[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:cloudflare":3},{"vendor":4,"products":15,"links":60,"research":79,"news":105,"iocs":157,"iocs_total":216,"activity":217},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"cloudflare","Cloudflare","cloudflare.com","https:\u002F\u002Fwww.cloudflare.com\u002F","US","Network and security company running a global edge network for DDoS protection, web security and zero trust services.","\u002Fvendor-logos\u002Fcloudflare.png","#ff500a","Welcome to Cloudflare: Powering the next generation of applications","2026-10-16T13:44:10.976066+00:00",[16,27,38,49],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"cloudflare-access","Cloudflare Access","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Faccess\u002F","Zero trust access to internal applications without a VPN.","Cloudflare Access is a fast, reliable Zero Trust Network Access solution that secures employees and contractors. Simplify ZTNA with Cloudflare.",[23],{"slug":24,"name":25,"problem":26},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",{"slug":28,"name":29,"url":30,"description":31,"pitch":32,"pitch_source_url":30,"controls":33},"cloudflare-gateway","Cloudflare Gateway","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fgateway\u002F","DNS filtering and secure web gateway.","Protect employees' Internet browsing from threats with Cloudflare Gateway, a cloud-native Secure Web Gateway (SWG) that inspects browser traffic without disrupting work.",[34],{"slug":35,"name":36,"problem":37},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":39,"name":40,"url":41,"description":42,"pitch":43,"pitch_source_url":41,"controls":44},"cloudflare-waf","Cloudflare WAF and DDoS protection","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fwaf\u002F","Web application firewall and unmetered DDoS mitigation for websites and APIs.","Protect your applications without sacrificing performance. Edge-based WAF with zero-day protection, low false positives, and automatic security updates.",[45],{"slug":46,"name":47,"problem":48},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",{"slug":50,"name":51,"url":52,"description":53,"pitch":54,"pitch_source_url":52,"controls":55},"cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.","Email Security from Cloudflare protects inboxes against phishing, malware, and ransomware.",[56],{"slug":57,"name":58,"problem":59},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[61,65,69,73,76],{"kind":62,"label":63,"url":64},"research","Cloudflare blog","https:\u002F\u002Fblog.cloudflare.com\u002F",{"kind":66,"label":67,"url":68},"trust_center","Trust hub","https:\u002F\u002Fwww.cloudflare.com\u002Ftrust-hub\u002F",{"kind":70,"label":71,"url":72},"review","CyberRatings 2025 Q3 SSE Report: Cloudflare","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cloudflare\u002F",{"kind":70,"label":74,"url":75},"PeerSpot: Cloudflare user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcloudflare-reviews",{"kind":70,"label":77,"url":78},"Gartner Peer Insights: Cloudflare One user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcloudflare-one",{"total":80,"stories":81},5,[82,87,92,97,101],{"slug":83,"title":84,"published_at":85,"brief":86},"ddos-attacks-over-1-tbps-surged-fivefold-in-the-second-quarter-729f36","DDoS attacks over 1 Tbps surged fivefold in the second quarter","2026-08-11T13:00:00+00:00","DDoS attacks over 1 Tbps surged fivefold in Q2, with Cloudflare mitigating over 800 such incidents.",{"slug":88,"title":89,"published_at":90,"brief":91},"wordpress-wp2shell-exploitation-grows-as-public-exploit-fuels-mass-scanning-1af09c","WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning","2026-07-21T08:59:30+00:00","Two critical WordPress vulnerabilities, CVE-2026-63030 and CVE-2026-60137, are being exploited for RCE.",{"slug":93,"title":94,"published_at":95,"brief":96},"justice-department-disrupts-botnet-networks-that-hijacked-3-million-devices","Justice Department disrupts botnet networks that hijacked 3 million devices","2026-03-20T14:19:59+00:00",null,{"slug":98,"title":99,"published_at":100,"brief":96},"aisuru-and-kimwolf-ddos-botnets-disrupted-in-international-operation","Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation","2026-03-20T07:32:32+00:00",{"slug":102,"title":103,"published_at":104,"brief":96},"us-takes-down-botnets-used-in-record-breaking-cyberattacks","US Takes Down Botnets Used in Record-Breaking Cyberattacks","2026-03-20T00:07:30+00:00",{"total":106,"stories":107},17,[108,112,117,122,127,132,137,142,147,152],{"slug":109,"title":110,"published_at":111,"brief":110},"cloudflare-fixes-containers-cross-tenant-flaw-exposing-customer-data-cf659e","Cloudflare fixes Containers cross-tenant flaw exposing customer data","2026-09-27T14:13:31+00:00",{"slug":113,"title":114,"published_at":115,"brief":116},"coder-s-registry-infrastructure-compromised-to-push-malicious-modules-25f09a","Coder's registry infrastructure compromised to push malicious modules","2026-09-03T20:04:24+00:00","Attackers compromised Coder's infrastructure to distribute malicious Terraform modules.",{"slug":118,"title":119,"published_at":120,"brief":121},"cdn-tsunami-attack-abuses-http-3-translation-for-up-to-350x-dos-amplification-6740d0","CDN Tsunami Attack Abuses HTTP\u002F3 Translation for Up to 350x DoS Amplification","2026-08-20T11:39:35+00:00","CDN Tsunami attacks exploit HTTP\u002F3 to HTTP\u002F1.1 translation for DoS amplification.",{"slug":123,"title":124,"published_at":125,"brief":126},"cloudflare-workers-spectre-attack-leaks-jwt-from-co-located-worker-at-12-bits-se-ef4c1d","Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits\u002FSecond","2026-08-19T19:02:40+00:00","Spectre attack leaks JWT from Cloudflare Worker at 12 bits\u002Fsec.",{"slug":128,"title":129,"published_at":130,"brief":131},"ghostjacking-attack-uses-poisoned-logs-to-turn-ai-agents-bad-b5619b","‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad","2026-08-10T12:59:34+00:00","Ghostjacking attack uses poisoned logs to turn AI agents rogue.",{"slug":133,"title":134,"published_at":135,"brief":136},"cordyceps-ci-cd-flaws-expose-300-github-repositories-to-supply-chain-attacks-2b8355","Cordyceps CI\u002FCD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks","2026-06-24T12:48:11+00:00","Cordyceps CI\u002FCD flaws allow unauthenticated users to hijack workflows and compromise over 300 GitHub repositories.",{"slug":138,"title":139,"published_at":140,"brief":141},"exploitable-ci-cd-vulnerabilities-expose-millions-of-repositories-to-hijacking-0c4fd4","Exploitable CI\u002FCD Vulnerabilities Expose Millions of Repositories to Hijacking","2026-06-24T10:55:05+00:00","CI\u002FCD vulnerabilities allow unauthenticated attackers to hijack developer workflows and control millions of",{"slug":143,"title":144,"published_at":145,"brief":146},"cordyceps-mushrooming-malicious-pull-requests-threaten-developer-workflows-768235","'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows","2026-06-23T19:16:42+00:00","Malicious pull requests targeting open-source projects exploit CI\u002FCD workflow weaknesses.",{"slug":148,"title":149,"published_at":150,"brief":151},"rt-darkwebinformer-a-threat-actor-known-as-welcometonightbrother-is-sharing-sour-7b1d46","RT @DarkWebInformer: 🚨 A threat actor known as welcometonightbrother is sharing source code that...","2026-06-06T15:24:16+00:00","Threat actor 'welcometonightbrother' shares source code for Cloudflare Turnstile bypass.",{"slug":153,"title":154,"published_at":155,"brief":156},"new-http-2-bomb-dos-attack-crashes-web-servers-in-under-a-minute-f1e95b","New 'HTTP\u002F2 Bomb' DoS attack crashes web servers in under a minute","2026-06-03T19:08:19+00:00","HTTP\u002F2 Bomb DoS attack crashes web servers in seconds via HPACK amplification and flow-control stalling.",[158,161,164,166,169,171,177,180,185,187,189,191,192,196,197,198,199,204,210,212],{"type":159,"value":160,"article_slug":113,"article_title":114,"published_at":115},"domain","coder-infra[.]com",{"type":162,"value":163,"article_slug":123,"article_title":124,"published_at":125},"mitre_attack","T1055.012",{"type":162,"value":165,"article_slug":123,"article_title":124,"published_at":125},"T1496",{"type":167,"value":168,"article_slug":128,"article_title":129,"published_at":130},"malware","Agentjacking",{"type":167,"value":170,"article_slug":128,"article_title":129,"published_at":130},"Ghostjacking",{"type":172,"value":173,"article_slug":174,"article_title":175,"published_at":176},"url","https:\u002F\u002Ft.co\u002FxnsKTtftJf","a-threat-actor-known-as-welcometonightbrother-is-sharing-source-code-that-allege-db6e3a","🚨 A threat actor known as welcometonightbrother is sharing source code that allegedly bypasses C...","2026-06-05T19:27:42+00:00",{"type":178,"value":179,"article_slug":153,"article_title":154,"published_at":155},"cve","CVE-2026-49975",{"type":178,"value":181,"article_slug":182,"article_title":183,"published_at":184},"CVE-2016-1546","http-2-bomb-exploit-knocks-web-servers-offline-in-seconds-b6f3a2","‘HTTP\u002F2 Bomb’ Exploit Knocks Web Servers Offline in Seconds","2026-06-03T10:52:08+00:00",{"type":178,"value":186,"article_slug":182,"article_title":183,"published_at":184},"CVE-2016-6581",{"type":178,"value":188,"article_slug":182,"article_title":183,"published_at":184},"CVE-2016-8740",{"type":178,"value":190,"article_slug":182,"article_title":183,"published_at":184},"CVE-2025-53020",{"type":178,"value":179,"article_slug":182,"article_title":183,"published_at":184},{"type":178,"value":181,"article_slug":193,"article_title":194,"published_at":195},"new-http-2-bomb-vulnerability-allows-remote-dos-on-nginx-apache-iis-envoy-cloudf-aea883","New HTTP\u002F2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare","2026-06-03T08:33:35+00:00",{"type":178,"value":186,"article_slug":193,"article_title":194,"published_at":195},{"type":178,"value":188,"article_slug":193,"article_title":194,"published_at":195},{"type":178,"value":190,"article_slug":193,"article_title":194,"published_at":195},{"type":178,"value":200,"article_slug":201,"article_title":202,"published_at":203},"CVE-2026-5194","claude-mythos-ai-identified-10-000-software-vulnerabilities-in-one-month-78ff8b","Claude Mythos AI Identified 10,000+ Software Vulnerabilities in One Month","2026-05-26T15:55:05+00:00",{"type":205,"value":206,"article_slug":207,"article_title":208,"published_at":209},"ip","2a01:e0a:fe2:4de0:fac:5473:377e:1cde","catching-cloudflare-warp-leaking-real-ips-through-tor-ai-native-security-platfor-66d110","Catching Cloudflare WARP Leaking Real IPs Through Tor | AI-Native security platform","2026-04-14T19:19:06+00:00",{"type":205,"value":211,"article_slug":207,"article_title":208,"published_at":209},"65.109.30.32",{"type":167,"value":213,"article_slug":214,"article_title":215,"published_at":209},"Ollama","has-anyone-confirmed-this-catching-cloudflare-warp-leaking-real-ips-through-tor--00e8e3","Has anyone confirmed this?\n\n\"Catching Cloudflare WARP Leaking Real IPs Through Tor\"\n\nhttps:\u002F\u002Ft.co...",20,[218,222,225,227,230,232],{"month":219,"reported":220,"affected":221},"2026-05-01",0,1,{"month":223,"reported":220,"affected":224},"2026-06-01",8,{"month":226,"reported":221,"affected":220},"2026-07-01",{"month":228,"reported":221,"affected":229},"2026-08-01",3,{"month":231,"reported":220,"affected":229},"2026-09-01",{"month":233,"reported":220,"affected":220},"2026-10-01"]