Zero Trust WARP: tunneling with a MASQUE2024-03-06Security WeekProduct NewsCloudflare AccessBetter InternetWARPHTTP3TLS 1.3PrivacyQUIC1.1.1.1This blog discusses the introduction of MASQUE to Zero Trust WARP and how Cloudflare One customers will benefit from this modern protocol...Dan Hall
Secure your unprotected assets with Security Center: quick view for CISOs2024-03-05Security WeekSecurity CenterSecuritySecurity PostureInsightsToday we are excited to introduce a new set of capabilities within the Security Center to directly address a common challenge: ensuring comprehensive deployment across your infrastructure. Gain precise insights into where and how to optimize your security posture...Alexandra Moraru
Securing Cloudflare with Cloudflare: a Zero Trust journey2024-03-05Security WeekAPI GatewayZero TrustPrivacyA deep dive into how we have deployed Zero Trust at Cloudflare while maintaining user privacy...Derek PittsAnkur AggarwalEmily Hancock
Simpler migration from Netskope and Zscaler to Cloudflare: introducing Deskope and a Descaler partner update2024-03-05Security WeekPartnersDescalerDeskopeToday, Cloudflare is excited to expand the Descaler program to Authorized Service Delivery Partners (ASDPs) who will now have exclusive access to the Descaler toolkit. Cloudflare is also launching Deskope, a new set of tooling to also help migrate existing Netskope customers to Cloudflare One...Corey MahanAnil ErduranDenis Kieft
Protecting APIs with JWT Validation2024-03-05Security WeekAPI GatewayAPI ShieldAPI SecuritySecurityCloudflare customers can now protect their APIs from broken authentication attacks by validating incoming JSON Web Tokens (JWTs) with API Gateway...John Cosgrove
Announcing two highly requested DLP enhancements: Optical Character Recognition (OCR) and Source Code Detections2024-03-05Security WeekDLPCloudflare Zero TrustData ProtectionSASECloudflare One now supports Optical Character Recognition and detects source code as part of its Data Loss Prevention (DLP) service...Noelle Kagan
The state of the post-quantum Internet2024-03-05Security WeekPost-QuantumResearchToday, nearly two percent of all TLS 1.3 connections established with Cloudflare are secured with post-quantum cryptography. What once was the topic of futuristic tech demos will soon be the new security baseline for the Internet...Bas Westerbaan
Cloudflare announces Firewall for AI2024-03-04Security WeekAISecurityDeveloper PlatformWAFLLMApplication ServicesCloudflare is one of the first providers to safeguard LLM models and users in the era of AI...Daniele Molteni
Changing the industry with CISA’s Secure by Design principles2024-03-04Security WeekLegalPolicyAPI SecurityCISAReliabilitySecurity considerations should be an integral part of software’s design, not an afterthought. Explore how Cloudflare adheres to CISA’s Secure by Design principles to shift the industry...Kristina GalicovaEdo Royker
Dispelling the Generative AI fear: how Cloudflare secures inboxes against AI-enhanced phishing2024-03-04Security WeekAIAPI SecurityDeveloper PlatformGenerative AI is being used by malicious actors to make phishing attacks much more convincing. Learn how Cloudflare’s email security systems are able to see past the deception using advanced machine learning models...Ayush KumarBryan Allen
Cloudflare launches AI Assistant for Security Analytics2024-03-04Security WeekSecurityWAFWorkers AIProduct NewsAnalyticsAIDeveloper PlatformApplication ServicesIntroducing AI Assistant for Security Analytics. Now it is easier than ever to get powerful insights about your web security. Use the new integrated natural language query interface to explore Security Analytics...Jen SellsHarley Turan
Defensive AI: Cloudflare’s framework for defending against next-gen threats2024-03-04Security WeekAIMachine LearningPhishingCloud Email SecurityAPI SecuritySASEFrom identifying phishing attempts to protect applications and APIs, Cloudflare uses AI to improve the effectiveness of its security solutions to fight against new and more sophisticated attacks...Daniele MolteniJohn CosgroveAyush KumarAnkur Aggarwal
Navigating the maze of Magecart: a cautionary tale of a Magecart impacted website2024-03-04Security WeekMagecartMachine LearningPage ShieldDeveloper PlatformE-commerce websites were targeted by a sophisticated Magecart attack, involving a hidden JavaScript code designed to secretly steal Personally Identifiable Information (PII) and credit card details from users...Himanshu AnandJuan Miguel Cejuela
Introducing behavior-based user risk scoring in Cloudflare One2024-03-04Security WeekCloudflare Zero TrustCloudflare OneSASECloudflare AccessConnectivity CloudCloudflare One is introducing user risk scoring, a new set of capabilities to detect risk based on user behavior, so that you can improve security posture across your organization...Noelle Kagan
Welcome to Security Week 20242024-03-03Security WeekCloudflare’s Chief Security Officer introduces 2024 Security Week by sharing insights into the past year of threats, security incidents and key priorities and concerns for global CISOs...Grant Bourzikas
polyfill.io now available on cdnjs: reduce your supply chain risk2024-02-29CDNJSJavaScriptSupply Chain AttacksPolyfill.io is now available on cdnjs to reduce the risk of supply chain attacks. Replace your polyfill.io links today for a seamless experience...Sven SauleauMichael Tremante
Zaraz launches new pricing2024-02-29ZarazPrivacyManaged ComponentsProduct NewsThe new Cloudflare Zaraz pricing makes Zaraz the most affordable way to load third-party tools on your website, starting with 1 million free events per month and all features unlocked...Yo'av Moshe
Remediating new DNSSEC resource exhaustion vulnerabilities2024-02-29DNSSECDNSResolver1.1.1.1VulnerabilitiesKeyTrapNSEC3CVE-2023-50387Cloudflare recently fixed two critical DNSSEC vulnerabilities: CVE-2023-50387 and CVE-2023-50868. Both of these vulnerabilities can exhaust computational resources of validating DNS resolvers. These vulnerabilities do not affect our Authoritative DNS or DNS firewall products...Vicky ShresthaAnbang Wen
Unlocking new use cases with 17 new models in Workers AI, including new LLMs, image generation models, and more2024-02-28Workers AIProduct NewsOn February 6th, 2024 we announced eight new models that we added to our catalog for text generation, classification, and code generation use cases. Today, we’re back with seventeen (17!) more models, focused on enabling new types of tasks and use cases with Workers AI...Michelle ChenLogan Grasby
Open sourcing Pingora: our Rust framework for building programmable network services2024-02-28Developer PlatformDevelopersRustOpen SourcePerformancePingora, our framework for building programmable and memory-safe network services, is now open source. Get started using Pingora today...Yuchen WuEdward WangAndrew Hauck