DFL

Cloudflare has fixed a critical security vulnerability that could have exposed customers' container data. The flaw, now patched, raised concerns about isolation between customer workloads in cloud environments. Security professionals are sharing the disclosure and debating how such cross-tenant exposure risks should be handled and reported across the industry.

Cloudflare says AI agents are changing how the internet works, with automated agents rather than humans increasingly driving web traffic and altering the economics of content and services. The company argues this shift has major implications for publishers, websites and the business models that depend on human visitors.

Anthropic has acquired Stainless, the developer tooling company behind a popular SDK generator, and has shut down the generator service. In response, Cloudflare has open-sourced Forge, its own alternative for generating software development kits. Developers who relied on Stainless are now weighing Cloudflare's Forge as a replacement, sparking discussion about tooling ownership and the future of open-source SDK generation.

A cross-tenant data exposure flaw in Cloudflare's Containers and Sandboxes has been disclosed and fixed. The issue stemmed from dm-thin storage pools running with skip_block_zeroing enabled, meaning newly written 4 KiB pages into unmapped 64 KiB blocks could leave residual data on raw devices. A Workers Paid tenant could reportedly read up to 60 KiB of data left behind by a previous tenant from /dev/vdc. Cloudflare has patched the issue, and security communities are discussing the implications of shared-storage isolation failures in multi-tenant cloud platforms.

The Russian state-linked hacking group Star Blizzard has begun using a new malware installation tactic called RedFlick to deploy its CosmicPulse backdoor, security researchers report. The technique marks an evolution in the group's delivery methods, and cybersecurity watchers are sharing the findings as a warning to organisations targeted by Russian espionage operations.

Deutsche Telekom and Cloudflare have announced a cooperation. T-Systems, the Telekom subsidiary, will distribute products from the Californian CDN provider in the future. The partnership could also help ease network problems by enabling direct data exchange between the two companies' infrastructures. The announcement has drawn attention among German tech observers discussing its impact on data routing and network performance.

Cloudflare has announced that its AI Search product is now generally available, moving the tool out of testing and opening it to all customers. The announcement, made via the company's blog, is drawing attention among developers and technology watchers interested in AI-powered search built on cloud infrastructure.

Cloudflare has introduced K2, a serverless event streaming service described on its blog as a way for developers to process event streams without managing infrastructure. The announcement is drawing attention among developers, with discussion centered on how K2 compares to existing streaming platforms and what it means for building event-driven applications on Cloudflare's network.

Cloudflare announced on Tuesday that it plans to issue quantum-proof TLS certificates, positioning itself among the first certificate authorities to deploy cryptography designed to withstand attacks from quantum computers. The move is aimed at future-proofing web encryption as quantum computing advances, and it is drawing attention among security and privacy observers discussing the shift to post-quantum cryptography.

Cloudflare has announced a managed Cloudflare OS, pitched as a company workspace for AI agents that is maintained for customers rather than self-hosted. The announcement, shared on Cloudflare's blog with open-source and AI tags, positions the product as infrastructure for organisations running agentic software without managing the underlying environment themselves. Early response online has been modest so far, circulating mainly among developer and open-source communities.

A Cloudflare representative has named Google Cloud as the cause of a recent internet outage, according to Mashable. The attribution suggests disruptions to Google's cloud infrastructure rippled across services that depend on it, affecting websites and apps globally. The claim highlights how concentrated cloud providers have become in keeping the internet online.

Cloudflare has published a new post outlining its approach to adaptive application security, describing how it connects code analysis, traffic signals and network intelligence to stop attacks. The company argues that as AI accelerates both software development and automated threats, security tools must adapt in real time rather than rely on static rules, positioning Cloudflare's global network data as the key advantage.

A large-scale internet outage has been reported, with Google, Cloudflare and Twitch among the major services experiencing disruption. Users across the web have reported problems accessing sites and platforms that rely on shared infrastructure. The scale and root cause of the outage have not yet been confirmed, and affected services' recovery timelines remain unclear.

Cloudflare has announced it is now operating as a certificate authority, issuing TLS certificates at global scale. The company says the move is aimed at making secure HTTPS connections more accessible to everyone, building on its existing infrastructure business. The announcement is drawing attention from developers and security professionals discussing what a new large-scale CA means for the web's certificate ecosystem.

Cloudflare has published a blog post inviting developers to build the next Git hosting platform on its infrastructure. The company argues its global network and development tools can support a modern alternative for code hosting, encouraging the open-source community to experiment with new approaches to Git-based collaboration.

A discussion is underway about whether Cloudflare's Containers service, which gives each tenant a Firecracker microVM on dm-thin provisioning with block zeroing skipped, can truly isolate tenant disk data. Because the thin pool uses 64 KiB blocks and hands out recycled blocks unzeroed, a tenant writing 4 KiB could read neighboring data from a previous tenant in the remaining space.

British industrial metal duo Godflesh have put out a new release titled Decay. The Birmingham project, formed by Justin Broadrick and G.C. Green, is known for pioneering the industrial metal sound since the late 1980s. Fans of the band's heavy, mechanical style are discussing the new material, though details beyond the release itself remain limited.

Reports from the Italian tech scene say Google's Gemini 4 model is progressing, while the US Federal Trade Commission and web infrastructure firm Cloudflare move to strengthen safety guardrails around artificial intelligence. The takeaway circulating online: AI development is accelerating, but security and regulation are becoming ever more central to the conversation.

Cloudflare has announced plans to issue quantum-safe TLS certificates as part of a major overhaul of the website authentication ecosystem. The move is aimed at protecting encrypted web traffic against future attacks by quantum computers, which could eventually break today's widely used cryptographic algorithms. Security watchers are highlighting it as a significant step toward post-quantum encryption across the web.

Cloudflare has released cf, a new agentic command-line tool that replaces its long-standing Wrangler CLI and gives access to around 3,000 API operations. Developer communities are discussing what the change means for existing deployment workflows and how an AI-driven interface could reshape infrastructure management for Cloudflare's platform.

Cloudflare has opened anonymized speed data covering 10,000 top websites. The data shows Safari and iPhone visits in 46 countries load or respond at least 10% slower than Chrome-type browsers. More detailed sub-part data will be added to Cloudflare's dashboard in the coming weeks, letting site owners compare performance across browsers and devices.

Cloudflare has announced its intent to become a public certificate authority (CA), saying it is not issuing certificates yet but intends to do so. The company has laid out first concrete milestones, including applications for inclusion in the Chrome and Apple root programs. The move would put Cloudflare in direct competition with established certificate issuers and give it a bigger role in web encryption infrastructure.