Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cloudflare WAF proactively protects against React vulnerability

Cloudflare has deployed a new protection to address a vulnerability in React Server Components (RSC). All Cloudflare customers are automatically protected, including those on free and paid plans, as long as their React application traffic is proxied through the Cloudflare Web Application Firewall (WAF). Cloudflare Workers are inherently immune to this exploit. React-based applications and frameworks deployed on Workers are not affected by this vulnerability.

Cloudflare's 2025 Q3 DDoS threat report -- including Aisuru, the apex of botnets

Welcome to the 23rd edition of Cloudflare’s Quarterly DDoS Threat Report. This report offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. In this edition, we focus on the third quarter of 2025.

The Easiest Hacks Are the Most Dangerous

Some of the most successful cyberattacks aren't even that sophisticated. A misconfigured Zoom tenant. A forgotten 2FA. A Salesforce setting was left wide open. The problem isn't always the platform, but how we use it. Vladimir Krupnov and Blake Darché joined us in the latest episode of The Connectivity Cloud Podcast to unpack the myth that you need advanced tools to breach a system.

The REAL Reason Scam Ads Won't Go Away

Why are scam ads and phishing sites still everywhere? Despite the tech, resources, and talent in cybersecurity, we still find ourselves playing catch-up instead of leading the charge. One of the reasons? The industry's reactive nature and the fragmented state of intelligence sharing. In the latest episode of The Connectivity Cloud Podcast, Vladimir Krupnov and Blake Darché explore how companies like Revolut are pushing for a more proactive, collaborative, and disruptive approach to cyber defence.

Inside Cybersecurity's New Arms Race with Vladimir Krupnov and Blake Darché

In this episode of The Connectivity Cloud Podcast with Cloudflare, host Mark Dembo is joined by Vladimir Krupnov, Threat Intelligence Lead at Revolut, and Blake Darché, Head of Cloudforce One and Threat Intelligence at Cloudflare, to expose the evolving tactics of cybercriminals and what it really takes to stop them.

Get better visibility for the WAF with payload logging

As the surface area for attacks on the web increases, Cloudflare’s Web Application Firewall (WAF) provides a myriad of solutions to mitigate these attacks. This is great for our customers, but the cardinality in the workloads of the millions of requests we service means that generating false positives is inevitable. This means that the default configuration we have for our customers has to be fine-tuned.

Securing and Accelerating Public Sector Networks with Cloudflare Magic WAN

Cloudflare's Magic WAN is a secure, global network service that connects enterprise locations and users with faster, more reliable performance. It replaces traditional VPNs and MPLS with a cost-effective solution, leveraging Cloudflare's extensive edge network to improve both speed and security. In this webinar, you will learn how to: Seamlessly integrate Magic WAN with Cloudflare’s security features Enhance protection against modern network threats Optimize network traffic for better performance Reduce costs compared to traditional VPNs and MPLS solutions.

Cloudflare Firewall for AI Explainer and Demo

AI is powerful, but without protections in place, it’s risky. In this explainer and demo, you'll learn how you can secure your AI-powered applications with Cloudflare Firewall for AI. The demo will show Firewall for AI detecting and mitigating threats like PII exposure, unsafe/toxic content, prompt injection, and jailbreak. Further, you'll see Cloudflare’s powerful analytics capability and how Cloudflare's AI agent, Cloudy, can help investigate threats and build and deploy Firewall for AI security policies.