|
By Agents
AI Agents now act on the web for millions of people. To a Site, an Agent can take many forms. It may be indistinguishable from a human user carrying out a task, or it might look like one visitor carrying many Users. This removes the ability for the Site to recognize, serve, and hold accountable the user or users behind the Agent, and causes the Site to face the costs when something goes wrong.
|
By CVE
You run security at your organization. It’s 7:00 am, and you’re having breakfast. You receive a ping: a new critical vulnerability has been disclosed. Your team scrambles to compare vendor advisories, read technical research, check which systems run the affected software, and answer familiar questions from the business: are we affected, and what are we doing about it? Another disclosure arrives before that work is finished.
|
By Cryptography
On October 19, 2026, we learned about eMudhra’s eight shockingly weak keys: where eMudhra was trusted to pick a 115-digit number for their virtual combination lock protecting the Internet, they picked the number 4. Not even four digits, just the number 4. The other seven keys were similarly weak: 56, 66, 115, 155, 156, 230 and 237. The next day, we wrote a blog post on the immediate action we took to mitigate this leak, and what customers needed to do on their end to stay secure.
|
By Botnet
Welcome to the 26th edition of Cloudflare's DDoS Threat Report. This edition covers the third quarter of 2026 — July, August, and September — and returns the series to its quarterly cadence following the combined H1 2026 volume. The analysis is produced by Cloudforce One, Cloudflare's Threat Intelligence organization, providing a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network.
|
By Cloudflare One
Today, Cloudflare is launching a post-quantum geographically restricted key manager in support of our Data Localization Suite (DLS) in closed beta. This new PQ GeoKey Manager is a cornerstone of Cloudflare’s data sovereignty solutions, making sure that a customer's decryption keys are only accessible in their chosen geography. GeoKey Manager implements this by wrapping each decryption key such that it can only be decrypted by Cloudflare servers that are located in the allowed geography.
|
By Managed Rules
Today, we are expanding our web application firewall (WAF) by adding two new capabilities: full transaction detections and response rules. Full transaction detections evaluate each HTTP request alongside its response to identify evidence of exploitation. It helps answer both "Does this request look malicious?" and "What happened when the application handled it?" Response rules can then block the origin’s response before it reaches the requester.
|
By Managed Rules
Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell. The vulnerabilities affect all web servers running PHP 5.4 or later and they may allow an attacker to cause denial of service, remote code execution, and data exposure when an application processes specially crafted HTTP traffic.
|
By Cloudflare Access
The recent disclosure of a major vulnerability in Citrix NetScaler pointed to a widespread weak point: a login page is an attack surface that can be used to compromise and access an application server. Indeed, the disclosures included an actively exploited flaw that allowed attackers to execute commands on affected gateways without signing in. As with any emergency patch, admins had to weigh cutting off or disrupting their users’ access with the risk of delaying a critical security update.
|
By AI
A driver’s license tells you who someone is and that they passed a driving test, not whether they’ll drive responsibly in the future. The same is true for bots: verifying who operates it creates accountability, but trust depends on what it does next. A known bot can still ignore website preferences, overwhelm origins, or evade controls. It’s not always malicious — often it’s just a misconfiguration or a bug.
|
By Cloudflare Gateway
Every secure web gateway on the market works the same way: traffic matches a condition. A terminal action fires. Allow, Block, Isolate, Log. This model has been the foundation of network security for nearly 30 years, and it handles the common case well. But it has a ceiling, and customers with complex environments hit that ceiling regularly.
|
By Cloudflare
Before you paste customer data into an AI prompt… pause for one second. From sales pipelines to customer contracts, RevOps handles sensitive data constantly. Ida Yunos, Revenue Operations Leader for APAC & Japan, explains why good data security habits belong to everyone, not just IT. Watch the video to see how to protect data while keeping daily work moving.
|
By Cloudflare
As AI rapidly advances, identity security is undergoing a massive shift. Gavin Chen, Global Alliances at Cloudflare, shares how Cloudflare and Ping Identity are partnering to help organizations secure human users, non-human agents, and autonomous AI workflows—all while empowering businesses to innovate without friction.
|
By Cloudflare
In this episode of the DISRUPTOR CONFESSIONS with John Ayers podcast, Matthew Prince Co-founder & CEO, Cloudflare sat down with John to explore the human, ethical, creative, and strategic dimensions of technological disruption.
|
By Cloudflare
Tjeerd Jan van der Molen and Margot Schipper of Cloudflare introduce Cloudflare OS and show how it rewires the way everyone in a company can work with AI.
|
By Cloudflare
Jose Dores of Cloudflare explains how programmable SASE gives organizations the fastest path to adopting AI safely, with security built for what comes next.
|
By Cloudflare
Michael Gustafsson of Cloudflare shows how to ship AI agents on Cloudflare that are secure by default, so teams can build and deploy agents with confidence.
|
By Cloudflare
Christiaan Smits of Cloudflare looks at how data sovereignty is evolving across EMEA and how organizations can navigate the changing landscape.
|
By Cloudflare
It was just a little chat window in the corner of the screen. But behind it was a web of trusted connections reaching deep inside the enterprise. Here’s how attackers turned a trusted integration into a massive supply chain breach. Expand for more details and resources In August 2025, attackers tracked as UNC6395 compromised OAuth tokens associated with Salesloft’s Drift integration. This turned trusted connections to Salesforce environments into an attack path reaching hundreds of companies, including top-tier cybersecurity organizations.
|
By Cloudflare
Oron Noah, VP of Product Extensibility & Partnership at Wiz, shares how the Cloudflare and Wiz partnership began and how their integration delivers better security outcomes — from code to production — by giving every team full visibility into their cloud environment.
|
By Cloudflare
As cyber threats become more sophisticated, strategic partnerships are essential for robust defense. In this interview, we sit down with the team at SentinelOne to discuss how our integrated solutions provide end-to-end security for the modern enterprise.
|
By Cloudflare
This whitepaper discusses the many challenges that DNS providers and users face including massive cyber attacks as well as performance and reliability issues, and how Cloudflare can help resolve these challenges, ensuring business continuity.
|
By Cloudflare
Strategies for preventing data breaches, shadow APIs, abuse, and other common challenges.
|
By Cloudflare
Organizations are facing economic uncertainty as the outlook grows more unpredictable. This uncertainty - often exemplified by shrinking budgets - puts pressure on CIOs and technical leaders to find new paths forward.
|
By Cloudflare
This whitepaper discusses the growth of large scale DDoS attacks, how these attacks target as well as leverage DNS provider infrastructures, and how Cloudflare can help protect your business against the impact of such massive attacks.
|
By Cloudflare
Growing a startup requires delivering excellent online experiences. In this guide, we share tips to help startups create the kind of high-performing, reliable, and secure websites and applications needed to do so.
- November 2026 (2)
- October 2026 (19)
- September 2026 (8)
- August 2026 (11)
- July 2026 (10)
- June 2026 (14)
- May 2026 (6)
- April 2026 (20)
- March 2026 (26)
- February 2026 (10)
- January 2026 (14)
- December 2025 (22)
- November 2025 (11)
- October 2025 (22)
- September 2025 (24)
- August 2025 (18)
- July 2025 (22)
- June 2025 (12)
- May 2025 (18)
- April 2025 (27)
- March 2025 (34)
- February 2025 (9)
- January 2025 (7)
- December 2024 (8)
- November 2024 (4)
- October 2024 (8)
- September 2024 (13)
- August 2024 (6)
- July 2024 (13)
- June 2024 (11)
- May 2024 (9)
- April 2024 (9)
- March 2024 (23)
- February 2024 (7)
- January 2024 (6)
- December 2023 (8)
- November 2023 (5)
- October 2023 (12)
- September 2023 (19)
- August 2023 (8)
- July 2023 (8)
- June 2023 (5)
- May 2023 (13)
- April 2023 (17)
- March 2023 (10)
- January 2023 (1)
- December 2022 (1)
Cloudflare is a global network designed to make everything you connect to the Internet secure, private, fast, and reliable.
Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare have all traffic routed through its intelligent global network, which gets smarter with each new site added. As a result, they see significant improvement in performance and a decrease in spam and other attacks.
The Integrated Global Cloud Network:
- Zero Trust Services: Stop data loss, malware and phishing with the most performant Zero Trust application access and Internet browsing solution.
- Website & App Performance: Speed up websites, apps, & APIs through our global network to optimize your content & deliver it closer to the users location.
- Website & App Security: Protect websites & applications from bots, DDoS attacks & more. All while monitoring for suspicious activity & potential attacks.
- Network Security & Performance: Networking solutions to connect, secure, & accelerate your networks — without the cost & complexity of managing legacy hardware.
- Developer Platform: Deploy serverless code instantly across the globe to give it exceptional performance, reliability, & scale.
- SASE - Cloudflare One: Zero Trust network-as-a-service platform to dynamically connect remote & on-site users to resources, with identity-based security controls.
A global network built for the cloud.