Discover how Cloudflare DMARC Management enhances email security. Learn about the new general availability update, SPF auditing, and simplified remediation.

A “copyright takedown notice” led to a page on Cloudflare’s own pages.dev, a web address your security tools wave straight through. Behind…

A new backdoor called Dohdoor doesn’t connect directly to a suspicious server. It just asks Cloudflare a normal-looking question and hidden…

Discover the Cloudflare PACT protocol, a privacy-first initiative with Chrome, Edge, and Firefox to eliminate CAPTCHAs and authenticate web traffic safely.

Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport and other malware.

Cloudflare has launched Workers Cache, a dedicated frontend caching layer built specifically for Cloudflare Workers. With this release, Workers can act as their own origin. They can now also benef…

Network service provider Cloudflare recently introduced an innovative feature named Drop. This capability allows users to host purely static websites effortlessly. According to its core design log…

Network provider Cloudflare recently published a blog post about emergency Web Application Firewall (WAF) rules. These new rules actively block the dangerous wp2shell vulnerability exploits. This …

A locked vault stops a thief with a crowbar. It doesn’t stop one who walks in with a gun. Here’s the edge security we put in front of our…

Cloudflare has announced the launch of Cloudflare Wallets – a programmable wallet system designed not for everyday consumers, but for AI agents and automated applications. The product’…

At a Glance Attribute Detail Actor / group Unattributed threat actor (tracked by Securonix as SMOKE#SCREEN) Activity type Multi-wave phishing and RMM abuse for remote access Targets / victims Wind…

Attackers needed no counterfeit website to slip malicious Terraform modules to developers. Unknown intruders gained access to the Cloudflare infrastructure that Coder relies upon. They added their…

According to the changelog published by Cloudflare, from today both the free and paid Workers subscription plans support uncompressed code bundles of up to 64 MiB. Previously, Workers judged wheth…

I watched this AI-powered tool explode on GitHub Trending this week. Here’s how it’s redefining vulnerability discovery for developers like…

A terminated container is theoretically engineered to vanish entirely, alongside all its ephemeral data. However, within Cloudflare’s sprawling infrastructure, fragments of this sensitive in…

Cloudflare has officially declared its intention to autonomously issue publicly trusted certificates for websites, establishing the bedrock for HTTPS functionality across modern browsers. The tech…

Cloudflare Launches Clef and Clef-flash Cloud infrastructure firm Cloudflare wants AI agents to react faster during their tasks. To that end, it has launched two open-source decision models that i…

Ukrainian President Volodymyr Zelenskyy recently claimed that precision drone strikes against Russian data center infrastructure severely degraded hostile automated tools. Specifically, official s…

TL;DR The PHP team will ship a security release on October 21, 2026, at 14:00 UTC to fix two critical flaws rated CVSS v4.0 9.2. Leaks tie them to CVE-2026-109618 and CVE-2026-109619, described as…

TL;DR Attackers are now exploiting PHP2Shell, a pair of critical PHP remote code execution flaws tracked as CVE-2026-109618 and CVE-2026-109619. Amazon saw the first attempt on October 17, four da…