Cloudflare 2024 Year in Review
2024-12-09
The 2024 Cloudflare Radar Year in Review is our fifth annual review of Internet trends and patterns at both a global and country/region level....
Continue reading »
What’s new in Cloudflare: Account Owned Tokens and Zaraz Automated Actions
2024-11-14
Cloudflare customers can now create Account Owned Tokens , allowing more flexibility around access control for their Cloudflare services. Additionally, Zaraz Automation Actions streamlines event tracking and third-party tool integration. ...
Cloudflare acquires Kivera to add simple, preventive cloud security to Cloudflare One
2024-10-08
Data ProtectionAcquisitionsEmail SecurityCloud Email SecuritySASEZero TrustSecurityProduct NewsCloudflare One
The acquisition and integration of Kivera broadens the scope of Cloudflare’s SASE platform beyond just apps, incorporating increased cloud security through proactive configuration management of cloud services. ...
Enhance your website's security with Cloudflare’s free security.txt generator
2024-10-06
Introducing Cloudflare’s free security.txt generator, empowering all users to easily create and manage their security.txt files. This feature enhances vulnerability disclosure processes, aligns with industry standards, and is integrated into the dashboard for seamless access. Strengthen your website's security today!...
How Cloudflare auto-mitigated world record 3.8 Tbps DDoS attack
2024-10-02
Over the past couple of weeks, Cloudflare's DDoS protection systems have automatically and successfully mitigated multiple hyper-volumetric L3/4 DDoS attacks exceeding 3 billion packets per second (Bpps). Our systems also automatically mitigated multiple attacks exceeding 3 terabits per second (Tbps), with the largest ones exceeding 3.65 Tbps. The scale of these attacks is unprecedented....
MORE POSTS
September 30, 2024 1:00 PM
Wrapping up another Birthday Week celebration
Recapping all the big announcements made during 2024’s Birthday Week....
- By
September 27, 2024 1:00 PM
Advancing cybersecurity: Cloudflare implements a new bug bounty VIP program as part of CISA Pledge commitment
Cloudflare strengthens its commitment to cybersecurity by joining CISA's "Secure by Design" pledge. In line with this commitment, we're enhancing our vulnerability disclosure policy by launching a VIP bug bounty program, giving top researchers early access to our products. Keep a...
- By
September 27, 2024 1:00 PM
AI Everywhere with the WAF Rule Builder Assistant, Cloudflare Radar AI Insights, and updated AI bot protection
This year for Cloudflare’s birthday, we’ve extended our AI Assistant capabilities to help you build new WAF rules, added new AI bot & crawler traffic insights to Radar, and given customers new AI bot ...
- By
September 24, 2024 1:00 PM
Cloudflare helps verify the security of end-to-end encrypted messages by auditing key transparency for WhatsApp
Cloudflare is now verifying WhatsApp’s Key Transparency audit proofs to ensure the security of end-to-end encrypted messaging conversations without having to manually check QR codes. We are publishing the results of the proof verification to https://dash.key-transparency.cloudfla...
- By
September 24, 2024 1:00 PM
A safer Internet with Cloudflare: free threat intelligence, analytics, and new threat detections
Today, we are taking some big steps forward in our mission to help build a better Internet. Cloudflare is giving everyone free access to 10+ different website and network security products and features....
- By
September 24, 2024 1:00 PM
Cloudflare partners with Internet Service Providers and network equipment providers to deliver a safer browsing experience to millions of homes
Cloudflare is extending the use of our public DNS resolver through partnering with ISPs and network providers to deliver a safer browsing experience directly to families. Join us in protecting every Internet user from unsafe content with the click of a button, powered by 1.1.1.1 ...
- By
September 23, 2024 1:00 PM
Introducing Ephemeral IDs: a new tool for fraud detection
As the Internet evolves, Turnstile does too. Introducing Ephemeral IDs — a new dimension in detecting fraudulent activity, bot or human, that links behavior to a specific client instead of an IP address. This makes Turnstile better for everyone, everywhere. ...
- By
July 29, 2024 1:00 PM
Avoiding downtime: modern alternatives to outdated certificate pinning practices
The number of outages caused by certificate pinning is increasing. We’ll explore why certificate pinning hasn’t kept up with modern standards and recommend alternatives to improve security while reducing management overhead...
- By
June 24, 2024 5:06 PM
Helping keep customers safe with leaked password notification
To help protect against account compromise via credential stuffing attacks, Cloudflare will notify dashboard users when we detect that a password was found in an external data breach...
- By
May 30, 2024 12:12 PM
Cloudflare acquires BastionZero to extend Zero Trust access to IT infrastructure
We’re excited to announce that BastionZero, a Zero Trust infrastructure access platform, has joined Cloudflare. This acquisition extends our Zero Trust Network Access (ZTNA) flows with native access management for infrastructure like servers, Kubernetes clusters, and databases...
- By
April 12, 2024 1:00 PM
How we ensure Cloudflare customers aren't affected by Let's Encrypt's certificate chain change
Let’s Encrypt’s cross-signed chain will be expiring in September. This will affect legacy devices with outdated trust stores (Android versions 7.1.1 or older). To prevent this change from impacting customers, Cloudflare will shift Let’s Encrypt certificates upon renewal to use a ...
- By
April 02, 2024 5:00 PM
Continuing our work with CISA and the Joint Cyber Defense Collaborative to keep vulnerable communities secure online
Along with CISA and the Joint Cyber Defense Collaborative, we are spotlighting threats to civil society, best practices for online protection, and new resources specifically for these vulnerable communities. Find out more about our latest initiatives....
- By
March 26, 2024 1:00 PM
From .com to .beauty: The evolving threat landscape of unwanted email
In this 2023-early 2024 email analysis, we examine how certain generic Top-Level Domains (TLDs) are primarily used for spam and phishing, and their evolution over a year. There are many trends in email threats to examine...
- By
March 14, 2024 2:00 PM
Upcoming Let’s Encrypt certificate chain change and impact for Cloudflare customers
Let’s Encrypt’s cross-signed chain will be expiring in September. To prepare for the change, after May 15th, 2024, Cloudflare will start issuing certs from Let’s Encrypt’s ISRG X1 chain. This change will impact legacy devices with outdated trust stores (Android versions 7.1.1 or ...
- By
March 08, 2024 2:05 PM
Log Explorer: monitor security events without third-party storage
With the combined power of Security Analytics + Log Explorer, security teams can analyze, investigate, and monitor for security attacks natively within Cloudflare, reducing time to resolution and overall cost of ownership for customers by eliminating the need to forward logs to t...
- By