Tag

Cloudflare

All articles tagged with #cloudflare

Spectre cross-tenant leak in Cloudflare Workers at 12 bps prompts stronger isolation
security5 days ago

Spectre cross-tenant leak in Cloudflare Workers at 12 bps prompts stronger isolation

Researchers demonstrated a remote Spectre side-channel attack leaking a JWT from a co-located Cloudflare Worker at up to 12 bits/sec (99.16% accuracy) with attacker and victim in separate V8 isolates within the same process; Cloudflare says no customer data was accessed and has mitigated the risk in production by upgrading Dynamic Process Isolation (DyPrIs), adopting the V8 Sandbox, and deploying MPK-based in-process isolation, with no exploitation observed in three years. The study notes DyPrIs detection limitations and urges in-execution signals resilient to IO activity. Tests used Linux AMD EPYC CPUs; leakage scales with load. As of Sept 2025, Cloudflare’s hardening includes stronger DyPrIs, tighter V8 pointer limits, and rotating MPK-backed memory layouts to reduce cross-isolate leakage.

Cloudflare opens vibe-coding platform for non-coders with secure AI sandboxes
technology19 days ago

Cloudflare opens vibe-coding platform for non-coders with secure AI sandboxes

Cloudflare has open-sourced Cloudflare OS, its internal vibe-coding workspace that lets non-developers describe tasks in natural language and have AI agents generate apps. It uses fast, memory-efficient V8 isolates for per-task sandboxes, enforces strict permissions and disabled outbound networking, and runs client code in a browser sandbox. The platform supports multiple AI models, deterministic workflows to limit resource use, and admin controls for budgets. Cloudflare also published an Engineering Codex to uphold standards. Thousands of employees use it daily for docs, automation, and data visuals. Open sourcing is available on GitHub, but backend deployment requires a Workers Paid plan, and security researchers caution that sandboxing is not foolproof.

Cloudflare flags Google's AI-driven reshaping of the web and its hit to human traffic
technology1 month ago

Cloudflare flags Google's AI-driven reshaping of the web and its hit to human traffic

Cloudflare’s new report claims more than 50% of internet traffic is now non-human, a trend tied to Google’s Gemini AI integration that has coincided with a sharp drop in human site visits. Google is said to account for about 88% of referral traffic, and 52% of crawler requests are for AI training as of June 2026. Publishers warn of “Google Zero,” where opting out of AI Overview could deindex sites, a move the UK regulator is pushing by allowing opt-out controls. The shift is widening beyond media to retail, software, IT and finance, raising questions about how Google will sustain AI-driven results without publisher revenue.

Bots Now Account for Majority of Web Traffic, Cloudflare Data Reveal
technology2 months ago

Bots Now Account for Majority of Web Traffic, Cloudflare Data Reveal

Cloudflare data show AI agents and bots now generate 57.4% of web requests, surpassing human traffic at 42.6%, signaling a rapid surge in autonomous browsing. The rise—driven by AI agents using tools with little human input—could reshape the internet’s business model since bots don’t click ads, prompting new monetization ideas and raising questions about how content is discovered and consumed in the web’s evolving landscape.

Kash Patel's merch site hacked to push malware through a fake Cloudflare check
technology3 months ago

Kash Patel's merch site hacked to push malware through a fake Cloudflare check

A Based Apparel storefront tied to Kash Patel was compromised: visitors encountered a modified Cloudflare verification page and were urged to copy a code into their terminal, which installed a Mac-specific infostealer malware designed to harvest credentials, browser data, crypto extension info, and keychain items, with a suspected payment skimmer also present. The attack leveraged a malicious WordPress plugin, while initial access remains unclear. Patel has distanced himself from the store, and there’s no confirmed FBI involvement at this time.

technology3 months ago

US Court Orders Global Action Against Anna's Archive in $19.5M Judgment

A New York federal judge issued a $19.5 million default judgment and a permanent injunction targeting Anna's Archive, a shadow library tied to Sci-Hub and LibGen, naming more than 20 intermediaries to shut down its domains. Operators remain anonymous, complicating enforcement, and while U.S. courts can bind some entities (like Cloudflare), many registrars and country-level registries may resist; the case underscores the conflict between piracy, AI training data needs, and global enforcement.

Cloudflare CEO: Brand name isn’t great as 20% of staff are cut
technology3 months ago

Cloudflare CEO: Brand name isn’t great as 20% of staff are cut

Cloudflare CEO Matthew Prince said the company’s name is hard to pronounce and not ideal, joking that an even worse idea might have been “Project Web Wall.” Days later, Cloudflare announced cuts of about 1,100 employees (roughly 20%), attributing the move to a 600% surge in AI use over three months and signaling a restructuring to move faster and deliver more value as AI workloads grow.

Quantum Security Goes From Talk to Budgets as IonQ and Cloudflare Lead Market Push
technology3 months ago

Quantum Security Goes From Talk to Budgets as IonQ and Cloudflare Lead Market Push

Quantum security is moving from risk talk to budgets, with Cloudflare adding post-quantum protections to its SASE network; IonQ posted strong Q1 2026 revenue growth and raised its 2026 guidance despite an expected EBITDA loss, while defense-linked work expands. Private firm Quantum Motion raised $160 million to pursue chip-scale silicon qubits, and software startups Haiqu and Horizon Quantum push easier-to-use quantum tools. The overall picture shows a budding quantum economy oriented toward defense applications, chip-scale scaling, and real-world use.

Cloudflare trims 20% of workforce as AI-first strategy takes shape
business3 months ago

Cloudflare trims 20% of workforce as AI-first strategy takes shape

Cloudflare beat Q1 earnings estimates with revenue of $640 million and 25 cents per share, but shares fell after-hours as it announced a plan to cut more than 1,100 employees (about 20%) to pursue an agentic AI‑first operating model. The company also projected Q2 revenue of $664–665 million (roughly in line with expectations) and full-year 2026 revenue of $2.805–$2.813 billion with EPS of $1.19–$1.20, while Q1 posted a net loss of $22.93 million.

Cloudflare Cuts 1,100 Jobs to Pivot Toward an Agentic AI Era
business3 months ago

Cloudflare Cuts 1,100 Jobs to Pivot Toward an Agentic AI Era

Cloudflare announced a global layoff of about 1,100 employees as it restructures for an “agentic AI era,” following a Q1 earnings beat that sent shares down more than 14% after hours. The company says AI usage has surged over 600% in three months and that the cuts are a redesign of how the company operates to move faster and deliver more value, not a cost-cutting measure. Departing employees will receive generous severance, extended healthcare where applicable, and equity vesting through August, with targeted one-time actions to maintain stability for the remaining staff.

Cloudflare bets on instant, disposable AI runtimes with Dynamic Workers
technology5 months ago

Cloudflare bets on instant, disposable AI runtimes with Dynamic Workers

Cloudflare launched an open beta for Dynamic Workers, an ultra-lightweight isolate-based sandbox that starts in milliseconds and uses only a few megabytes of memory, enabling AI agents to generate and execute short TypeScript code snippets on demand. The approach aims to outperform containers for web-scale, short-lived AI tasks, backed by security measures, new tooling, and a beta-friendly pricing model; it also highlights a broader shift toward disposable execution environments for AI workloads.

investing6 months ago

AI Upside Emerges for Microsoft and Cloudflare, Analysts Say

Software stocks have fallen into bear market territory, but Wall Street analysts view Microsoft and Cloudflare as undervalued bets on AI. Median targets imply about 52% upside for Microsoft and 40% for Cloudflare, driven by AI integrations (Azure/OpenAI for Microsoft; fast, secure cloud network for Cloudflare) and solid fundamentals, with a cautious approach to position sizing and potential add-on on dips.

X hit by twin outages in a day as mystery downtime rattles users
technology6 months ago

X hit by twin outages in a day as mystery downtime rattles users

X suffered two major outages on Feb 16, 2026, leaving users worldwide unable to load posts and seeing errors. Downdetector spikes peaked around 41,000 US reports and 12,000 in the UK during the first wave and recurred later, with the latest spike approaching earlier highs before easing. No official cause has been given; Cloudflare and AWS reported no widespread issues, suggesting the fault may lie with an internal crash, DNS misconfiguration, or overly aggressive anti-bot systems. The service appeared to recover by the end of the day, though some users still faced problems as the outageApparently persisted regionally.

Cloudflare's IPv6 BGP misconfiguration triggers a 25-minute global route leak
technology7 months ago

Cloudflare's IPv6 BGP misconfiguration triggers a 25-minute global route leak

Cloudflare disclosed a 25-minute IPv6 BGP route leak caused by a policy misconfiguration that caused internal iBGP IPv6 routes to be redistributed to external peers in Miami, leading to congestion, packet loss, and roughly 12 Gbps of dropped traffic; the issue was halted by reverting the change and pausing automation, with Cloudflare proposing safeguards such as stricter export controls, CI/CD checks, early detection, RFC 9234 validation, and broader RPKI ASPA adoption to prevent recurrence.