DFL

Cloudflare has fixed a critical security vulnerability that could have exposed customers' container data. The flaw, now patched, raised concerns about isolation between customer workloads in cloud environments. Security professionals are sharing the disclosure and debating how such cross-tenant exposure risks should be handled and reported across the industry.

Cloudflare says AI agents are changing how the internet works, with automated agents rather than humans increasingly driving web traffic and altering the economics of content and services. The company argues this shift has major implications for publishers, websites and the business models that depend on human visitors.

Anthropic has acquired Stainless, the developer tooling company behind a popular SDK generator, and has shut down the generator service. In response, Cloudflare has open-sourced Forge, its own alternative for generating software development kits. Developers who relied on Stainless are now weighing Cloudflare's Forge as a replacement, sparking discussion about tooling ownership and the future of open-source SDK generation.

A cross-tenant data exposure flaw in Cloudflare's Containers and Sandboxes has been disclosed and fixed. The issue stemmed from dm-thin storage pools running with skip_block_zeroing enabled, meaning newly written 4 KiB pages into unmapped 64 KiB blocks could leave residual data on raw devices. A Workers Paid tenant could reportedly read up to 60 KiB of data left behind by a previous tenant from /dev/vdc. Cloudflare has patched the issue, and security communities are discussing the implications of shared-storage isolation failures in multi-tenant cloud platforms.

The Russian state-linked hacking group Star Blizzard has begun using a new malware installation tactic called RedFlick to deploy its CosmicPulse backdoor, security researchers report. The technique marks an evolution in the group's delivery methods, and cybersecurity watchers are sharing the findings as a warning to organisations targeted by Russian espionage operations.

Cloudflare and Perplexity have announced the launch of open decision AI models, making model weights openly available rather than proprietary. The move is being discussed as part of the broader competition in the AI industry, where companies are increasingly releasing open-weight systems to attract developers. Commenters are weighing what this means for open-source AI and the two companies' competitive positioning.

Cloudflare has announced K2, a serverless event streaming service. The announcement describes a managed way to produce and consume event streams without provisioning infrastructure, extending Cloudflare's developer platform beyond compute and storage. Developer reaction so far has centred on how it compares with existing streaming offerings like Kafka and cloud provider event services.

Deutsche Telekom and Cloudflare have announced a cooperation. T-Systems, the Telekom subsidiary, will distribute products from the Californian CDN provider in the future. The partnership could also help ease network problems by enabling direct data exchange between the two companies' infrastructures. The announcement has drawn attention among German tech observers discussing its impact on data routing and network performance.

Cloudflare has announced an Oblivious HTTP (OHTTP) gateway, a service that separates a client's identity from the content of its requests by relaying them through an intermediary. The move lets websites and apps accept traffic without learning who sent it, extending Cloudflare's privacy infrastructure. Developers and privacy advocates are debating its practical impact on tracking and censorship resistance.

Cloudflare has introduced Clef, a set of open-source decision models alongside a new reinforcement learning fine-tuning platform. The announcement, published on the company's blog, positions Clef as a tool for developers building decision-making AI systems that can be tuned with RL techniques. Early reaction online is modest so far, with the release circulating among open-source and machine learning communities following the launch.

Cloudflare has announced that its AI Search product is now generally available, moving the tool out of testing and opening it to all customers. The announcement, made via the company's blog, is drawing attention among developers and technology watchers interested in AI-powered search built on cloud infrastructure.

Cloudflare has announced K2, a serverless event streaming service, in a post on its company blog. The announcement introduces a way to process event streams without managing servers, extending Cloudflare's developer platform. The launch is drawing attention from developers discussing how it compares with existing event streaming and queueing tools.

Cloudflare announced on Tuesday that it plans to issue quantum-proof TLS certificates, positioning itself among the first certificate authorities to deploy cryptography believed to withstand attacks from future quantum computers. The move anticipates the day quantum machines could break current encryption protecting web traffic. Privacy and security observers are highlighting the announcement as a notable early step in the industry's transition to post-quantum security standards.

Paul Graham, the Y Combinator co-founder, argues that the internet is moving beyond its traditional human speed limit, with machine-driven traffic now dominating activity. He points to infrastructure players such as GitHub, Cloudflare and the major cloud providers as the ones already feeling the strain of this shift in how the web is used.

Cloudflare has released Clef as an open-source tool aimed at how AI agents make decisions, positioning itself against OpenAI and Amazon in the fast-growing agent technology space. The move signals Cloudflare's push into infrastructure for autonomous AI systems, letting developers inspect or control agent reasoning without depending on proprietary offerings from the larger AI players.

Developers are revisiting how short, harmless-looking regular expressions knocked major services offline. The failures stemmed from catastrophic backtracking: a repeating group nested inside another repeating group, fed input that could not match, forcing the engine to try every possible split. Cloudflare and Stack Overflow both suffered such outages, and the pattern behind them can be written in an afternoon by anyone.

Cloudflare has announced a managed Cloudflare OS, pitched as a company workspace for AI agents that is maintained for customers rather than self-hosted. The announcement, shared on Cloudflare's blog with open-source and AI tags, positions the product as infrastructure for organisations running agentic software without managing the underlying environment themselves. Early response online has been modest so far, circulating mainly among developer and open-source communities.

Cloudflare has launched Clef, a new family of decision models designed to make fast AI-driven choices, such as routing, security verdicts, or classification, at low latency and cost. The company positions the models as lightweight tools for tasks where large language models are overkill. Details beyond the announcement, including benchmarks and availability, have not been widely reported yet.

A Cloudflare representative has named Google Cloud as the cause of a recent internet outage, according to Mashable. The attribution suggests disruptions to Google's cloud infrastructure rippled across services that depend on it, affecting websites and apps globally. The claim highlights how concentrated cloud providers have become in keeping the internet online.

Cloudflare has published a new post outlining its approach to adaptive application security, describing how it connects code analysis, traffic signals and network intelligence to stop attacks. The company argues that as AI accelerates both software development and automated threats, security tools must adapt in real time rather than rely on static rules, positioning Cloudflare's global network data as the key advantage.

Cloudflare has announced Clef, a set of open-source decision models, publishing details in a company blog post. The release suggests the company is making its internal decision-making AI models available for public use and inspection. Early reactions are limited so far, with the announcement just beginning to circulate among developers and AI watchers.

A large-scale internet outage has been reported, with Google, Cloudflare and Twitch among the major services experiencing disruption. Users across the web have reported problems accessing sites and platforms that rely on shared infrastructure. The scale and root cause of the outage have not yet been confirmed, and affected services' recovery timelines remain unclear.

Cloudflare has moved its OS managed agent workspace from an open-source project to a waitlisted managed service. The change means developers who previously used the open-source version must now sign up for access to the hosted offering. Details on pricing, availability timelines, and the reasoning behind the shift have not yet been fully outlined, and reaction from the developer community remains limited so far.

Cloudflare has announced it is now operating as a certificate authority, issuing TLS certificates at global scale. The company says the move is aimed at making secure HTTPS connections more accessible to everyone, building on its existing infrastructure business. The announcement is drawing attention from developers and security professionals discussing what a new large-scale CA means for the web's certificate ecosystem.

Cloudflare has announced its OHTTP Gateway, a new service aimed at letting developers route traffic through Oblivious HTTP, a protocol designed to hide a client's IP address and other metadata from the destination server. The announcement is drawing attention among developers interested in privacy infrastructure and open-source web tooling, with discussion focused on how the gateway could make metadata-protecting connections easier to deploy without running dedicated relay infrastructure.

Cloudflare has published a blog post inviting developers to build the next Git hosting platform on its infrastructure. The company argues its global network and development tools can support a modern alternative for code hosting, encouraging the open-source community to experiment with new approaches to Git-based collaboration.