[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:cloudflare":3},{"vendor":4,"products":15,"links":60,"research":79,"news":132,"iocs":184,"iocs_total":246,"activity":247},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"cloudflare","Cloudflare","cloudflare.com","https:\u002F\u002Fwww.cloudflare.com\u002F","US","Network and security company running a global edge network for DDoS protection, web security and zero trust services.","\u002Fvendor-logos\u002Fcloudflare.png","#ff500a","Welcome to Cloudflare: Powering the next generation of applications","2026-10-16T13:44:10.976066+00:00",[16,27,38,49],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"cloudflare-access","Cloudflare Access","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Faccess\u002F","Zero trust access to internal applications without a VPN.","Cloudflare Access is a fast, reliable Zero Trust Network Access solution that secures employees and contractors. Simplify ZTNA with Cloudflare.",[23],{"slug":24,"name":25,"problem":26},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",{"slug":28,"name":29,"url":30,"description":31,"pitch":32,"pitch_source_url":30,"controls":33},"cloudflare-gateway","Cloudflare Gateway","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fgateway\u002F","DNS filtering and secure web gateway.","Protect employees' Internet browsing from threats with Cloudflare Gateway, a cloud-native Secure Web Gateway (SWG) that inspects browser traffic without disrupting work.",[34],{"slug":35,"name":36,"problem":37},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":39,"name":40,"url":41,"description":42,"pitch":43,"pitch_source_url":41,"controls":44},"cloudflare-waf","Cloudflare WAF and DDoS protection","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fwaf\u002F","Web application firewall and unmetered DDoS mitigation for websites and APIs.","Protect your applications without sacrificing performance. Edge-based WAF with zero-day protection, low false positives, and automatic security updates.",[45],{"slug":46,"name":47,"problem":48},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",{"slug":50,"name":51,"url":52,"description":53,"pitch":54,"pitch_source_url":52,"controls":55},"cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.","Email Security from Cloudflare protects inboxes against phishing, malware, and ransomware.",[56],{"slug":57,"name":58,"problem":59},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[61,65,69,73,76],{"kind":62,"label":63,"url":64},"research","Cloudflare blog","https:\u002F\u002Fblog.cloudflare.com\u002F",{"kind":66,"label":67,"url":68},"trust_center","Trust hub","https:\u002F\u002Fwww.cloudflare.com\u002Ftrust-hub\u002F",{"kind":70,"label":71,"url":72},"review","CyberRatings 2025 Q3 SSE Report: Cloudflare","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cloudflare\u002F",{"kind":70,"label":74,"url":75},"PeerSpot: Cloudflare user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcloudflare-reviews",{"kind":70,"label":77,"url":78},"Gartner Peer Insights: Cloudflare One user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcloudflare-one",{"total":80,"stories":81},21,[82,87,92,97,102,107,112,117,122,127],{"slug":83,"title":84,"published_at":85,"brief":86},"cloudflare-launches-zero-wire-to-track-critical-cves-active-exploits-and-securit-77ab46","Cloudflare Launches Zero Wire to Track Critical CVEs, Active Exploits, and Security Fixes","2026-11-04T11:10:14+00:00","Cloudflare launches Zero Wire to track critical CVEs, active exploits, and security fixes.",{"slug":88,"title":89,"published_at":90,"brief":91},"cloudflare-reports-18-2-million-network-layer-ddos-attacks-in-q3-up-38-293569","Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%","2026-10-31T04:56:12+00:00","Cloudflare reports 18.2M network-layer DDoS attacks in Q3, a 38% increase.",{"slug":93,"title":94,"published_at":95,"brief":96},"hackers-launch-8-200-ddos-attacks-every-hour-cloudflare-s-latest-report-reveals-50acd0","Hackers Launch 8,200 DDoS Attacks Every Hour, Cloudflare’s Latest Report Reveals","2026-10-29T16:42:03+00:00","Cloudflare reports 8,200+ DDoS attacks hourly in Q3 2026, with attackers favoring short bursts.",{"slug":98,"title":99,"published_at":100,"brief":101},"u-s-cisa-adds-php-flaws-php2shell-to-its-known-exploited-vulnerabilities-catalog-5e0afd","U.S. CISA adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog","2026-10-27T10:39:41+00:00","CISA adds PHP2Shell vulnerabilities to its Known Exploited Vulnerabilities catalog.",{"slug":103,"title":104,"published_at":105,"brief":106},"how-to-patch-php2shell-with-free-aikido-images-83a7bc","How to patch PHP2Shell with free Aikido Images","2026-10-26T22:15:00+00:00","Aikido releases free patched PHP container images for PHP2Shell RCE vulnerabilities CVE-2026-109618 and CVE-2026-109619.",{"slug":108,"title":109,"published_at":110,"brief":111},"cloudflare-release-emergency-waf-ruleset-update-following-brotli-vulnerability-85c39b","Cloudflare Release Emergency WAF Ruleset Update Following Brotli Vulnerability","2026-10-26T13:18:59+00:00","Cloudflare releases emergency WAF rules for Brotli vulnerability CVE-2026-111497.",{"slug":113,"title":114,"published_at":115,"brief":116},"php2shell-suspected-north-korean-campaign-targets-216-vulnerable-php-hosts-18fe30","PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts","2026-10-26T09:58:31+00:00","North Korean campaign targets 216 PHP hosts with critical vulnerabilities",{"slug":118,"title":119,"published_at":120,"brief":121},"the-php-meltdown-shows-how-ai-makes-bugs-more-exploitable-cc8e14","The PHP Meltdown Shows How AI Makes Bugs More Exploitable","2026-10-24T12:00:00+00:00","AI tools help researchers uncover and exploit previously unaddressed PHP vulnerabilities, dubbed PHP2Shell.",{"slug":123,"title":124,"published_at":125,"brief":126},"php2shell-millions-of-attacks-no-confirmed-successful-exploits-yet-5534c9","PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet","2026-10-23T10:52:00+00:00","Millions of PHP2Shell attacks observed targeting critical CVEs, with exploit development ongoing.",{"slug":128,"title":129,"published_at":130,"brief":131},"tech-and-security-companies-respond-to-php2shell-vulnerabilities-76f735","Tech and Security Companies Respond to PHP2Shell Vulnerabilities","2026-10-22T12:20:23+00:00","PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619) allow remote code execution; patches released.",{"total":133,"stories":134},18,[135,140,144,149,154,159,164,169,174,179],{"slug":136,"title":137,"published_at":138,"brief":139},"researchers-chain-cloudflare-security-flaws-to-bypass-csp-and-execute-malicious-393ae7","Researchers Chain Cloudflare Security Flaws to Bypass CSP and Execute Malicious JavaScript","2026-10-28T15:38:06+00:00","Researchers chained Cloudflare security flaws to bypass CSP and execute malicious JavaScript.",{"slug":141,"title":142,"published_at":143,"brief":142},"cloudflare-fixes-containers-cross-tenant-flaw-exposing-customer-data-cf659e","Cloudflare fixes Containers cross-tenant flaw exposing customer data","2026-09-27T14:13:31+00:00",{"slug":145,"title":146,"published_at":147,"brief":148},"coder-s-registry-infrastructure-compromised-to-push-malicious-modules-25f09a","Coder's registry infrastructure compromised to push malicious modules","2026-09-03T20:04:24+00:00","Attackers compromised Coder's infrastructure to distribute malicious Terraform modules.",{"slug":150,"title":151,"published_at":152,"brief":153},"cdn-tsunami-attack-abuses-http-3-translation-for-up-to-350x-dos-amplification-6740d0","CDN Tsunami Attack Abuses HTTP\u002F3 Translation for Up to 350x DoS Amplification","2026-08-20T11:39:35+00:00","CDN Tsunami attacks exploit HTTP\u002F3 to HTTP\u002F1.1 translation for DoS amplification.",{"slug":155,"title":156,"published_at":157,"brief":158},"cloudflare-workers-spectre-attack-leaks-jwt-from-co-located-worker-at-12-bits-se-ef4c1d","Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits\u002FSecond","2026-08-19T19:02:40+00:00","Spectre attack leaks JWT from Cloudflare Worker at 12 bits\u002Fsec.",{"slug":160,"title":161,"published_at":162,"brief":163},"ghostjacking-attack-uses-poisoned-logs-to-turn-ai-agents-bad-b5619b","‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad","2026-08-10T12:59:34+00:00","Ghostjacking attack uses poisoned logs to turn AI agents rogue.",{"slug":165,"title":166,"published_at":167,"brief":168},"cordyceps-ci-cd-flaws-expose-300-github-repositories-to-supply-chain-attacks-2b8355","Cordyceps CI\u002FCD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks","2026-06-24T12:48:11+00:00","Cordyceps CI\u002FCD flaws allow unauthenticated users to hijack workflows and compromise over 300 GitHub repositories.",{"slug":170,"title":171,"published_at":172,"brief":173},"exploitable-ci-cd-vulnerabilities-expose-millions-of-repositories-to-hijacking-0c4fd4","Exploitable CI\u002FCD Vulnerabilities Expose Millions of Repositories to Hijacking","2026-06-24T10:55:05+00:00","CI\u002FCD vulnerabilities allow unauthenticated attackers to hijack developer workflows and control millions of",{"slug":175,"title":176,"published_at":177,"brief":178},"cordyceps-mushrooming-malicious-pull-requests-threaten-developer-workflows-768235","'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows","2026-06-23T19:16:42+00:00","Malicious pull requests targeting open-source projects exploit CI\u002FCD workflow weaknesses.",{"slug":180,"title":181,"published_at":182,"brief":183},"rt-darkwebinformer-a-threat-actor-known-as-welcometonightbrother-is-sharing-sour-7b1d46","RT @DarkWebInformer: 🚨 A threat actor known as welcometonightbrother is sharing source code that...","2026-06-06T15:24:16+00:00","Threat actor 'welcometonightbrother' shares source code for Cloudflare Turnstile bypass.",[185,188,191,193,196,198,204,210,215,217,219,221,222,226,227,228,229,234,240,242],{"type":186,"value":187,"article_slug":145,"article_title":146,"published_at":147},"domain","coder-infra[.]com",{"type":189,"value":190,"article_slug":155,"article_title":156,"published_at":157},"mitre_attack","T1055.012",{"type":189,"value":192,"article_slug":155,"article_title":156,"published_at":157},"T1496",{"type":194,"value":195,"article_slug":160,"article_title":161,"published_at":162},"malware","Agentjacking",{"type":194,"value":197,"article_slug":160,"article_title":161,"published_at":162},"Ghostjacking",{"type":199,"value":200,"article_slug":201,"article_title":202,"published_at":203},"url","https:\u002F\u002Ft.co\u002FxnsKTtftJf","a-threat-actor-known-as-welcometonightbrother-is-sharing-source-code-that-allege-db6e3a","🚨 A threat actor known as welcometonightbrother is sharing source code that allegedly bypasses C...","2026-06-05T19:27:42+00:00",{"type":205,"value":206,"article_slug":207,"article_title":208,"published_at":209},"cve","CVE-2026-49975","new-http-2-bomb-dos-attack-crashes-web-servers-in-under-a-minute-f1e95b","New 'HTTP\u002F2 Bomb' DoS attack crashes web servers in under a minute","2026-06-03T19:08:19+00:00",{"type":205,"value":211,"article_slug":212,"article_title":213,"published_at":214},"CVE-2016-1546","http-2-bomb-exploit-knocks-web-servers-offline-in-seconds-b6f3a2","‘HTTP\u002F2 Bomb’ Exploit Knocks Web Servers Offline in Seconds","2026-06-03T10:52:08+00:00",{"type":205,"value":216,"article_slug":212,"article_title":213,"published_at":214},"CVE-2016-6581",{"type":205,"value":218,"article_slug":212,"article_title":213,"published_at":214},"CVE-2016-8740",{"type":205,"value":220,"article_slug":212,"article_title":213,"published_at":214},"CVE-2025-53020",{"type":205,"value":206,"article_slug":212,"article_title":213,"published_at":214},{"type":205,"value":211,"article_slug":223,"article_title":224,"published_at":225},"new-http-2-bomb-vulnerability-allows-remote-dos-on-nginx-apache-iis-envoy-cloudf-aea883","New HTTP\u002F2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare","2026-06-03T08:33:35+00:00",{"type":205,"value":216,"article_slug":223,"article_title":224,"published_at":225},{"type":205,"value":218,"article_slug":223,"article_title":224,"published_at":225},{"type":205,"value":220,"article_slug":223,"article_title":224,"published_at":225},{"type":205,"value":230,"article_slug":231,"article_title":232,"published_at":233},"CVE-2026-5194","claude-mythos-ai-identified-10-000-software-vulnerabilities-in-one-month-78ff8b","Claude Mythos AI Identified 10,000+ Software Vulnerabilities in One Month","2026-05-26T15:55:05+00:00",{"type":235,"value":236,"article_slug":237,"article_title":238,"published_at":239},"ip","2a01:e0a:fe2:4de0:fac:5473:377e:1cde","catching-cloudflare-warp-leaking-real-ips-through-tor-ai-native-security-platfor-66d110","Catching Cloudflare WARP Leaking Real IPs Through Tor | AI-Native security platform","2026-04-14T19:19:06+00:00",{"type":235,"value":241,"article_slug":237,"article_title":238,"published_at":239},"65.109.30.32",{"type":194,"value":243,"article_slug":244,"article_title":245,"published_at":239},"Ollama","has-anyone-confirmed-this-catching-cloudflare-warp-leaking-real-ips-through-tor--00e8e3","Has anyone confirmed this?\n\n\"Catching Cloudflare WARP Leaking Real IPs Through Tor\"\n\nhttps:\u002F\u002Ft.co...",20,[248,252,255,258,260,263],{"month":249,"reported":250,"affected":251},"2026-06-01",0,8,{"month":253,"reported":254,"affected":250},"2026-07-01",1,{"month":256,"reported":254,"affected":257},"2026-08-01",3,{"month":259,"reported":250,"affected":257},"2026-09-01",{"month":261,"reported":262,"affected":254},"2026-10-01",15,{"month":264,"reported":254,"affected":250},"2026-11-01"]