prompt site shutdowns as exploit attempts surge
watchTowr says both bugs are remote code execution from PHP 5 onward and were rated 9.2 of 10.
90
AI bug hunting accelerates as PHP2Shell draws mass exploit attempts
Cloudflare's CEO said exploit attempts rose from thousands before disclosure to millions within hours.
38
Cloudflare obtains South Korea ISMS certification under ISMS-P
Korean sign-ups require three separate consents, and social login is not offered in South Korea.
28
Amazon says PHP2Shell was probed before disclosure and is now exploited
Fixes are PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12; PHP 8.1 and earlier get no official patches.
92
QPACK flaws can crash HTTP/3 servers via memory amplification
FoxIO released PoCs; quic-go, quiche, lsquic, and Wireshark are patched, while Bun, h3, and aioquic were not.
72
Cloudflare WAF adds full-transaction detection and response rules
The features are generally available on every plan, including Free, and the first managed rules target php2shell.
36
PHP patches unauthenticated RCE flaws dubbed PHP2Shell
Fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35; a public exploit hits before application code runs.
88
PHP rushes emergency patches as early php2shell attacks reported
Cloudflare says early attacks are emerging and has pushed temporary firewall rules to all customers, including free accounts.
90
Commerce.com enables Cloudflare WebMCP on nearly 100,000 stores
Shopping agents call search and cart tools in the shopper’s browser session, while checkout stays with the human.
46
Cloudflare uses OpenAI models to prioritize customer vulnerabilities
The early-access service proposes code patches and custom WAF rules after customers authorize code review.
46
Eight eMudhra intermediate certificate keys compromised, Cloudflare says
Cloudflare says it has not seen exploitation on its services and has shipped client and tunnel updates.
88
Cloudflare and VoidZero incubate tsrs, a Rust port of TypeScript
Project benchmarks claim up to 8x speed and about 70% less memory than TypeScript 7.0 with the same worker count.
8
Cloudflare previews Clairic, a single-pass document extraction model
Clairic is in preview on Workers AI, with open weights planned, and returns named fields plus a confidence score.
48
Cloudflare releases Clairic extraction model on Workers AI
The captured page is only a cookie notice, so model size, benchmarks and access are not stated.
32
Cloudflare previews Clairic extraction model that skips token generation
In one claims workflow, a Clairic pipeline finished in 19.3 seconds and cost 49% less than an all-LLM version.
46
Infoblox infiltrates long-running Microsoft tech-support scam
Help TDS, used since 2017, routes victims to fake alerts and remote-access installs.
48
Cloudflare previews Clairic, a System One extraction model
Clairic is hosted on Workers AI as @cf/cloudflare/clairic, charges only for input, and open weights are planned.
52
Exploited NetScaler flaws allow command execution before login
CVE-2026-88771 works without authentication, including on default configurations; CVE-2026-88772 involves DTLS.
82
Cloudflare CEO lists why the free CDN tier will continue
Prince cites attack data, referrals, hiring, QA, and bandwidth scale, and says margins stayed above 70%.
18
Websites are closing their doors to AI agents
Amazon, airlines, and banks are blocking AI shopping and booking agents from Meta, OpenAI, xAI, and others.
52
Continuous accountability for Verified bots
Cloudflare will score Verified bots on whether they honor robots.txt and rate-limit signals over time.
34
Hackers Abuse 20,000 Cloudflare Pages Domains to Push Fake Microsoft Security Alerts
Attackers used over 20,000 Cloudflare Pages domains to push fake Microsoft alerts into tech-support scams.
74
Related CVEs
by mentions- CVE-2026-8207861%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-8157884%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2021-4228777%7.5Privilege Escalation in Microsoft Active Directory Domain Services
- CVE-2021-4227873%7.5Privilege Escalation via sAMAccountName Spoofing in Microsoft Active Directory
- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2026-12523<1%7.5Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames
- CVE-2025-13945<1%5.5HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- CVE-2025-64702<1%5.3quic-go is an implementation of the QUIC protocol in Go
Appears with
- Cloudflareorganization · 88
- Cloudflare Workersproduct · 32
- Microsoftvendor · 28
- OpenAIvendor · 23
- Googlevendor · 21
- OpenAIorganization · 18
- Workers AIproduct · 13
- Anthropicvendor · 12
- WordPressproduct · 12
- Googleorganization · 9
- Clefai model · 9
- Codexproduct · 8
- AI Gatewayproduct · 8
- Anthropicorganization · 8
- Claude Codeproduct · 7
- Microsoftorganization · 7
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.