 | Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities | 2026-10-19 | 80 | Grant Bourzikas | True | | |
| Yandex outage: Data shows that instead of going dark, malicious bots went on the move | 2026-10-14 | 45 | Marina Elmore | True | | |
| Adaptive application security for the AI era: how Cloudflare connects code, traffic, and intelligence to stop attacks | 2026-09-29 | 85 | Daniele Molteni | True | | |
| Preventing quantum downgrade attacks against IPsec | 2026-09-29 | 55 | Christopher Patton | True | | |
| How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers | 2026-09-24 | 45 | Rushil Mehra | True | | |
| When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts | 2026-09-16 | 75 | Juan Miguel Cejuela | True | | |
| A revisit of remote Spectre attacks on Cloudflare Workers | 2026-08-19 | 60 | Martin Schwarzl | True | | |
| BGP Role model: tracking the adoption of RFC 9234 | 2026-08-18 | 35 | Bryton Herdes | True | | |
| Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave | 2026-08-11 | 72 | Cloudforce One | True | | |
| Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities | 2026-07-17 | 75 | Daniele Molteni | True | | |
| A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed | 2026-07-14 | 45 | Sebastiaan Neuteboom | True | | |
| Enforcing the First AS in BGP AS_PATHs | 2026-06-03 | 75 | Bryton Herdes | True | | |
| Project Glasswing: what Mythos showed us | 2026-05-18 | 30 | Grant Bourzikas | True | | |
| How Cloudflare responded to the “Copy Fail” Linux vulnerability | 2026-05-07 | 70 | Chris J Arges | True | | |
| When DNSSEC goes wrong: how we responded to the .de TLD outage | 2026-05-06 | 0 | Sebastiaan Neuteboom | True | | |
| From bytecode to bytes: automated magic packet generation | 2026-04-08 | 85 | Axel Boesenach | True | | |
| Cloudflare Client-Side Security: smarter detection, now open to everyone | 2026-03-30 | 75 | Zhiyuan Zheng | True | | |
| Fixing request smuggling vulnerabilities in Pingora OSS deployments | 2026-03-09 | 50 | Edward Wang | True | | |
| Defeating the deepfake: stopping laptop farms and insider threats | 2026-03-04 | 75 | Ann Ming Samborski | True | | |
| Introducing the 2026 Cloudflare Threat Report | 2026-03-03 | 85 | Cloudforce One | True | | |
| Toxic combinations: when small signals add up to a security incident | 2026-02-27 | 70 | Bashyam Anant | True | | |
| 2025 Q4 DDoS threat report: A record-setting 31.4 Tbps attack caps a year of massive DDoS assaults | 2026-02-05 | 78 | Omer Yoachimik | True | | |
| How we mitigated a vulnerability in Cloudflare’s ACME validation logic | 2026-01-19 | 30 | Hrushikesh Deshpande | True | | |
| React2Shell and related RSC vulnerabilities threat brief: early exploitation activity and threat actor techniques | 2025-12-11 | 90 | Cloudforce One | True | | |
| Cloudflare WAF proactively protects against React vulnerability | 2025-12-03 | 80 | Daniele Molteni | True | | |
| Cloudflare's 2025 Q3 DDoS threat report -- including Aisuru, the apex of botnets | 2025-12-03 | 90 | Omer Yoachimik | True | | |
| How a volunteer-run wildfire site in Portugal stayed online during DDoS attacks | 2025-08-21 | 35 | João Tomé | True | | |
| MadeYouReset: An HTTP/2 vulnerability thwarted by Rapid Reset mitigations | 2025-08-14 | 30 | Alex Forster | True | | |
| Defending the Internet: how Cloudflare blocked a monumental 7.3 Tbps DDoS attack | 2025-06-19 | 70 | Omer Yoachimik | True | | |
| Resolving a request smuggling vulnerability in Pingora | 2025-05-22 | 55 | Edward Wang | True | | |
| Vulnerability transparency: strengthening security through responsible disclosure | 2025-05-16 | 45 | Sri Pulla | True | | |
| QUIC action: patching a broadcast address amplification vulnerability | 2025-02-10 | 50 | Josephine Chow | True | | |
| Resolving a Mutual TLS session resumption vulnerability | 2025-02-07 | 50 | Matt Bullock | True | | |
| Record-breaking 5.6 Tbps DDoS attack and global DDoS trends for 2024 Q4 | 2025-01-21 | 78 | Omer Yoachimik | True | | |
| Global elections in 2024: Internet traffic and cyber threat trends | 2024-12-23 | 60 | João Tomé | True | | |
| Exploring Internet traffic shifts and cyber attacks during the 2024 US election | 2024-11-06 | 65 | João Tomé | True | | |
| How Cloudflare auto-mitigated world record 3.8 Tbps DDoS attack | 2024-10-02 | 85 | Manish Arora | True | | |
| Application Security report: 2024 update | 2024-07-11 | 75 | Michael Tremante | True | | |
| RADIUS/UDP vulnerable to improved MD5 collision attack | 2024-07-09 | 75 | Sharon Goldberg | True | | |
| First round of French election: party attacks and a modest traffic dip | 2024-07-03 | 50 | João Tomé | True | | |
| Automatically replacing polyfill.io links with Cloudflare’s mirror for a safer Internet | 2024-06-26 | 80 | Matthew Prince | True | | |
| Internet insights on 2024 elections in the Netherlands, South Africa, Iceland, India, and Mexico | 2024-06-07 | 65 | João Tomé | True | | |
| DDoS threat report for 2024 Q1 | 2024-04-16 | 70 | Omer Yoachimik | True | | |
| Mitigating a token-length side-channel attack in our AI products | 2024-03-14 | 35 | Celso Martinho | True | | |
| Eliminate VPN vulnerabilities with Cloudflare One | 2024-03-06 | 90 | Dan Hall | True | | |
