DFL

Cloudflare has fixed a critical security vulnerability that could have exposed customers' container data. The flaw, now patched, raised concerns about isolation between customer workloads in cloud environments. Security professionals are sharing the disclosure and debating how such cross-tenant exposure risks should be handled and reported across the industry.

Cloudflare says AI agents are changing how the internet works, with automated agents rather than humans increasingly driving web traffic and altering the economics of content and services. The company argues this shift has major implications for publishers, websites and the business models that depend on human visitors.

Anthropic has acquired Stainless, the developer tooling company behind a popular SDK generator, and has shut down the generator service. In response, Cloudflare has open-sourced Forge, its own alternative for generating software development kits. Developers who relied on Stainless are now weighing Cloudflare's Forge as a replacement, sparking discussion about tooling ownership and the future of open-source SDK generation.

A cross-tenant data exposure flaw in Cloudflare's Containers and Sandboxes has been disclosed and fixed. The issue stemmed from dm-thin storage pools running with skip_block_zeroing enabled, meaning newly written 4 KiB pages into unmapped 64 KiB blocks could leave residual data on raw devices. A Workers Paid tenant could reportedly read up to 60 KiB of data left behind by a previous tenant from /dev/vdc. Cloudflare has patched the issue, and security communities are discussing the implications of shared-storage isolation failures in multi-tenant cloud platforms.

The Russian state-linked hacking group Star Blizzard has begun using a new malware installation tactic called RedFlick to deploy its CosmicPulse backdoor, security researchers report. The technique marks an evolution in the group's delivery methods, and cybersecurity watchers are sharing the findings as a warning to organisations targeted by Russian espionage operations.

Deutsche Telekom and Cloudflare have announced a cooperation. T-Systems, the Telekom subsidiary, will distribute products from the Californian CDN provider in the future. The partnership could also help ease network problems by enabling direct data exchange between the two companies' infrastructures. The announcement has drawn attention among German tech observers discussing its impact on data routing and network performance.

Cloudflare announced on Tuesday that it plans to issue quantum-proof TLS certificates, positioning itself among the first certificate authorities to adopt cryptography believed to withstand attacks from future quantum computers. The move anticipates the day quantum machines could break today's encryption standards, and security observers are discussing what it means for mainstream web encryption.

A widespread internet outage has disrupted several major online services, with Google, Cloudflare and Twitch among those reported down. Users around the world experienced difficulty accessing the platforms, and the simultaneous failures suggest a possible problem with shared infrastructure such as Cloudflare's network. Details on the cause and scope of the disruption remain limited as services work to restore access.

Cloudflare has published a new post outlining its approach to adaptive application security, describing how it connects code analysis, traffic signals and network intelligence to stop attacks. The company argues that as AI accelerates both software development and automated threats, security tools must adapt in real time rather than rely on static rules, positioning Cloudflare's global network data as the key advantage.

A Cloudflare representative has identified Google Cloud as the cause of a widespread internet outage. The attribution places scrutiny on Google's cloud infrastructure, which underpins many popular online services. Users and businesses experienced disruptions tied to the incident, and attention has turned to how much of the internet depends on a small number of cloud providers. Google has not been reported as confirming the assessment.

Cloudflare has announced it is now operating as a certificate authority, issuing TLS certificates at global scale. The company says the move is aimed at making secure HTTPS connections more accessible to everyone, building on its existing infrastructure business. The announcement is drawing attention from developers and security professionals discussing what a new large-scale CA means for the web's certificate ecosystem.

Reports from the Italian tech scene say Google's Gemini 4 model is progressing, while the US Federal Trade Commission and web infrastructure firm Cloudflare move to strengthen safety guardrails around artificial intelligence. The takeaway circulating online: AI development is accelerating, but security and regulation are becoming ever more central to the conversation.

Cloudflare has announced plans to issue quantum-safe TLS certificates as part of a major overhaul of the website authentication ecosystem. The move is aimed at protecting encrypted web traffic against future attacks by quantum computers, which could eventually break today's widely used cryptographic algorithms. Security watchers are highlighting it as a significant step toward post-quantum encryption across the web.

British industrial metal duo Godflesh have put out a new release titled Decay. The Birmingham project, formed by Justin Broadrick and G.C. Green, is known for pioneering the industrial metal sound since the late 1980s. Fans of the band's heavy, mechanical style are discussing the new material, though details beyond the release itself remain limited.

Cloudflare has opened anonymized speed data covering 10,000 top websites. The data shows Safari and iPhone visits in 46 countries load or respond at least 10% slower than Chrome-type browsers. More detailed sub-part data will be added to Cloudflare's dashboard in the coming weeks, letting site owners compare performance across browsers and devices.

Cloudflare has released cf, a new agentic command-line tool that replaces its long-standing Wrangler CLI and gives access to around 3,000 API operations. Developer communities are discussing what the change means for existing deployment workflows and how an AI-driven interface could reshape infrastructure management for Cloudflare's platform.

Cloudflare has announced its intent to become a public certificate authority (CA), saying it is not issuing certificates yet but intends to do so. The company has laid out first concrete milestones, including applications for inclusion in the Chrome and Apple root programs. The move would put Cloudflare in direct competition with established certificate issuers and give it a bigger role in web encryption infrastructure.