DFL

Cloudflare has fixed a critical security vulnerability that could have exposed customers' container data. The flaw, now patched, raised concerns about isolation between customer workloads in cloud environments. Security professionals are sharing the disclosure and debating how such cross-tenant exposure risks should be handled and reported across the industry.

Cloudflare says AI agents are changing how the internet works, with automated agents rather than humans increasingly driving web traffic and altering the economics of content and services. The company argues this shift has major implications for publishers, websites and the business models that depend on human visitors.

Anthropic has acquired Stainless, the developer tooling company behind a popular SDK generator, and has shut down the generator service. In response, Cloudflare has open-sourced Forge, its own alternative for generating software development kits. Developers who relied on Stainless are now weighing Cloudflare's Forge as a replacement, sparking discussion about tooling ownership and the future of open-source SDK generation.

A cross-tenant data exposure flaw in Cloudflare's Containers and Sandboxes has been disclosed and fixed. The issue stemmed from dm-thin storage pools running with skip_block_zeroing enabled, meaning newly written 4 KiB pages into unmapped 64 KiB blocks could leave residual data on raw devices. A Workers Paid tenant could reportedly read up to 60 KiB of data left behind by a previous tenant from /dev/vdc. Cloudflare has patched the issue, and security communities are discussing the implications of shared-storage isolation failures in multi-tenant cloud platforms.

The Russian state-linked hacking group Star Blizzard has begun using a new malware installation tactic called RedFlick to deploy its CosmicPulse backdoor, security researchers report. The technique marks an evolution in the group's delivery methods, and cybersecurity watchers are sharing the findings as a warning to organisations targeted by Russian espionage operations.

Deutsche Telekom and Cloudflare have announced a cooperation. T-Systems, the Telekom subsidiary, will distribute products from the Californian CDN provider in the future. The partnership could also help ease network problems by enabling direct data exchange between the two companies' infrastructures. The announcement has drawn attention among German tech observers discussing its impact on data routing and network performance.

Cloudflare announced on Tuesday that it plans to issue quantum-proof TLS certificates, positioning itself among the first certificate authorities to adopt cryptography believed to withstand attacks from future quantum computers. The move anticipates the day quantum machines could break today's encryption standards, and security observers are discussing what it means for mainstream web encryption.

Cloudflare has published a new post outlining its approach to adaptive application security, describing how it connects code analysis, traffic signals and network intelligence to stop attacks. The company argues that as AI accelerates both software development and automated threats, security tools must adapt in real time rather than rely on static rules, positioning Cloudflare's global network data as the key advantage.

A large-scale internet outage has been reported, with Google, Cloudflare and Twitch among the major services experiencing disruption. Users across the web have reported problems accessing sites and platforms that rely on shared infrastructure. The scale and root cause of the outage have not yet been confirmed, and affected services' recovery timelines remain unclear.

Cloudflare has announced it is now operating as a certificate authority, issuing TLS certificates at global scale. The company says the move is aimed at making secure HTTPS connections more accessible to everyone, building on its existing infrastructure business. The announcement is drawing attention from developers and security professionals discussing what a new large-scale CA means for the web's certificate ecosystem.

A Cloudflare representative has identified Google Cloud as the cause of a widespread internet outage. The attribution places scrutiny on Google's cloud infrastructure, which underpins many popular online services. Users and businesses experienced disruptions tied to the incident, and attention has turned to how much of the internet depends on a small number of cloud providers. Google has not been reported as confirming the assessment.

Reports from the Italian tech scene say Google's Gemini 4 model is progressing, while the US Federal Trade Commission and web infrastructure firm Cloudflare move to strengthen safety guardrails around artificial intelligence. The takeaway circulating online: AI development is accelerating, but security and regulation are becoming ever more central to the conversation.

British industrial metal duo Godflesh have put out a new release titled Decay. The Birmingham project, formed by Justin Broadrick and G.C. Green, is known for pioneering the industrial metal sound since the late 1980s. Fans of the band's heavy, mechanical style are discussing the new material, though details beyond the release itself remain limited.

Cloudflare has announced plans to issue quantum-safe TLS certificates as part of a major overhaul of the website authentication ecosystem. The move is aimed at protecting encrypted web traffic against future attacks by quantum computers, which could eventually break today's widely used cryptographic algorithms. Security watchers are highlighting it as a significant step toward post-quantum encryption across the web.

Cloudflare has released cf, a new agentic command-line tool that replaces its long-standing Wrangler CLI and gives access to around 3,000 API operations. Developer communities are discussing what the change means for existing deployment workflows and how an AI-driven interface could reshape infrastructure management for Cloudflare's platform.

Cloudflare has opened anonymized speed data covering 10,000 top websites. The data shows Safari and iPhone visits in 46 countries load or respond at least 10% slower than Chrome-type browsers. More detailed sub-part data will be added to Cloudflare's dashboard in the coming weeks, letting site owners compare performance across browsers and devices.

Cloudflare has announced its intent to become a public certificate authority (CA), saying it is not issuing certificates yet but intends to do so. The company has laid out first concrete milestones, including applications for inclusion in the Chrome and Apple root programs. The move would put Cloudflare in direct competition with established certificate issuers and give it a bigger role in web encryption infrastructure.