21 casos · pág. 1/2
Cloudflare announced it has obtained South Korea's Information Security Management System (ISMS) certification under the ISMS-P framework. The certification followed a ten-day audit by auditors appointed by the Korea Internet & Security Agency (KISA) covering 80 controls, and a preparation effort of about a year and a half. This is compli…
Cloudflare has made generally available to all customers, including Free plans, two new WAF capabilities: full transaction detections, which correlate each HTTP request with the origin's response to confirm exploitation, and response rules, which block the origin's response before it reaches the requester. The first managed protections ta…
Cloudflare and Commerce.com describe enabling WebMCP, an experimental Google browser standard that exposes structured tools (e.g. searchproducts, addtocart) to AI shopping agents, across almost 100,000 Commerce.com storefronts. Cloudflare injects a script at the edge, so merchants do not have to edit their themes. This is product and part…
Cloudflare and VoidZero, together with Max Schwenk of Owner.com, announced tsrs, an experimental Rust port of the TypeScript compiler incubated within the Oxc JavaScript toolchain and developed in collaboration with the TypeScript team. This is product and open source tooling news with no security incident, vulnerability or threat activit…
Cloudflare reports that one year after announcing a goal of hiring up to 1,111 interns in 2026, it has hosted 750 internships across 48 teams in nine offices. The post is corporate and HR news, not a security incident, and describes no threat activity, vulnerability or breach. Interns used AI tooling to speed up onboarding and shipped wor…
Cloudflare published its Birthday Week 2026 wrap-up, listing 46 product and platform announcements made between September 28 and October 2. The article is vendor product news and describes no incident, vulnerability or active threat. Security-relevant items include Cloudflare's plan to become a public certificate authority issuing Merkle …
Cloudflare has described a multi-agent AI security operations harness in its Cloudflare Managed Defense service, now in early beta for eligible application-security alerts and cases. It is meant to reduce analyst overload from correlated alerts. Deterministic code collects evidence and enforces scope before any model runs, which addresses…
Cloudflare has redesigned the landing page of Cloudflare Radar, its public platform for real-time global Internet trends. The goal is to make the platform easier to use for journalists, human rights advocates, policymakers and general users, while keeping the depth that network operators and academic researchers rely on. The new page lead…
Cloudflare announced that the Deno team, led by Ryan Dahl and Bert Belder, is joining the company. celld, Deno's Rust-based implementation of Workers and Durable Objects, will be merged with workerd, Cloudflare's open-source Workers runtime. The goal is to make self-hosting the Workers programming model, including distributed Durable Obje…
Cloudflare announced on-demand CPU and memory profiling for Workers and Durable Objects. Developers can request a profile of a live production Worker from the Observability page or the cf CLI, inspect it as an interactive flamegraph, and download the .pprof file. This is a product and observability announcement with no vulnerability, thre…
Cloudflare announced Clef-omni, an open-weight decision model that accepts text, image, audio (wav/mp3) and video (mp4/webm) input in a single API call. It is built on a Qwen3-Omni-30B-A3B-Instruct mixture-of-experts backbone with LoRA adapters. Cloudflare also cut the price of Clef-flash to $0.038 per M input tokens, at the cost of a sma…
Cloudflare announced general availability of Logpush Transformers, and made Logpush available on all self-serve plans. The feature lets teams filter, redact, and reshape logs with a SQL query before export to SIEMs, analytics platforms, or object storage. The article is a product and engineering post with no vulnerability, incident, or th…
Cloudflare's Data team describes how it keeps hardware demand down for a pipeline that delivered roughly two billion events per second in May 2026. Over five years its changes have been equivalent to deferring about two and a half years of hardware expansion. This is an engineering blog post with no security incident, vulnerability or thr…
Cloudflare published an engineering deep dive on how the control plane of D1, its managed serverless database built on SQLite, scales to millions of databases, with hundreds of thousands active at any time. The post reports 15x growth in live databases and 18x growth in daily active databases over the past year (as of October 8, 2026). It…
Cloudflare announced general availability of Hyperdrive support for MySQL, its database connection pooler for Cloudflare Workers, and detailed a rare caching bug found during the beta. A high-volume customer saw empty query responses in about 0.001% of cases, only on instances with caching enabled. The root cause was a flawed assumption i…
Cloudflare and VoidZero announced the open-source release of three products, Void Platform, Void SDK and Void CLI. They bring server routing, typed data access and Cloudflare deployment into a single Vite workflow, and ship as one npm package and Vite plugin (npm install void). The release follows VoidZero joining Cloudflare. The stated m…
Cloudflare and OpenAI report early results from a research pilot launched in July 2026. The pilot tests whether signals from Cloudflare's network can help OpenAI's search crawler find more useful pages for ChatGPT Search. Using a cohort of about 1% of Cloudflare's network, OpenAI discovered and indexed hundreds of millions of previously u…
Cloudflare announced a product update that integrates Cloudflare Workers with Cloudflare Gateway and DLP, making its secure web gateway programmable. A new Forward action (public beta) routes matched HTTP traffic to a Worker acting as inline middleware, while Custom Functions (expected before year-end) let Workers return typed values used…
Cloudflare announced a system that continuously evaluates whether Verified bots keep honoring website preferences after their identity is verified. The system produces an explainable "trust band" from observed behavior. It currently looks at two signals: whether a bot's traffic is consistent with published robots.txt rules (RFC 9309), and…
Cloudflare reports that the average cost of its internal AI code reviewer rose from $1.19 (April) to about $2.46 (end of August 2026), then fell to $0.77 per review after a cost-optimization effort starting in mid-September. Median review time dropped from 4m 09s to 1m 32s. Roughly 40% of the savings came from code changes and the rest fr…
