AI BriefingCloudflare Blog news
The latest AI and developer news from Cloudflare Blog, with short summaries.
Visit website →NEWCloudflare open-sources Kitesurf, its stateless browser for AI agents
The stateless browser runs on Cloudflare Workers and supports Chrome DevTools Protocol for agent interaction.
NEWCloudflare Reports 30x Surge in LLM Penetration Testing Attacks and Proposes Modern Security Model
Cloudflare identifies six pillars for the Modern Security Model to counter autonomous AI agents that chain stolen credentials for lateral movement.
NEWCloudflare launches Spend Management in Beta to pause activity when spending limits are reached
Available for pay-as-you-go customers, the feature uses a two-stage metering pipeline and Rating Engine to enforce caps with near real-time visibility under 10 minutes.
Cloudflare introduces Meerkat, an experimental consensus service using the QuePaxa algorithm for global control planes
The system handles leader crashes and connection drops without stalling, with over 95% of decisions resolved in the first phase.
Cloudflare Distributes First $301,300 of Vite Ecosystem Fund to 44 Projects
The fund addresses AI-driven maintainer burnout by providing stipends of up to $4,000 per month to core maintainers and sponsoring ecosystem dependencies.
MOLE Post-Quantum Privacy Framework Uses UOV and VOLEitH for Anonymous Credentials
The framework utilizes UOV signatures and VOLEitH proofs to create post-quantum anonymous tokens, with issuance costs ranging from under 1KB to 5.6KB.
Cloudflare Launches Trusted Agent Delegation Coalition and New Agent Visibility Tools
The coalition aims to establish open standards for identity and accountability, while new Cloudflare tools allow site owners to identify, restrict, and trace specific AI agents.
Cloudflare launches analytics and granular access policies for personal agents
New features allow site owners to identify specific personal agents in traffic data and set individual access rules like allowing or blocking them on ad-supported pages.
Cloudflare launches Zero Wire, a public vulnerability intelligence feed on Radar
The feed provides plain-language briefings, recommended actions, and AI prompts to help security teams assess impact and remediate critical CVEs in Internet-facing software.
Cloudflare halves DNS build delay and cuts memory use by 85% with targeted builds
Targeted build planner and unified scheduler reduce peak memory from 79 GiB to 12 GiB and median build completion delay from 7.7s to 3.3s.
Cloudflare reports 22,000 attempts to exploit eMudhra's weak keys, with no evidence of connection interception
While Cloudflare patched its systems within hours, 50 million probes show that over half of large network traffic still accepts the compromised eMudhra certificates.
Cloudflare Services for Private Origins Generally Available
Point a proxied DNS record at a private IP to apply WAF, caching, and bot management to internal services without exposing public IPs.
Cloudflare Q3 2026 DDoS Report: Short-burst attacks surge 208% as hyper-volumetric attacks drop 69%
Cloudflare mitigated 18.2 million network-layer attacks in Q3 2026, with short-burst incidents surging while large-scale IoT botnet attacks declined following law enforcement actions.
Cloudflare Radar: 49 Internet Disruptions in Q3 2026 Driven by Shutdowns and Power Failures
Government-directed shutdowns and power outages accounted for 33 of the 49 disruptions, with Iraq's exam shutdowns and grid failures in Cuba and Honduras causing significant traffic drops.
Cloudflare Launches PHP Capture the Flag Challenge to Test WAF Defenses Against php2shell Vulnerabilities
The challenge targets a stock PHP 8.5.11 environment protected by Cloudflare WAF rules, requiring researchers to achieve remote code execution and recover a flag via HackerOne.
Cloudflare fixes cross-request KV cache exposure in GLM-5.3 Workers AI model
A known configuration mismatch and an SGLang bug caused 155 GLM-5.3 responses to contain data from other customers' requests.
Cloudflare Launches Origin Range Requests to Halve R2 p99 Time to First Byte
The self-service feature uses fixed-size cache chunks to reduce tiered cache traffic by 6% and eliminate manual range-size tuning.
Cloudflare launches post-quantum GeoKey Manager for geographically restricted key management
The closed beta feature uses hybrid ML-KEM-768 and X25519 cryptography to ensure decryption keys are only accessible by servers within a customer's chosen geography.
Cloudflare obtains South Korea's ISMS certification after 10-day audit of 80 controls
The certification, valid for three years, requires annual audits and mandates itemized consent forms for Korean users, disabling social sign-up to ensure compliance.
Cloudflare WAF adds full transaction detection and response rules
The new feature correlates HTTP requests with origin responses to detect exploitation evidence, available on all plans including Free.