41 casos · pág. 1/3
Cloudflare reports that one year after announcing a goal of hiring up to 1,111 interns in 2026, it has hosted 750 internships across 48 teams in nine offices. The post is corporate and HR news, not a security incident, and describes no threat activity, vulnerability or breach. Interns used AI tooling to speed up onboarding and shipped wor…
Cloudflare published its Birthday Week 2026 wrap-up, listing 46 product and platform announcements made between September 28 and October 2. The article is vendor product news and describes no incident, vulnerability or active threat. Security-relevant items include Cloudflare's plan to become a public certificate authority issuing Merkle …
Cloudflare has redesigned the landing page of Cloudflare Radar, its public platform for real-time global Internet trends. The goal is to make the platform easier to use for journalists, human rights advocates, policymakers and general users, while keeping the depth that network operators and academic researchers rely on. The new page lead…
Cloudflare announced on-demand CPU and memory profiling for Workers and Durable Objects. Developers can request a profile of a live production Worker from the Observability page or the cf CLI, inspect it as an interactive flamegraph, and download the .pprof file. This is a product and observability announcement with no vulnerability, thre…
Cloudflare's Data team describes how it keeps hardware demand down for a pipeline that delivered roughly two billion events per second in May 2026. Over five years its changes have been equivalent to deferring about two and a half years of hardware expansion. This is an engineering blog post with no security incident, vulnerability or thr…
Researchers infiltrated a large-scale tech support scam operation that impersonates Microsoft. The operation relies on a malicious traffic distribution system (TDS) run by a Russian organization. It also abuses thousands of Cloudflare links to route victims to scam content. The article snippet gives no victim counts, losses or technical i…
Cloudflare announced general availability of Logpush Transformers, and made Logpush available on all self-serve plans. The feature lets teams filter, redact, and reshape logs with a SQL query before export to SIEMs, analytics platforms, or object storage. The article is a product and engineering post with no vulnerability, incident, or th…
Cloudflare published an engineering deep dive on how the control plane of D1, its managed serverless database built on SQLite, scales to millions of databases, with hundreds of thousands active at any time. The post reports 15x growth in live databases and 18x growth in daily active databases over the past year (as of October 8, 2026). It…
Cloudflare announced general availability of Hyperdrive support for MySQL, its database connection pooler for Cloudflare Workers, and detailed a rare caching bug found during the beta. A high-volume customer saw empty query responses in about 0.001% of cases, only on instances with caching enabled. The root cause was a flawed assumption i…
Cloudflare and VoidZero announced the open-source release of three products, Void Platform, Void SDK and Void CLI. They bring server routing, typed data access and Cloudflare deployment into a single Vite workflow, and ship as one npm package and Vite plugin (npm install void). The release follows VoidZero joining Cloudflare. The stated m…
Cloudflare and OpenAI report early results from a research pilot launched in July 2026. The pilot tests whether signals from Cloudflare's network can help OpenAI's search crawler find more useful pages for ChatGPT Search. Using a cohort of about 1% of Cloudflare's network, OpenAI discovered and indexed hundreds of millions of previously u…
Cloudflare announced a system that continuously evaluates whether Verified bots keep honoring website preferences after their identity is verified. The system produces an explainable "trust band" from observed behavior. It currently looks at two signals: whether a bot's traffic is consistent with published robots.txt rules (RFC 9309), and…
Cloudflare announced a preview of Clairic, the first "System One" extraction model, hosted on Workers AI as @cf/cloudflare/clairic, with open weights planned. The model extracts, computes, estimates and forecasts typed values from unstructured text and images in a single forward pass. It generates no output tokens and returns confidence s…
On October 19, 2026, Cloudflare learned that the private keys of eight eMudhra intermediate certificates had been compromised. The certificates were widely trusted by browsers, operating systems and Cloudflare itself. Because the keys are weak, an attacker could forge a certificate for any domain and impersonate servers to intercept or mo…
The DNS root zone is scheduled to switch its key-signing key (KSK) on October 11, 2026, only the second root KSK rollover ever. KSK-2024 (key tag 38696) will replace KSK-2017 (key tag 20326) as signer of the root DNSKEY set. DNSSEC-validating resolvers that do not trust the new key could fail validation and make healthy websites under any…
Cloudflare has described a multi-agent AI security operations harness in its Cloudflare Managed Defense service, now in early beta for eligible application-security alerts and cases. It is meant to reduce analyst overload from correlated alerts. Deterministic code collects evidence and enforces scope before any model runs, which addresses…
Cloudflare announced that the Deno team, led by Ryan Dahl and Bert Belder, is joining the company. celld, Deno's Rust-based implementation of Workers and Durable Objects, will be merged with workerd, Cloudflare's open-source Workers runtime. The goal is to make self-hosting the Workers programming model, including distributed Durable Obje…
Cloudflare reports that the average cost of its internal AI code reviewer rose from $1.19 (April) to about $2.46 (end of August 2026), then fell to $0.77 per review after a cost-optimization effort starting in mid-September. Median review time dropped from 4m 09s to 1m 32s. Roughly 40% of the savings came from code changes and the rest fr…
Cloudflare and VoidZero, together with Max Schwenk of Owner.com, announced tsrs, an experimental Rust port of the TypeScript compiler incubated within the Oxc JavaScript toolchain and developed in collaboration with the TypeScript team. This is product and open source tooling news with no security incident, vulnerability or threat activit…
Hacktron researchers disclosed a one-click universal XSS (UXSS) in Perplexity Comet, a Chromium-based AI browser with the Comet Assistant agent extension. The extension's manifest trusts the wildcard https://.perplexity.ai/ in externallyconnectable, so a single XSS on any perplexity.ai subdomain can reach privileged extension message hand…
