Company
Cloudflare
NET106 published events · on the wire since February 2026
Latest movement
Security AI
PHP flaws draw millions of attack attempts, with no successful exploitation seen
Newly public PHP vulnerabilities drew millions of exploitation attempts within hours of publication, Cloudflare analysis cited by WIRED found. The PHP Foundation says it has seen no successful exploitation of the flaws, collectively called PHP2Shell, and many circulating potential exploits appear in…
Chronological record
Every published event attached to Cloudflare, newest first.
October 2026 33 events
- Cloudflare opens closed beta for post-quantum regional key management
- Cloudflare adds response blocking to its web application firewall
- PHP2Shell workaround falls short as PHP prepares October 21 fix
- Cloudflare offers experimental Rust port of TypeScript compiler
- Cloudflare begins evaluating verified bots against website preferences
- Ukrainian strikes disrupt Yandex data centers and Russian digital services
- Cloudflare opens Gateway traffic transformation through Workers in public beta
- Infoblox links Help TDS scams to Hotejka and Cloudflare Pages abuse
- Cloudflare open-sources Void tools for shared application deployment
- Cloudflare says pilot added hundreds of millions of pages to OpenAI's index
- Cloudflare finds malicious bots moved hosts during Yandex outage
- Cloudflare makes Hyperdrive MySQL support generally available
Show 21 earlier events
- Cursor opens Origin app marketplace to public submissions
- Yandex Pay outage blocks transfers, balance checks and purchases
- Yandex reports at least 84 services offline after reported drone strikes
- Cloudflare acquires Deno, a rival in developer infrastructure
- Cloudflare plans to end Deno runtime development after one year
- Cloudflare releases Clef-omni and cuts Clef-flash price and context
- Deno team joins Cloudflare and sets timeline to close Deploy
- Cloudflare adds production CPU and memory profiling for Workers
- Cloudflare opens early beta of AI-assisted security investigations
- Cloudflare says cache compression reduced eligible assets to a third of their disk size
- Cloudflare offers beta web search API through AI Gateway
- Cloudflare adds deployment automation and regional storage controls to Artifacts
- Scam uses custom GPT and Google ads to direct users toward malware
- Cloudflare adds web search from three providers to AI Gateway
- Cloudflare announces eight updates to unify observability tools
- Cloudflare opens log delivery and transformation tools to all plans
- Cloudflare adds email access restrictions to free Quick Tunnels
- Cloudflare releases Clef decision-model weights for self-hosting
- Cloudflare opens access requests for EuroLLM and Apertus on Workers AI
- Cloudflare launches Workers KV Instant private beta with cheaper reads
- Cloudflare makes AI Search generally available with native image retrieval
September 2026 29 events
- Attackers use Custom GPTs to lure users into malware installation
- Cloudflare expands domain transfers through its Registrar API
- Cloudflare opens automatic AI model routing in public beta
- Cloudflare opens closed beta for agent payments to websites and APIs
- Cloudflare adds faster, configurable containers for AI agents
- Cloudflare applies to become a certificate authority
- Cloudflare adds domain-level checks for post-quantum encryption
- Cloudflare adds beta downgrade protection to IPsec services
- Cloudflare expands threat intelligence access and automated application defenses
- Cloudflare adds experimental Emscripten support for Rust Workers
- Cloudflare releases Forge tool for generating API software
- Cloudflare adds direct site tools to Kitesurf agent browser
Show 17 earlier events
- Cloudflare's VoidZero releases Vite+ 1.0 developer toolchain
- Cloudflare releases EmDash 1.0 with portable plugin registry
- Cloudflare introduces tool to complete Turnstile bot checks
- Cloudflare says it fixed residual-data flaw in Containers
- Developer placeholder domain serves fake security check
- Cloudflare adds Vary support to Cache Rules on every plan
- Cloudflare launches separate Worker previews for Git branches
- Cloudflare makes Python Workers generally available
- Vercel and Cloudflare adopt Jev to help AI agents choose tools
- Cloudflare frees more than 100 terabytes of memory with routing changes
- Cloudflare releases coding-agent security-audit skill
- Cloudflare adds per-Worker access scoping
- Cloudflare adds AI-training control for mixed-use crawlers
- Cloudflare CASB adds automatic remediation policies for SaaS misconfigurations
- Cloudflare rolls out early access to AI-driven vulnerability remediation
- Cloudflare opens code vulnerability service to selected customers
- Cloudflare prototypes cache transcoding to increase effective storage
August 2026 24 events
- Cloudflare launches continuously retraining bot-detection engine
- Microsoft details TerminalFix campaign using fake CAPTCHAs and reverse tunnels
- Cloudflare says DNS cache redesign reclaimed 100TB of RAM
- Cloudflare adds BotBase submission tracking and automated checks
- Cloudflare says DNS-cache changes freed about 100TB of fleet memory
- Z.ai identifies Ox Alpha as GLM-5.3-Flash
- Researchers find npm mirrors used to host phishing redirectors
- Cloudflare plans bot-policy sync for robots.txt and edge controls
- Cloudflare says OAuth optional scopes are available for MCP servers
- Cloudflare finds two Tier-1 networks stripping BGP leak-prevention signal
- Cloudflare adds MCP traffic controls to Cloudflare One
- Cloudflare lets Workers accounts default deployments to private
Show 12 earlier events
- Cloudflare for Government achieves FedRAMP Class D High certification
- Putting frontier cyber models in more trusted hands
- Cloudflare details Trust and Risk tools for hybrid human-agent web traffic
- Cloudflare unifies Workers AI and AI Gateway under one control plane
- Kitesurf: Agent-first browser that runs in V8 isolates
- Cloudflare OS: an open platform for agents, apps, and work
- Cloudflare launches CI SDK so platforms can run CI/CD on Artifacts and Workflows
- Cloudflare says AI reviewers flagged ~250,000 standards violations and blocked 16,000 merges
- Cloudflare previews @cloudflare/computer agent runtime with shared filesystem
- Cloudflare launches Billable Usage API for programmatic cost visibility
- Smaller, faster, safer: running Kimi and GLM at scale
- Cloudflare opens Agents Week on building an Agent Cloud
July 2026 9 events
- Cloudflare Radar: Super Typhoon Sinlaku drove longest Q2 2026 internet outage
- Cloudflare open sources pvcli privacy proxy CLI for Oblivious HTTP debugging
- NVIDIA and industry partners form Open Secure AI Alliance after Hugging Face incident
- Cloudflare launches Cache Response Rules to fix origin headers that break CDN caching
- Cloudflare deploys WAF rules for two critical WordPress vulnerabilities
- Cloudflare launches Precursor to detect agentic bot behavior across full user sessions
- Cloudflare Launches Smart Tiered Cache for Public Cloud Regions to Cut Egress and Latency
- Cloudflare Announces Research Pilot with OpenAI
- Cloudflare joins UK government Cyber Resilience Pledge