Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cloudy Summarizations of Email Detections: Beta Announcement

Organizations face continuous threats from phishing, business email compromise (BEC), and other advanced email attacks. Attackers adapt their tactics daily, forcing defenders to move just as quickly to keep inboxes safe. Cloudflare’s visibility across a large portion of the Internet gives us an unparalleled view of malicious campaigns. We process billions of email threat signals every day, feeding them into multiple AI and machine learning models.

Automating threat analysis and response with Cloudy

Security professionals everywhere face a paradox: while more data provides the visibility needed to catch threats, it also makes it harder for humans to process it all and find what's important. When there’s a sudden spike in suspicious traffic, every second counts. But for many security teams — especially lean ones — it’s hard to quickly figure out what’s going on. Finding a root cause means diving into dashboards, filtering logs, and cross-referencing threat feeds.

Securing the AI Revolution: Introducing Cloudflare MCP Server Portals

Large Language Models (LLMs) are rapidly evolving from impressive information retrieval tools into active, intelligent agents. The key to unlocking this transformation is the Model Context Protocol (MCP), an open-source standard that allows LLMs to securely connect to and interact with any application — from Slack to Canva, to your own internal databases. This is a massive leap forward.

Best Practices for Securing Generative AI with SASE

As Generative AI revolutionizes businesses everywhere, security and IT leaders find themselves in a tough spot. Executives are mandating speedy adoption of Generative AI tools to drive efficiency and stay abreast of competitors. Meanwhile, IT and Security teams must rapidly develop an AI Security Strategy, even before the organization really understands exactly how it plans to adopt and deploy Generative AI.

Inside the Adversary's Mind: How Cloudflare's Red Team Hacks to Defend

Get a behind-the-scenes look at Cloudflare’s Red Team with Dan Jones — a Senior Security Engineer who thinks like an attacker to strengthen defenses. In this preview of his Cloudflare Connect 2025 talk, Dan shares how offensive security helps protect millions of Internet properties.

Beyond the ban: A better way to secure generative AI applications

The revolution is already inside your organization, and it's happening at the speed of a keystroke. Every day, employees turn to generative artificial intelligence (GenAI) for help with everything from drafting emails to debugging code. And while using GenAI boosts productivity—a win for the organization—this also creates a significant data security risk: employees may potentially share sensitive information with a third party.

Cloudflare Radar Reels Ep 5 - Powering AI with Global Scale & Real-Time Insights

AI breakthroughs demand speed, scale, and visibility. From image creation to real-time text analysis, next-gen AI depends on lightning-fast networks. Cloudflare’s presence in 330+ cities makes it happen. Cloudflare's Radar Display gives you a front-row view of the trends shaping AI’s future.

How a volunteer-run wildfire site in Portugal stayed online during DDoS attacks

On July 31, 2025, just as Portugal entered the peak of another intense wildfire season, João Pina, also known as Tomahock, received an automated alert from Cloudflare. His volunteer-run project, fogos.pt, now a trusted source of real-time wildfire information for millions across Portugal, was under attack. One of the several alerts fogos.pt received related to the DDoS attack.

MadeYouReset: An HTTP/2 vulnerability thwarted by Rapid Reset mitigations

On August 13, security researchers at Tel Aviv University disclosed a new HTTP/2 denial-of-service (DoS) vulnerability that they are calling MadeYouReset (CVE-2025-8671). This vulnerability exists in a limited number of unpatched HTTP/2 server implementations that do not sufficiently enforce restrictions on the number of times a client may send malformed frames. If you’re using Cloudflare for HTTP DDoS mitigation, you’re already protected from MadeYouReset.

Loyalty Fraud Cost Businesses

Think credit card fraud is the biggest threat to eCommerce? Think again. Loyalty fraud cost businesses $4B in 2024, and most companies didn't see it coming. Why? Because the attack vector isn't obvious. It's: Credential stuffing + password spraying Poorly managed APIs connecting loyalty platforms to 3rd parties No real-time detection when the bad guys cash in points for untraceable gift cards.

How Retailers Are Fighting Back Against Fraud with Andy Dean and Christian Reilly

In this episode of The Connectivity Cloud Podcast with Cloudflare, host Mark Dembo is joined by Andy Dean, Head of Technical Operations at AllSaints, and Christian Reilly, Field CTO of EMEA at Cloudflare, to unpack what real-world digital transformation looks like, specifically how enterprises can navigate the complex balance between security and scalability, from managing multi-vendor environments to modernizing legacy infrastructure.

Evolving App Strategy

Every business hits this fork in the road: Do we build or do we buy? Andy Dean and Christian Reilly break it down simply: Buy doesn't always mean SaaS; it can mean bringing in complex systems like SAP. But complexity creeps fast. M&A, new markets, legacy apps, all of it adds layers. To win long-term, you need a clear target architecture and guardrails to reduce drift. That's where automation, cloud landing zones, and Infrastructure-as-Code come in.

Smarter Load Balancing for Modern Apps

Traditional load balancers weren’t built for today’s distributed applications. As workloads span clouds and regions, you need more flexibility—and fewer bottlenecks. Join us to learn how Cloudflare Load Balancing, powered by our Connectivity Cloud, helps you: Route traffic based on performance, availability, or geography Avoid vendor lock-in and legacy infrastructure limitations Manage all your traffic with a unified set of policies and controls.

How to Build a Real-Time Social App on Cloudflare (No Servers Needed)

In this episode, host João Tomé is joined by Inanna Malick, Systems Engineer at Cloudflare, to talk about how she built a serverless version of a real-time social app that connects to the ATProto ecosystem — the protocol powering platforms like Bluesky. Inanna walks us through her blog post and technical journey, showing how she used Cloudflare Workers, Durable Objects, and the free tier of our Developer Platform to deploy an open, identity-owned, cryptographically verified social experience — all without running a server.