The stateless browser runs on Cloudflare Workers and supports Chrome DevTools Protocol for agent interaction.
Cloudflare identifies six pillars for the Modern Security Model to counter autonomous AI agents that chain stolen credentials for lateral movement.
Available for pay-as-you-go customers, the feature uses a two-stage metering pipeline and Rating Engine to enforce caps with near real-time visibility under 10 minutes.
The system handles leader crashes and connection drops without stalling, with over 95% of decisions resolved in the first phase.
The fund addresses AI-driven maintainer burnout by providing stipends of up to $4,000 per month to core maintainers and sponsoring ecosystem dependencies.
The framework utilizes UOV signatures and VOLEitH proofs to create post-quantum anonymous tokens, with issuance costs ranging from under 1KB to 5.6KB.
The coalition aims to establish open standards for identity and accountability, while new Cloudflare tools allow site owners to identify, restrict, and trace specific AI agents.
New features allow site owners to identify specific personal agents in traffic data and set individual access rules like allowing or blocking them on ad-supported pages.
The feed provides plain-language briefings, recommended actions, and AI prompts to help security teams assess impact and remediate critical CVEs in Internet-facing software.
Targeted build planner and unified scheduler reduce peak memory from 79 GiB to 12 GiB and median build completion delay from 7.7s to 3.3s.
While Cloudflare patched its systems within hours, 50 million probes show that over half of large network traffic still accepts the compromised eMudhra certificates.
Point a proxied DNS record at a private IP to apply WAF, caching, and bot management to internal services without exposing public IPs.
Cloudflare mitigated 18.2 million network-layer attacks in Q3 2026, with short-burst incidents surging while large-scale IoT botnet attacks declined following law enforcement actions.
Government-directed shutdowns and power outages accounted for 33 of the 49 disruptions, with Iraq's exam shutdowns and grid failures in Cuba and Honduras causing significant traffic drops.
The challenge targets a stock PHP 8.5.11 environment protected by Cloudflare WAF rules, requiring researchers to achieve remote code execution and recover a flag via HackerOne.
A known configuration mismatch and an SGLang bug caused 155 GLM-5.3 responses to contain data from other customers' requests.
The self-service feature uses fixed-size cache chunks to reduce tiered cache traffic by 6% and eliminate manual range-size tuning.
The closed beta feature uses hybrid ML-KEM-768 and X25519 cryptography to ensure decryption keys are only accessible by servers within a customer's chosen geography.
The certification, valid for three years, requires annual audits and mandates itemized consent forms for Korean users, disabling social sign-up to ensure compliance.
The new feature correlates HTTP requests with origin responses to detect exploitation evidence, available on all plans including Free.
Cloudflare deployed WAF rules 9 hours before public disclosure to protect customers from CVE-2026-109618 and CVE-2026-109619, which affect PHP 5.4 and later.
Cloudflare's edge implementation allows AI agents to use structured tools for shopping without merchants writing code.
The weak private keys allow attackers to forge certificates for any domain to intercept traffic, prompting immediate updates to Cloudflare One, Tunnel, and CDN services.
The experimental release is available on npm and incubated within the Oxc JavaScript compiler toolchain.
AI Briefing