A trio of critical vulnerabilities in Cloudflare’s Pingora proxy framework threatened to unleash request smuggling and cache poisoning chaos-here’s how disaster was averted.
A 25-minute misconfiguration at Cloudflare turned routine network traffic into a lesson in how fragile-and risky-the Internet’s routing system remains.
A subtle bug in Cloudflare’s ACME validation logic risked turning its shield into a sieve, leaving countless web servers open to stealth attacks-until a white-hat warning forced a rapid fix.
A flaw in Cloudflare’s certificate validation let attackers waltz past security walls, exposing countless servers to silent threats.
A critical zero-day in Cloudflare’s firewall let attackers waltz past defenses-no hacking skills required.
Cybercriminals are weaponizing Cloudflare’s free-tier to cloak AsyncRAT malware campaigns, slipping past security defenses by blending in with legitimate traffic.
When global scale meets kernel limitations, even the boldest engineers must rethink how far they can push the rules.
A series of outages reveals the dangers of skipping the safety net in cloud infrastructure rollouts.
A security fix for React Server triggered a rare, widespread outage-revealing technical fragilities in one of the Internet’s core defenders.