{ "items": [ { "id": "45f714b5200f754c748a", "published_at": "2026-09-16T20:06:17Z", "published_epoch": 1789589177, "published_label": "2026-09-16", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/client-side-security-finds-4-malicious-campaigns/", "summary": "A modern storefront can look healthy while malicious JavaScript quietly siphons revenue, hijacks clicks, or rewrites analytics. See how Cloudflare's machine learning models surface evasive client-side attacks for analyst investigation.", "title": "When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts" }, { "id": "ad7845d189adc91f06a9", "published_at": "2026-09-15T13:00:00Z", "published_epoch": 1789477200, "published_label": "2026-09-15", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/accountable-mixed-use-ai-crawlers/", "summary": "Cloudflare is giving site owners a way to stay discoverable while disallowing AI training. New controls and an Accountable designation establish a shared model with Apple, Google, and Microsoft.", "title": "Have it both ways: stay discoverable in search while disallowing AI training" }, { "id": "cfa71c0e15bb22ba2292", "published_at": "2026-09-15T13:00:00Z", "published_epoch": 1789477200, "published_label": "2026-09-15", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/workers-granular-authorization/", "summary": "You can now scope access to individual Workers and assign narrower Developer Platform roles, so teammates, CI tokens, and agents get only the access they need to debug, deploy, or monitor safely.", "title": "Give every teammate and agent the right level of access to your Workers" }, { "id": "1aad1ca56bc38dc65e5d", "published_at": "2026-09-11T13:00:00Z", "published_epoch": 1789131600, "published_label": "2026-09-11", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/casb-policies/", "summary": "Cloudflare CASB policies introduce a native automation engine built directly on the Cloudflare developer platform to remediate SaaS risks automatically. Security teams can now design event-driven logic to revoke risky file shares and send webhooks without manual intervention.", "title": "Introducing automatic remediation policies with Cloudflare CASB" }, { "id": "0c770e947d7bd7edd0b8", "published_at": "2026-09-10T13:00:00Z", "published_epoch": 1789045200, "published_label": "2026-09-10", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/post-quantum-dnssec-1111/", "summary": "1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.", "title": "1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it" }, { "id": "41a2a0bd193ed0ae7774", "published_at": "2026-09-09T13:00:00Z", "published_epoch": 1788958800, "published_label": "2026-09-09", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/workers-module-registry-nodejs/", "summary": "Workers now enables Node.js compatibility by default, supports applications up to 64 mebibytes, and adds a URL-based module registry with import.meta, lazy compilation, shared code caches, and clearer errors.", "title": "How we rebuilt Cloudflare Workers’ module registry for Node.js compatibility" }, { "id": "719d1de40dee9399b56e", "published_at": "2026-09-08T13:10:00Z", "published_epoch": 1788873000, "published_label": "2026-09-08", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/automatic-key-exchange-for-origins/", "summary": "Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it.", "title": "Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)" }, { "id": "0f3839e608e72b92f244", "published_at": "2026-09-03T21:03:02Z", "published_epoch": 1788469382, "published_label": "2026-09-03", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/vulnerability-discovery-remediation/", "summary": "Use production traffic and security signals to prioritize findings, prepare edge mitigations when safe, and propose code patches. By combining WAF data with OpenAI Daybreak models, Vulnerability Discovery and Remediation helps teams identify and patch the most critical threats first.", "title": "Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak models" }, { "id": "8a83f875c00aa48b658e", "published_at": "2026-09-01T12:59:00Z", "published_epoch": 1788267540, "published_label": "2026-09-01", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/cache-transcoding/", "summary": "Could we get more cache space with the same hardware? We prototyped compression inside Cloudflare's cache to find out.", "title": "How we could save petabytes of cache storage with Zstandard and Pingora" }, { "id": "efee17a6b08fa65e1638", "published_at": "2026-08-31T12:59:00Z", "published_epoch": 1788181140, "published_label": "2026-08-31", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/introducing-adaptive-intelligence/", "summary": "Bot operators have historically had the economic advantage, bypassing static, deterministic detection rules with cheap proxies and retooling. Cloudflare's new Adaptive Intelligence engine flips this dynamic by autonomously learning from the meta-signals of live traffic and deploying disposable rules, making automated attacks too expensive to sustain.", "title": "Introducing Adaptive Intelligence: Undermining the economics of every bot attack" }, { "id": "dcae496a047cb72a1be8", "published_at": "2026-08-28T12:59:44Z", "published_epoch": 1787921984, "published_label": "2026-08-28", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/botbase-for-operators/", "summary": "Bot operators now have a home in the Cloudflare dashboard to manage submissions. This update adds submission status tracking, submission editing, and a behavior model so operators can accurately declare how their bots use content.", "title": "BotBase for Operators: A clearer path to joining Cloudflare's directory of bots and agents" }, { "id": "6ded1bb74e8882bf7179", "published_at": "2026-08-27T17:02:35Z", "published_epoch": 1787850155, "published_label": "2026-08-27", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/dns-cache-memory-optimization-1111/", "summary": "Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.", "title": "How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache" }, { "id": "c59bd621ba0587c0d658", "published_at": "2026-08-24T19:00:00Z", "published_epoch": 1787598000, "published_label": "2026-08-24", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/cloudflare-blog-uses-emdash/", "summary": "We migrated the Cloudflare Blog to EmDash to prove our stack at massive scale. Here is how we stress-tested performance, safely routed production traffic, and redesigned the frontend experience.", "title": "The Cloudflare Blog — brought to you by EmDash" }, { "id": "f347a6968dad80d769ac", "published_at": "2026-08-21T23:19:57Z", "published_epoch": 1787354397, "published_label": "2026-08-21", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/bot-preference-sync/", "summary": "Cloudflare's new Bot Preference Sync automatically aligns your robots.txt file with your AI bot policies for Search, Agent, and Training. Easily manage which bots access your content without maintaining static files.", "title": "Say it once: introducing Bot Preference Sync" }, { "id": "b787c054dd296f843c7b", "published_at": "2026-08-20T17:03:03Z", "published_epoch": 1787245383, "published_label": "2026-08-20", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/task-based-oauth-consent/", "summary": "Cloudflare OAuth now supports optional scopes, giving users more control over what an app can access and helping developers build secure consent flows around the task at hand.", "title": "From all-or-nothing to task-based OAuth consent" }, { "id": "de682fffa982d31e4771", "published_at": "2026-08-19T16:00:28Z", "published_epoch": 1787155228, "published_label": "2026-08-19", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/revisiting-spectre-attacks-on-workers/", "summary": "In 2024 and 2025, we reassessed remote Spectre attacks on our Workers infrastructure. We share details about the new attack primitives like Spectre gadgets, remote timers, achieving co-location and how new defenses further harden Cloudflare Workers.", "title": "A revisit of remote Spectre attacks on Cloudflare Workers" }, { "id": "f18fa69f7a979091eb65", "published_at": "2026-08-18T15:21:32Z", "published_epoch": 1787066492, "published_label": "2026-08-18", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/rfc9234-bgp-role-model/", "summary": "RFC 9234 lets routers reject route leaks on their own, using BGP Roles and the Only to Customer attribute. We measured who has deployed it, and found two Tier 1 networks unexpectedly stripping OTC.", "title": "BGP Role model: tracking the adoption of RFC 9234" }, { "id": "0da9efa14a20dfe7c25e", "published_at": "2026-08-14T13:12:12Z", "published_epoch": 1786713132, "published_label": "2026-08-14", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/mcp-security-updates/", "summary": "Cloudflare Gateway identifies MCP requests using protocol-level heuristics. Security teams can use that signal to find shadow MCP traffic, enforce Portal-only access for approved servers, and block direct connections on managed network paths.", "title": "How Cloudflare detects MCP traffic and helps secure it" }, { "id": "11596c7612a579251756", "published_at": "2026-08-14T13:00:00Z", "published_epoch": 1786712400, "published_label": "2026-08-14", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/workers-protected-by-access/", "summary": "Introducing Cloudflare Access for Workers. Attach an Access policy directly to a Worker and it applies everywhere that Worker runs — routes, custom domains, workers.dev, and previews — automatically.", "title": "Secure all your internal vibe-coded applications — in one click" }, { "id": "61cd45ebf89d9cba6c02", "published_at": "2026-08-13T19:58:01Z", "published_epoch": 1786651081, "published_label": "2026-08-13", "source_id": "cloudflare-blog", "source_name": "Cloudflare Blog", "source_url": "https://blog.cloudflare.com/total-eclipse-internet-traffic-iceland-spain-portugal/", "summary": "Cloudflare's data shows a clear impact on Internet traffic from Iceland to Spain and Portugal, following the path of totality of the total solar eclipse that occurred on August 12, 2026.", "title": "Total eclipse of the Internet: traffic impacts in Iceland, Spain, and Portugal" } ], "source": { "error": "", "id": "cloudflare-blog", "items": 20, "name": "Cloudflare Blog", "retrieved_at": "2026-09-17T13:32:11Z", "state": "not-modified", "url": "https://blog.cloudflare.com/rss/" }, "version": 1 }