DFL

Cloudflare has fixed a critical security vulnerability that could have exposed customers' container data. The flaw, now patched, raised concerns about isolation between customer workloads in cloud environments. Security professionals are sharing the disclosure and debating how such cross-tenant exposure risks should be handled and reported across the industry.

Cloudflare says AI agents are changing how the internet works, with automated agents rather than humans increasingly driving web traffic and altering the economics of content and services. The company argues this shift has major implications for publishers, websites and the business models that depend on human visitors.

Anthropic has acquired Stainless, the developer tooling company behind a popular SDK generator, and has shut down the generator service. In response, Cloudflare has open-sourced Forge, its own alternative for generating software development kits. Developers who relied on Stainless are now weighing Cloudflare's Forge as a replacement, sparking discussion about tooling ownership and the future of open-source SDK generation.

A cross-tenant data exposure flaw in Cloudflare's Containers and Sandboxes has been disclosed and fixed. The issue stemmed from dm-thin storage pools running with skip_block_zeroing enabled, meaning newly written 4 KiB pages into unmapped 64 KiB blocks could leave residual data on raw devices. A Workers Paid tenant could reportedly read up to 60 KiB of data left behind by a previous tenant from /dev/vdc. Cloudflare has patched the issue, and security communities are discussing the implications of shared-storage isolation failures in multi-tenant cloud platforms.

Deutsche Telekom and Cloudflare have announced a cooperation. T-Systems, the Telekom subsidiary, will distribute products from the Californian CDN provider in the future. The partnership could also help ease network problems by enabling direct data exchange between the two companies' infrastructures. The announcement has drawn attention among German tech observers discussing its impact on data routing and network performance.

Cloudflare said Tuesday it plans to issue quantum-proof TLS certificates, positioning the company as one of the first certificate authorities to adopt cryptography designed to withstand attacks from future quantum computers. The move anticipates a shift in internet security standards as quantum computing advances threaten traditional encryption methods.

Cloudflare has published a new post outlining its approach to adaptive application security, describing how it connects code analysis, traffic signals and network intelligence to stop attacks. The company argues that as AI accelerates both software development and automated threats, security tools must adapt in real time rather than rely on static rules, positioning Cloudflare's global network data as the key advantage.

Cloudflare has announced it is now operating as a certificate authority, issuing TLS certificates at global scale. The company says the move is aimed at making secure HTTPS connections more accessible to everyone, building on its existing infrastructure business. The announcement is drawing attention from developers and security professionals discussing what a new large-scale CA means for the web's certificate ecosystem.

Cloudflare has announced plans to issue quantum-safe TLS certificates as part of a major overhaul of the website authentication ecosystem. The move is aimed at protecting encrypted web traffic against future attacks by quantum computers, which could eventually break today's widely used cryptographic algorithms. Security watchers are highlighting it as a significant step toward post-quantum encryption across the web.

British industrial metal duo Godflesh have put out a new release titled Decay. The Birmingham project, formed by Justin Broadrick and G.C. Green, is known for pioneering the industrial metal sound since the late 1980s. Fans of the band's heavy, mechanical style are discussing the new material, though details beyond the release itself remain limited.

Cloudflare has opened anonymized speed data covering 10,000 top websites. The data shows Safari and iPhone visits in 46 countries load or respond at least 10% slower than Chrome-type browsers. More detailed sub-part data will be added to Cloudflare's dashboard in the coming weeks, letting site owners compare performance across browsers and devices.

Cloudflare has released cf, a new agentic command-line tool that replaces its long-standing Wrangler CLI and gives access to around 3,000 API operations. Developer communities are discussing what the change means for existing deployment workflows and how an AI-driven interface could reshape infrastructure management for Cloudflare's platform.

Cloudflare has announced its intent to become a public certificate authority (CA), saying it is not issuing certificates yet but intends to do so. The company has laid out first concrete milestones, including applications for inclusion in the Chrome and Apple root programs. The move would put Cloudflare in direct competition with established certificate issuers and give it a bigger role in web encryption infrastructure.