Cloudflare chooses leaderless QuePaxa for its Meerkat control plane
A 2020 partial switch failure left a leader-based Cloudflare system unable to take writes and about 80 times slower for six hours.
Stories per day · 30 days
12 RSS
Relatedphp11php2shell10waf10ai-agents6remote-code-execution6workers-ai6clairic4ddos4dns-amplification4openai4botnets3clickfix3mirai3nextjs3radar3vulnerability-intelligence3wordpress3workers3
169 stories, newest first · one card per story
Stories tagged #cloudflare
Fake Cloudflare CAPTCHA ClickFix lures hide malware in PNG images
Huntress says pasted PowerShell rebuilt full executables from PNG pixel data, then added persistence and lateral movement.
CISA announces enhanced cyber incident reporting form
The fetched page showed only a Cloudflare check, so the form’s changes are not described.
Cloudflare Launches Vite Ecosystem Fund with 301300 in Sponsorships
Cloudflare distributes $301300 to 44 Vite projects to address AI-driven maintainer burnout and PR overload.
Cloudflare outlines a post-quantum path for Privacy Pass
A quantum attacker could forge today’s Privacy Pass tokens, while token privacy is described as holding even after Q-day.
1
Storm-2603 Exploits SharePoint ToolShell Flaws and Cloudflare Tunnels
Storm-2603 installed webshells and deployed Cloudflare Tunnels after exploiting SharePoint vulnerabilities.
1
Cloudflare CEO says AI agents are a bane for website operators
CEO predicts AI agents will generate 1000x human traffic, impacting website costs, and suggests containers may become obsolete.
1
Cloudflare says sites need identity tools for users behind AI agents
Remotely hosted agents hide the user, so sites lose the identity, reputation, and accountability signals they use for fraud and access.
2
Cloudflare Launches Personal Agents Visibility
New analytics and policies give site owners control over personal AI agent access.
Cloudflare Launches Zero Wire Vulnerability Intelligence Hub
Cloudflare Radar now offers Zero Wire, a hub that aggregates vendor guidance, research, and network observations to help teams prioritize critical internet-facing vulnerabilities.
1
Cloudflare launches Zero Wire vulnerability intelligence feed
Zero Wire provides briefings on critical CVEs with exploitation evidence and patch guidance for internet-facing software.
Cloudflare introduces Zero Wire vulnerability intelligence hub
Zero Wire delivers plain-language briefings on critical Internet vulnerabilities via Cloudflare Radar.
Cloudflare halves DNS build delay and cuts memory use 85%
A targeted planner skips full rebuilds of zones with tens of millions of records as changes rose from about 250 to 700 per second.
1
Cloudflare reports 18.2 million L3 DDoS attacks in Q3
That is about 8,226 network-layer attacks an hour, up from 13.2 million in Q2, plus 14.4 trillion HTTP DDoS requests.
1
Four labs' code-security agents share a find-then-disprove design
Claude Security, Codex Security, Cloudflare's skill and Google Mantis differ in runtime, access and how much proof they require.
5
Roundup: UEFI boot flaw, Anthropic access dispute, Cloudflare AI leak
The digest also covers suspected freezer tampering, an FEC filing outage, and breaches at Copenhagen and ENGIE.
Cloudflare private-origin application services are generally available
A proxied DNS record aimed at a private IP is reached over existing Cloudflare One links, with WAF and Workers unchanged.
4
Cloudflare mitigated 18.2 million DDoS attacks in Q3 2026
Attacks rose 208% year over year, but 98% stayed under 1 Gbps and most ended within ten minutes.
1
Arkham Binance-hacker page failed to load behind Cloudflare
The captured page is only a Cloudflare 403, so the $5.6 billion theft figure is unverified.
Cloudflare blocked over 8,200 network DDoS attacks an hour in Q3
Most attacks lasted under ten minutes and stayed below 1 Gbps, while terabit-scale floods fell nearly 69% from the prior quarter.
1
Cloudflare: short DDoS bursts rose 208% in Q3 2026
Attacks over 1 Tbps fell to 251 from 805 after takedowns of four large IoT botnets.
1
Fake Cloudflare checks push ClickFix commands to Windows and Mac users
Commands pointed to api-com.cfd and cf-id.com, but neither yielded a payload, so the malware remains unknown.
1
Cloudflare Image Transformations chain bypasses CSP for XSS
Researchers combined an SVG sanitizer bug, Chromium cache behavior, and redirects; no CVE or wild exploitation is confirmed.
1
Fake Cloudflare checks on hacked sites push ClickFix commands
SANS could not retrieve the Windows or macOS payload after test fetches returned HTTP 403 or failed to resolve.
2