Stay secure online with the latest Cloudflare updates and insights in information security, protecting websites and networks from threats.
Search across headline titles and summaries.
Background for this topic.
Cloudflare operates a global content delivery and security network that sits between internet users and websites or services. It provides distributed denial-of-service (DDoS) mitigation, web application firewall (WAF) capabilities, and secure DNS resolution, helping to filter malicious traffic and improve site availability. By proxying traffic through its edge servers, Cloudflare can inspect, block, or rate-limit requests based on threat intelligence and configured security policies.
From an information security perspective, Cloudflare’s platform introduces critical considerations around trust and attack surface. Organizations relying on it must monitor for vulnerabilities in its software stack and configuration errors that could expose sensitive data or allow bypass of protections. Additionally, Cloudflare’s role as a traffic intermediary means that any compromise or misconfiguration could impact confidentiality and integrity of data in transit, making careful management of encryption and access controls essential.
Weekly headline count for the current query.
Cloudflare Threat Report warns that AI tools enable attackers who lacked required skills to generate effective attacks rapidly and at scale
Palo Alto Networks, Cloudflare and Zscaler were also among confirmed victims of the attack
Cloudflare has notified customers that hackers may have accessed their data as part of the Salesloft Drift campaign
Cloudflare highlighted a huge rise in hyper-volumetric DDoS attacks in Q2 2025, with attackers seeking to overwhelm defenses
Cloudflare now blocks AI web crawlers by default, requiring permission from site owners for access
Cloudflare introduces E2E post-quantum cryptography, enhancing security against quantum threats
Cloudflare warns of a surge in hyper-volumetric DDoS after revealing it stopped a massive 5.6Tbps attack
The service, developed in collaboration with Cloudflare and Accenture, is available for UK schools and most education service providers
Cloudflare revealed suspected nation-state attackers compromised its systems and accessed source code using credentials stolen in the Okta breach
Content delivery provider Cloudflare observed a staggering surge in DDoS attacks against environmental services during COP28
Attack reached 71 million requests-per-second
The multi-vector, 2.5Tbps attack consisted of UDP and TCP floods
New campaign disguised as fake Cloudflare pop-up
The list is extensive and includes technology giants such as Discord, Medium, Coinbase, NordVPN and Feedly