AI BriefingCloudflare Blog news
The latest AI and developer news from Cloudflare Blog, with short summaries.
Visit website →Cloudflare deploys WAF protections for php2shell PHP vulnerabilities
Cloudflare deployed WAF rules 9 hours before public disclosure to protect customers from CVE-2026-109618 and CVE-2026-109619, which affect PHP 5.4 and later.
Cloudflare and Commerce.com enable WebMCP for nearly 100,000 storefronts
Cloudflare's edge implementation allows AI agents to use structured tools for shopping without merchants writing code.
Cloudflare patches eight compromised eMudhra certificates after key exposure
The weak private keys allow attackers to forge certificates for any domain to intercept traffic, prompting immediate updates to Cloudflare One, Tunnel, and CDN services.
Cloudflare and VoidZero Launch tsrs, a Rust Port of TypeScript Compiler
The experimental release is available on npm and incubated within the Oxc JavaScript compiler toolchain.
PickCloudflare cuts AI code review costs by 68% to $0.77 via prompt caching and model optimization
Optimizing prompt caching and switching to Sonnet 5.5 reduced median review time from 4m 09s to 1m 32s while maintaining finding quality.
PickCloudflare previews Clairic, a System One extraction model for structured data
The preview model processes text and images in a single pass to extract, compute, and forecast values without generating tokens, avoiding hallucinations.
Cloudflare advises moving NetScaler authentication behind Zero Trust to mitigate CVE-2026-88771
The approach uses Cloudflare Access to enforce identity checks before requests reach the gateway, preventing attackers from bypassing authentication to execute commands on the server.
Cloudflare introduces continuous trust scoring for Verified bots
The new system evaluates whether bots respect robots.txt and HTTP 429 signals to maintain their Verified status.
Cloudflare introduces programmable secure web gateway with custom Worker actions
The new Forward action is in public beta, while Custom Functions are expected by year-end.
VoidZero Open-Sources Void Platform, SDK, and CLI for Vite Full-Stack Cloudflare Deployment
The suite unifies server routing, typed data access, and Cloudflare deployment into a single npm package to enable secure internal app shipping.
Cloudflare and OpenAI Pilot Discovers Hundreds of Millions of New Pages for ChatGPT
A pilot using ~1% of Cloudflare's network enabled OpenAI to index hundreds of millions of previously unknown web pages.
Cloudflare data shows malicious bots migrated after Yandex strikes, not stopped
Analysis reveals malicious traffic shifted to other Russian hosting providers like Radist and Selectel while search indexing collapsed.
Cloudflare Hyperdrive MySQL Support Reaches GA After Fixing Rare Caching Bug
The fix resolved a rare empty-response bug caused by capability mismatches in shared CDN caches, achieving a 99.99% success rate.
PickHow Cloudflare D1 Scales to Millions of Databases by Offloading Control Plane from Hot Path
Cloudflare D1 surpassed 5.5 million databases by decoupling control plane operations from query execution using Workers KV and Durable Objects.
Cloudflare Data Team Defers 2.5 Years of Hardware Expansion via Pipeline Optimizations
Recent pipeline changes reduced backbone traffic by ~70 GB/s, saving significant CPU and memory resources.
Cloudflare Logpush Transformers Enable In-Pipeline SQL Filtering and Redaction
Transformers are now generally available on all Cloudflare self-serve plans, allowing teams to filter and reshape logs before export using SQL.
Cloudflare releases Clef-omni with audio and video support, cuts Clef-flash pricing, and speeds up Clef
Clef-omni handles audio and video inputs natively, while Clef-flash drops to $0.038 per million input tokens but reduces its hosted context window to 24k.
Cloudflare introduces on-demand CPU and memory profiling with flamegraphs for Workers and Durable Objects
Developers can now request interactive flamegraphs for active Workers and Durable Objects via the CLI or Cloudflare Dashboard to identify resource bottlenecks in production.
Deno team joins Cloudflare to simplify self-hosting Workers and Durable Objects
The move aims to let developers use the same primitives in more places.
Cloudflare Redesigns Radar to Bridge Technical Depth and Usability for Broader Audiences
The new landing page replaces the previous bento box layout with a map-centric interface and tabbed navigation to better serve journalists, policymakers, and everyday users.