Tag

Cloudflare

All articles tagged with #cloudflare

Cloudflare to Launch Quantum-Safe Web Certificates in 2027
technology9 days ago

Cloudflare to Launch Quantum-Safe Web Certificates in 2027

Cloudflare announced plans to become a public certificate authority (CA) issuing quantum-resistant Merkle Tree Certificates (MTCs) starting in Q1 2027. This move addresses the threat of quantum computers breaking current encryption by using a hybrid system that maintains compatibility with legacy devices. The company is acquiring a trusted root from GlobalSign to ensure broad device support and aims to make the transition transparent and free for all users.

Cloudflare patches cross-tenant flaw that exposed residual disk data to paying customers
cybersecurity11 days ago

Cloudflare patches cross-tenant flaw that exposed residual disk data to paying customers

Cloudflare has patched a vulnerability in its Containers and Sandboxes services that allowed customers with a Workers Paid plan to read residual data from other customers' containers on the same physical host. The flaw, reported by security researcher Oren Yomtov of Accomplish on September 4, 2026, stemmed from a shared storage pool that skipped zeroing reused 64 KiB blocks. While the researchers found leftover data on 18 of 24 container placements, Cloudflare confirmed no actual customer data was exposed and that no malicious exploitation occurred. The company completed mitigation by September 19, 2026, requiring no action from users.

Cloudflare frees 100TB of RAM by reengineering its DNS cache in Rust
technology1 month ago

Cloudflare frees 100TB of RAM by reengineering its DNS cache in Rust

Cloudflare cut the 1.1.1.1 DNS cache’s memory footprint by more than half—about 100TB across its network—without new hardware by reworking Big Pineapple in Rust. Changes shrank each cache entry from 953 to 420 bytes, replaced growable data structures with fixed-size slices, and stored responses as a single buffer with two-byte offsets and length-prefixed wire-format data. Throughput rose from 625k to 893k inserts/sec, lookups halved latency (828ns to 670ns), and p99 memory per instance fell from 9.3GB to 5.3GB. With over 250 billion DNS entries cached, the savings free RAM for larger caches, boosting hit rates and reducing traffic to authoritative servers; the effort follows a prior Rust rewrite of Cloudflare’s FL2 layer.

Spectre cross-tenant leak in Cloudflare Workers at 12 bps prompts stronger isolation
security1 month ago

Spectre cross-tenant leak in Cloudflare Workers at 12 bps prompts stronger isolation

Researchers demonstrated a remote Spectre side-channel attack leaking a JWT from a co-located Cloudflare Worker at up to 12 bits/sec (99.16% accuracy) with attacker and victim in separate V8 isolates within the same process; Cloudflare says no customer data was accessed and has mitigated the risk in production by upgrading Dynamic Process Isolation (DyPrIs), adopting the V8 Sandbox, and deploying MPK-based in-process isolation, with no exploitation observed in three years. The study notes DyPrIs detection limitations and urges in-execution signals resilient to IO activity. Tests used Linux AMD EPYC CPUs; leakage scales with load. As of Sept 2025, Cloudflare’s hardening includes stronger DyPrIs, tighter V8 pointer limits, and rotating MPK-backed memory layouts to reduce cross-isolate leakage.

Cloudflare opens vibe-coding platform for non-coders with secure AI sandboxes
technology2 months ago

Cloudflare opens vibe-coding platform for non-coders with secure AI sandboxes

Cloudflare has open-sourced Cloudflare OS, its internal vibe-coding workspace that lets non-developers describe tasks in natural language and have AI agents generate apps. It uses fast, memory-efficient V8 isolates for per-task sandboxes, enforces strict permissions and disabled outbound networking, and runs client code in a browser sandbox. The platform supports multiple AI models, deterministic workflows to limit resource use, and admin controls for budgets. Cloudflare also published an Engineering Codex to uphold standards. Thousands of employees use it daily for docs, automation, and data visuals. Open sourcing is available on GitHub, but backend deployment requires a Workers Paid plan, and security researchers caution that sandboxing is not foolproof.

Cloudflare flags Google's AI-driven reshaping of the web and its hit to human traffic
technology2 months ago

Cloudflare flags Google's AI-driven reshaping of the web and its hit to human traffic

Cloudflare’s new report claims more than 50% of internet traffic is now non-human, a trend tied to Google’s Gemini AI integration that has coincided with a sharp drop in human site visits. Google is said to account for about 88% of referral traffic, and 52% of crawler requests are for AI training as of June 2026. Publishers warn of “Google Zero,” where opting out of AI Overview could deindex sites, a move the UK regulator is pushing by allowing opt-out controls. The shift is widening beyond media to retail, software, IT and finance, raising questions about how Google will sustain AI-driven results without publisher revenue.

Bots Now Account for Majority of Web Traffic, Cloudflare Data Reveal
technology4 months ago

Bots Now Account for Majority of Web Traffic, Cloudflare Data Reveal

Cloudflare data show AI agents and bots now generate 57.4% of web requests, surpassing human traffic at 42.6%, signaling a rapid surge in autonomous browsing. The rise—driven by AI agents using tools with little human input—could reshape the internet’s business model since bots don’t click ads, prompting new monetization ideas and raising questions about how content is discovered and consumed in the web’s evolving landscape.

Kash Patel's merch site hacked to push malware through a fake Cloudflare check
technology4 months ago

Kash Patel's merch site hacked to push malware through a fake Cloudflare check

A Based Apparel storefront tied to Kash Patel was compromised: visitors encountered a modified Cloudflare verification page and were urged to copy a code into their terminal, which installed a Mac-specific infostealer malware designed to harvest credentials, browser data, crypto extension info, and keychain items, with a suspected payment skimmer also present. The attack leveraged a malicious WordPress plugin, while initial access remains unclear. Patel has distanced himself from the store, and there’s no confirmed FBI involvement at this time.

technology4 months ago

US Court Orders Global Action Against Anna's Archive in $19.5M Judgment

A New York federal judge issued a $19.5 million default judgment and a permanent injunction targeting Anna's Archive, a shadow library tied to Sci-Hub and LibGen, naming more than 20 intermediaries to shut down its domains. Operators remain anonymous, complicating enforcement, and while U.S. courts can bind some entities (like Cloudflare), many registrars and country-level registries may resist; the case underscores the conflict between piracy, AI training data needs, and global enforcement.

Cloudflare CEO: Brand name isn’t great as 20% of staff are cut
technology5 months ago

Cloudflare CEO: Brand name isn’t great as 20% of staff are cut

Cloudflare CEO Matthew Prince said the company’s name is hard to pronounce and not ideal, joking that an even worse idea might have been “Project Web Wall.” Days later, Cloudflare announced cuts of about 1,100 employees (roughly 20%), attributing the move to a 600% surge in AI use over three months and signaling a restructuring to move faster and deliver more value as AI workloads grow.

Quantum Security Goes From Talk to Budgets as IonQ and Cloudflare Lead Market Push
technology5 months ago

Quantum Security Goes From Talk to Budgets as IonQ and Cloudflare Lead Market Push

Quantum security is moving from risk talk to budgets, with Cloudflare adding post-quantum protections to its SASE network; IonQ posted strong Q1 2026 revenue growth and raised its 2026 guidance despite an expected EBITDA loss, while defense-linked work expands. Private firm Quantum Motion raised $160 million to pursue chip-scale silicon qubits, and software startups Haiqu and Horizon Quantum push easier-to-use quantum tools. The overall picture shows a budding quantum economy oriented toward defense applications, chip-scale scaling, and real-world use.

Cloudflare trims 20% of workforce as AI-first strategy takes shape
business5 months ago

Cloudflare trims 20% of workforce as AI-first strategy takes shape

Cloudflare beat Q1 earnings estimates with revenue of $640 million and 25 cents per share, but shares fell after-hours as it announced a plan to cut more than 1,100 employees (about 20%) to pursue an agentic AI‑first operating model. The company also projected Q2 revenue of $664–665 million (roughly in line with expectations) and full-year 2026 revenue of $2.805–$2.813 billion with EPS of $1.19–$1.20, while Q1 posted a net loss of $22.93 million.

Cloudflare Cuts 1,100 Jobs to Pivot Toward an Agentic AI Era
business5 months ago

Cloudflare Cuts 1,100 Jobs to Pivot Toward an Agentic AI Era

Cloudflare announced a global layoff of about 1,100 employees as it restructures for an “agentic AI era,” following a Q1 earnings beat that sent shares down more than 14% after hours. The company says AI usage has surged over 600% in three months and that the cuts are a redesign of how the company operates to move faster and deliver more value, not a cost-cutting measure. Departing employees will receive generous severance, extended healthcare where applicable, and equity vesting through August, with targeted one-time actions to maintain stability for the remaining staff.

Cloudflare bets on instant, disposable AI runtimes with Dynamic Workers
technology6 months ago

Cloudflare bets on instant, disposable AI runtimes with Dynamic Workers

Cloudflare launched an open beta for Dynamic Workers, an ultra-lightweight isolate-based sandbox that starts in milliseconds and uses only a few megabytes of memory, enabling AI agents to generate and execute short TypeScript code snippets on demand. The approach aims to outperform containers for web-scale, short-lived AI tasks, backed by security measures, new tooling, and a beta-friendly pricing model; it also highlights a broader shift toward disposable execution environments for AI workloads.