Unmasking the top exploited vulnerabilities of 2022
August 04, 2023
The Cybersecurity and Infrastructure Security Agency (CISA) just released a report highlighting the most commonly exploited vulnerabilities of 2022. ...
How Cloudflare is staying ahead of the AMD vulnerability known as “Zenbleed”
July 25, 2023
The Google Information Security Team revealed a new flaw in AMD's Zen 2 processors in a blog post today. The 'Zenbleed' flaw affects the entire Zen 2 product stack, from AMD's EPYC data center processors to the Ryzen 3000 CPUs, and can be exploited to steal sensitive data processed in the CPU, ...
Bring your own CA for client certificate validation with API Shield
July 11, 2023
API shield customers can now upload their own CA to use for client certificate validation. This ensures that only authorized clients and devices can make requests to your API endpoint or application. ...
Cloudflare Area 1 earns SOC 2 report
June 08, 2023
Many customers want assurance that the sensitive information they send to us can be kept safe. One of the best ways to provide this assurance is a SOC 2 Type II report...
Examining HTTP/3 usage one year on
June 06, 2023
With the HTTP/3 RFC celebrating its 1st birthday, we examined HTTP version usage trends between May 2022 - May 2023. We found that HTTP/3 usage by browsers continued to grow, but that search engine and social media bots continued to effectively ignore the latest version of the web’s core protocol...
MORE POSTS
May 18, 2023
How to secure Generative AI applications
Earn best practices for securing generative AI applications based on Cloudflare's experience protecting some of the largest AI applications in the world...
- By
April 25, 2023
SLP: a new DDoS amplification vector in the wild
Researchers have recently published the discovery of a new DDoS reflection/amplification attack vector leveraging the SLP protocol. Cloudflare expects the prevalence of SLP-based DDoS attacks to rise in the coming weeks...
- By
April 21, 2023
Why I joined Cloudflare as Chief Security Officer
As someone who is passionate about technology, security, and its potential to improve our lives, I knew that I wanted to work for a company that shared those values. ...
- By
April 20, 2023
Secure by default: recommendations from the CISA’s newest guide, and how Cloudflare follows these principles to keep you secure
In this post we’ll review some of the authors’ recommendations, discuss how Cloudflare applies these principles to the products that we build, and provide some suggestions on what other organizations can do to support similar initiatives internally...
- By
March 30, 2023
Helping protect personal information in the cloud, all across the world
Helping protect personal information in the cloud, all across the world...
- By
March 20, 2023
Everything you might have missed during Security Week 2023
Learn how Cloudflare made it easier to shift from protecting applications, to protecting employees, and making sure they are protected everywhere during Security Week 2023...
- By
March 18, 2023
Wildcard and multi-domain support in Cloudflare Access
We are thrilled to announce the full support of wildcard and multi-hostname application definitions in Cloudflare Access...
- By
March 18, 2023
Account Security Analytics and Events: better visibility over all domains
Revealing Account Security Analytics and Events, new eyes on your account in Cloudflare dashboard to give holistic visibility. No matter how many zones you manage, they are all there!...
- By
March 17, 2023
Stop brand impersonation with Cloudflare DMARC Management
Brand impersonation continues to be a big problem globally. Setting SPF, DKIM and DMARC policies is a great way to reduce that risk, and protect your domains from being used in spoofing emails. But maintaining a correct SPF configuration can be very costly and time consuming...
- By
March 17, 2023
How we built DMARC Management using Cloudflare Workers
At Cloudflare, we use the Workers platform and our product stack to build new services. Read how we made the new DMARC Management solution entirely on top of our APIs. ...
- By
March 16, 2023
IBM Cloud works with Cloudflare to help clients modernize and deliver secured cloud infrastructure
IBM and Cloudflare continue to partner together to help customers meet the unique security, performance, resiliency and compliance needs of their customers through the addition of exciting new product and service offerings....
- By
March 15, 2023
Announcing Cloudflare Fraud Detection
Cloudflare Fraud Detection uses machine learning models to better protect businesses from fake account signups, account takeover attacks, and carding attacks to ensure businesses can operate online safely...
- By
March 15, 2023
Announcing WAF Attack Score Lite and Security Analytics for business customers
We are making the machine learning empowered WAF and Security analytics view available to our Business plan customers, to help detect and stop attacks before they are known...
- By
March 14, 2023
How sophisticated scammers and phishers are preying on customers of Silicon Valley Bank
In order to breach trust and trick unsuspecting victims, threat actors overwhelmingly use topical events as lures. The news about what happened at Silicon Valley Bank is the latest event to watch out for and stay vigilant against opportunistic phishing campaigns using SVB as the ...
- By