10/26/2023

As a follow-up to the most recent Okta breach, we are making a HAR file sanitizer available to everyone, not just Cloudflare customers, at no cost....

• 
  Kenny Johnson

10/20/2023

On Wednesday, October 18, 2023, we discovered attacks on our system that we were able to trace back to Okta. We have verified that no Cloudflare customer information or systems were impacted by this event because of our rapid response. ...

• 
  Sourov Zaman
• 
  Lucas Ferreira
• 
  Kimberly Hall
• 
  Grant Bourzikas

10/10/2023

This post dives into the details of the HTTP/2 protocol, the feature that attackers exploited to generate the massive Rapid Reset attacks, and the mitigation strategies we took to ensure all our customers are protected...

• 
  Lucas Pardue
• 
  Julien Desgats

10/06/2023

Tap devices were historically used for VPN clients. Using them for virtual machines is essentially reversing their original purpose - from traffic sinks to traffic sources. In the article I explore the intricacies of tap devices, covering topics like offloads, segmentation, and multi-queue....

• 
  Marek Majkowski

10/05/2023

Recently, Google announced a security issue in Google Chrome, titled "Heap buffer overflow in WebP in Google Chrome." Initially, it seemed like just another bug in the popular web browser. However, what we discovered was far more significant and had implications that extended well beyond Chrome...

• 
  Willi Geiger
• 
  Kornel Lesiński

10/04/2023

On 4 October 2023, Cloudflare experienced DNS resolution problems. Some users may have received SERVFAIL DNS responses to valid queries. In this blog, we’re going to talk about what the failure was, why it occurred, and what we’re doing to make sure this doesn’t happen again...

• 
  Ólafur Guðmundsson

09/29/2023

Cloudflare announces Post-Quantum Cryptography as a Generally Available system...

• 
  Wesley Evans
• 
  Bas Westerbaan
• 
  Christopher Patton
• 
  Peter Wu
• 
  Vânia Gonçalves

09/29/2023

We're excited to announce a contribution to improving privacy for everyone on the Internet. Encrypted Client Hello, a new standard that prevents networks from snooping on which websites a user is visiting, is now available on all Cloudflare plans. ...

• 
  Achiel van der Mandele
• 
  Alessandro Ghedini
• 
  Christopher Wood
• 
  Rushil Mehra

09/26/2023

In this blog, we’ll explain a little bit more about the technology involved, but most importantly, give you a step-by-step walkthrough of how Cloudflare can help you eliminate the need to pay Amazon for something that they shouldn’t be charging you for in the first place...

• 
  Anie Jacob

09/26/2023

Cloudflare Radar now displays country and ASN traffic anomalies in the Outage Center as they are detected, as well as publishing anomaly information via API. We are also launching Radar notifications, enabling users to subscribe to notifications about traffic anomalies...

• 
  David Belson

09/26/2023

Cloudflare Radar will be publishing anomalous traffic events for countries and Autonomous Systems (ASes). These events are the same ones referenced above that have been triggering our internal workflow to validate and confirm disruptions...

• 
  Carlos Azevedo

09/25/2023

Meet the smartest member of the Cloudflare network team that helps keep you online no matter what happens to the Internet underneath us...

• 
  David Tuber
• 
  Luke Orden
• 
  Gonçalo Grilo

01/16/2023

A race condition in the virtual ethernet driver of the Linux kernel led to occasional packet content corruptions, which resulted in unwanted packet drops by one of our DDoS mitigation systems. This blogpost describes the thought process and technique we used to debug this complex issue....

• 
  Shawn Bohrer
• 
  Bastien Dhiver

08/16/2023

The 2023 Phishing Threats Report analyzes millions of malicious emails, brand impersonation examples, identity deception, and other key attack trends based on email security data from a 12-month period...

• 
  Elaine Dzuba
• 
  Juliette Cash

08/14/2023

Debugging Rust and Wasm with Cloudflare Workers involves a lot of the good old time-consuming and nerve-wracking printf'ing strategy. What if there’s a better way? This blog is about enabling and using Wasm core dumps and how you can easily debug Rust in Cloudflare Workers...

• 
  Sven Sauleau
• 
  Celso Martinho

08/11/2023

Today, we are thrilled to share that customers can now debug their Queues directly from the Cloudflare dashboard. This new feature allows customers to send, list, and acknowledge messages in their Queues from the Cloudflare dashboard, enabling a more user-friendly way to interact with their Queues...

• 
  Emilie Ma

08/11/2023

Easily manage storage with scheduled deletion for Cloudflare Stream, available for live recordings and on-demand video...

• 
  Austin Christiansen
• 
  Taylor Smith

08/09/2023

Starting today, customers that use Cloudflare’s Advanced Certificate Manager can configure TLS settings on individual hostnames within a domain...

• 
  Dina Kozlov

08/08/2023

Announced as part of the Back to School Safely: K-12 Cybersecurity Summit at the White House on August 7, Project Cybersafe Schools will support eligible K-12 public school districts with a package of Zero Trust cybersecurity solutions — for free, and with no time limit...

• 
  Zaid Zaid

08/04/2023

The Cybersecurity and Infrastructure Security Agency (CISA) just released a report highlighting the most commonly exploited vulnerabilities of 2022. ...

• 
  Himanshu Anand
• 
  Sabina Zejnilovic
• 
  Daniele Molteni

08/03/2023

Today, we are very excited to announce the general availability of Cloudflare Zero Trust Integration with Datadog...

• 
  Mythili Prabhu
• 
  Nimisha Saxena (Guest author)

08/02/2023

A deep dive into the recent incidents relating to Workers KV, and how we’re going to fix them...

• 
  Matt Silverlock
• 
  Charles Burnett
• 
  Rob Sutter
• 
  Kris Evans

08/02/2023

Announcing the new Upstash database integrations for Workers. Now it is easier to use Upstash Redis, Kafka and QStash inside your Worker ...

• 
  Joaquin Gimenez
• 
  Shaun Persad

07/28/2023

BGP origin hijacks allow attackers to intercept, monitor, redirect, or drop traffic destined for the victim's networks. We explain how Cloudflare built its BGP hijack detection system, from its design and implementation to its integration on Cloudflare Radar...

• 
  Mingwei Zhang
• 
  Celso Martinho

07/27/2023

In this post, we review selected Internet disruptions observed by Cloudflare during the second quarter of 2023, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography...

• 
  David Belson

07/27/2023

The Internet is a vast, sprawling collection of networks that connect to each other. The new Cloudflare Radar Routing page monitors routing changes and anomalies and presents statistics about how we see traffic getting routed on the Internet...

• 
  Mingwei Zhang

07/25/2023

The Google Information Security Team revealed a new flaw in AMD's Zen 2 processors in a blog post today. The 'Zenbleed' flaw affects the entire Zen 2 product stack, from AMD's EPYC data center processors to the Ryzen 3000 CPUs, and can be exploited to steal sensitive data processed in the CPU, ...

• 
  Derek Chamorro
• 
  Martin Schwarzl
• 
  Michal Melewski

07/24/2023

Today, we are improving our Domain Rankings page and adding Trending Domains lists...

• 
  Sabina Zejnilovic

07/20/2023

Our unique partnership offering will enable Jamf customers to easily implement network Data Loss Prevention (DLP), Remote Browser Isolation (RBI), and SaaS Tenancy Controls from Cloudflare to prevent sensitive data loss from their Apple devices...

• 
  Mythili Prabhu
• 
  Matt Vlasach (Guest author)

07/19/2023

Cloudflare Zaraz has transitioned out of beta and is now generally available to all customers. It is included under the free, paid, and enterprise plans of the Cloudflare Developer Platform. Visit our docs to learn more on our different plans...

• 
  Yair Dovrat

07/18/2023

Q2 2023 saw an unprecedented escalation in DDoS attack sophistication. Pro-Russian hacktivists REvil, Killnet and Anonymous Sudan joined forces to attack Western sites. Mitel vulnerability exploits surged by a whopping 532%, and attacks on crypto rocketed up by 600%....

• 
  Omer Yoachimik
• 
  Jorge Pacheco

07/14/2023

Quickly compare changes between two Zone Versions with Version Comparisons available now...

• 
  Garrett Galow

07/13/2023

Cloudflare One now supports exact data match for Data Loss Prevention...

• 
  Noelle Kagan

07/12/2023

We run a wide fleet of machines on the Cloudflare global network. This post describes how we minimize customer disruption during large-scale machine reboots using math!...

• 
  Opeyemi Onikute
• 
  Nicholas Rhodes

07/11/2023

Ping developers clearly put some thought into that. I wondered how far they went. Did they handle clock changes in both directions? Are the bad measurements excluded from the final statistics? How do they test the software?...

• 
  Marek Majkowski

07/11/2023

API shield customers can now upload their own CA to use for client certificate validation. This ensures that only authorized clients and devices can make requests to your API endpoint or application. ...

• 
  Dina Kozlov

07/11/2023

On July 9, 2023, users in the Asia Pacific region experienced connection errors due to origin DNS resolution failures to .com and .net TLD nameservers...

• 
  Christian Elmerot
• 
  Alex Fattouche
• 
  Hannes Gerhart

07/10/2023

Customers using Cloudflare Images or Image Resizing products are protected against the aCropalypse vulnerability. ...

• 
  Nicholas Skehin

06/27/2023

Discover the seamless integration of Cloudflare Zaraz and JSONata, enabling precise data customization for enhanced workflows. Effortlessly optimize data transmission to providers and APIs with ease. Unlock the power of fine-tuned data today...

• 
  Yo'av Moshe

06/26/2023

In this post, we'll provide some insight into the process of investigating networking issues and how to begin debugging issues in the kernel using pwru and kprobe tracepoints...

• 
  Terin Stock

06/26/2023

Recapping all the announcements made during Speed Week 2023...

• 
  Sam Marsh

06/23/2023

Today, we're enhancing our support for Brotli compression, enabling end-to-end Brotli compression for web content. Compression plays a vital role in reducing bytes during transfers, ensuring quicker downloads and seamless browsing...

• 
  Matt Bullock

06/23/2023

More than 162 million fans tuned in to the 2023 Eurovision Song Contest, the first year that non-participating countries could also vote. Cloudflare helped scale and protect the voting application based.io, built by once.net using our rapid DNS infrastructure, CDN, Cloudflare Pages and Turnstile...

• 
  Dirk-Jan van Helmond
• 
  Michiel Appelman
• 
  Jim de Beer (Guest Author)

06/23/2023

Pages is now the fastest way to serve your sites across Netlify, Vercel and many others and we’re so proud...

• 
  Sid Chatterjee
• 
  Daniel Walsh
• 
  Nevi Shah

06/23/2023

Today we’re announcing Ricochet for API Gateway, the easiest way for Cloudflare customers to achieve faster API responses through automatic, intelligent API response caching...

• 
  John Cosgrove
• 
  Maxime Guerreiro

06/23/2023

The new Internet Quality page on Cloudflare Radar provides both country and network (autonomous system) level insight into Internet connection performance (bandwidth) and quality (latency, jitter) over time based on benchmark test data as well as speed.cloudflare.com test results...

• 
  David Belson
• 
  Carlos Rodrigues

06/23/2023

Transferring your domains to a new registrar isn’t something you do every day, and getting any step of the process wrong could mean downtime and disruption. We’ve built a domain transfer checklist to help you quickly and safely transfer your domains to Cloudflare...

• 
  Ricky Robinett

06/22/2023

DEX allows administrators to monitor their WARP Deployment and create predefined application tests. Features include live team & device analytics, server and traceroute tests, Synthetic Application Monitoring, and Fleet Status for real-time insights on WARP deployment...

• 
  Shruti Pokalori Nejad

06/22/2023

In this blog, we will explain where the opportunities exist to improve website performance, how to check if a specific site can improve performance, and provide a small JavaScript snippet which can be used with Cloudflare Workers to do this optimization for you...

• 
  Alex Krivit
• 
  Patrick Meenan (Guest Author)

06/22/2023

At its core, the Descaler Program helps derisk change. It’s designed to be simple and straightforward, with resources to ensure a smooth transition and supporting technology to ensure the migration achieves your organization's goals...

• 
  Corey Mahan
• 
  Denis Kieft

06/22/2023

In this post we are going to share the most recent updates, and tell you about our tools and processes that we use to monitor and improve our network performance....

• 
  Onur Karaagaoglu

06/22/2023

The Cloudflare dashboard is a single page application that houses all of the UI for our wide portfolio of existing products, as well as the new features we're releasing every day...

• 
  Richard Nguyen
• 
  Zac Arellano

06/22/2023

In this blog, we’re going to talk about why end-to-end performance is the most important thing to look at, why other methods like proxy latency and decrypted latency SLAs are insufficient for performance evaluations, and how you can measure your Zero Trust performance like we do...

• 
  David Tuber