AUG 31, 2026
EngBrief
Search⌘K
LatestTopicsSourcesSaved
Eng&Brief

Engineering insights from the world's best tech companies, curated and summarized.

Weekly brief

Browse

TopicsSourcesFavorites

More

SearchRSS Feed
© 2026 EngBriefUpdated every 4 hours
← Sources
blog.cloudflare.com icon
Security

Cloudflare Blog

168 articles on EngBrief

The Cloudflare Blog is one of the most prolific technical blogs in the industry, covering internet security, networking, and edge computing. Posts explore DDoS mitigation, DNS infrastructure, TLS/cryptography, Cloudflare Workers, AI on the edge, HTTP standards, and the global network that serves over 20% of the web.

SecurityNetworkingEdge ComputingCryptographyPerformance
Visit blog →

Latest Articles

Cloudflare4h ago

Introducing Adaptive Intelligence: undermining the economics of every bot attack

Bot operators have historically had the economic advantage, bypassing static, deterministic detection rules with cheap proxies and retooling. Cloudflare's new...

NetworkingSecurity
1 min
Cloudflare3d ago

BotBase for Operators: A clearer path to joining Cloudflare's directory of bots and agents

Bot operators now have a home in the Cloudflare dashboard to manage submissions. This update adds submission status tracking, submission editing, and a...

NetworkingSecurity
1 min
Cloudflare4d ago

How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache

Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across...

NetworkingSecurity
1 min
Cloudflare6d ago

The Cloudflare Blog – Brought to you by EmDash

We migrated the Cloudflare Blog to EmDash to prove our stack at massive scale. Here is how we stress-tested performance, safely routed production traffic, and...

NetworkingSecurity
1 min
Cloudflare9d ago

Say it once: introducing Bot Preference SynC

Cloudflare's new Bot Preference Sync automatically aligns your robots.txt file with your AI bot policies for Search, Agent, and Training. Easily manage which...

NetworkingSecurity
1 min
Cloudflare11d ago

From all-or-nothing to task-based OAuth consent

Cloudflare OAuth now supports optional scopes, giving users more control over what an app can access and helping developers build secure consent flows around...

NetworkingSecurity
1 min
Cloudflare12d ago

A revisit of remote Spectre attacks on Cloudflare Workers

In 2024 and 2025, we reassessed remote Spectre attacks on our Workers infrastructure. We share details about the new attack primitives like Spectre gadgets,...

NetworkingSecurity
1 min
Cloudflare13d ago

BGP Role model: tracking the adoption of RFC 9234

RFC 9234 lets routers reject route leaks on their own, using BGP Roles and the Only to Customer attribute. We measured who has deployed it, and found two Tier...

NetworkingSecurity
1 min
Cloudflare17d ago

How Cloudflare detects MCP traffic and helps secure it

Cloudflare has introduced new capabilities to detect Model Context Protocol (MCP) traffic, identify users and servers generating it, and control direct connections on managed network paths. These controls are part of Cloudflare One, which helps administrators see if agents are using approved paths or bypassing them. With MCP, AI agents can make thousands of incorrect actions before human oversight, so Cloudflare's features aim to stop sensitive data from leaving devices and detect unmanaged MCP traffic. The solution uses protocol signals to find shadow MCP traffic and enforce MCP Portal-only access to trusted MCP servers.

NetworkingSecurity
1 min
Cloudflare17d ago

Secure all your internal vibe-coded applications — in one click

Here's a 2-3 sentence summary of the engineering blog post: Cloudflare has launched a new feature to secure internal vibe-coded applications in one click, making it easier for companies to keep their applications private and control access through Cloudflare Access. With Workers, companies can attach a policy to a specific Worker or account-wide to ensure all deployments are private by default, providing granular control over who can access the application. This feature is built on top of FL2, the new Rust-based modular proxy, allowing for a more modular and scalable architecture.

NetworkingSecurity
1 min
Cloudflare17d ago

Total eclipse of the Internet: traffic impacts in Iceland, Spain, and Portugal

Researchers used Cloudflare Radar data to analyze Internet traffic during the 2025 total solar eclipse across Europe. The study found a significant dip in Internet traffic, with a 15-30% decrease in countries along the path of totality, as people paused their online activity to witness the event. Iceland, Spain, and Portugal saw the biggest decreases in traffic, with some regions experiencing drops of up to 46.7%. Cloudflare's data shows a clear correlation between the eclipse's path and Internet activity, with traffic returning to normal levels shortly after the eclipse's end. The study highlights the impact of large-scale physical events on digital behavior, demonstrating that human attention can temporarily reshape online activity across an entire continent.

NetworkingSecurity
1 min
Cloudflare18d ago

Certificate Transparency Monitoring is now generally available

Cloudflare improves Certificate Transparency Monitoring to reduce noise from routine certificate renewals and issuances. The service filters out certificates issued on your behalf, sending alerts only for unexpected, external certificates. This change eliminates unnecessary notifications and improves the effectiveness of the feature. To achieve this, Cloudflare identifies and records a unique identifier (public key in DER-encoded SPKI) at the time of certificate order creation. The alerting service then recovers this identifier and checks if it matches a recorded value in the ordering service's database. If a match is found, the alert is suppressed; otherwise, the alert is sent as usual, indicating a potentially suspicious external certificate. With this solution, Cloudflare reduces noise and improves the reliability of Certificate Transparency Monitoring for over 650,000 customer domains.

NetworkingSecurity
1 min
Cloudflare20d ago

Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave

Cloudflare mitigated a surge of 1 Tbps attacks in the first half of 2026, with 935 network-layer DDoS attacks exceeding 1 Tbps, a 519% quarter-over-quarter increase. DNS-based attacks accounted for 34.3% of all network-layer activity, with DNS Floods dominating, increasing from 25.7% to 40.0% of network-layer attacks quarter-over-quarter. Most-attacked industries included Media, Production & Publishing, and Government, with Turkey rising to the #3 most-attacked country in Q2. Key statistics from the report include 5,300 DDoS attacks per hour, 23.2 million mitigated network-layer attacks, and 29.64 trillion HTTP DDoS requests. Hyper-volumetric attacks saw a 6.8 surge, with 805 network-layer attacks exceeding 1 Tbps in Q2. Most of these attacks were short-lived, lasting under 10 minutes

NetworkingSecurity
1 min
Cloudflare20d ago

Everything we launched during Agents Week

Here is a 2-3 sentence summary for each day of Agents Week: **Monday, August 3**: Cloudflare introduced a new runtime for agents called `@cloudflare/computer`, designed for agentic software that chooses the right environment for the job. Workers RPC now allows for direct communication between Python and JavaScript Workers. New features include billable usage API, inbound TCP connections for Workers and Containers, and support for gRPC. **Tuesday, August 4**: Cloudflare launched the Agent Development Lifecycle (ADLC) framework, which includes primitives for taking agentic software from prototype to production. New features include live tracing, replay, and human-in-the-loop approvals for Cloudflare Agents. Cloudflare also introduced programmable wallets for secure transactions and CI/CD pipelines written in code. **Wednesday, August 5**: Cloudflare extended Zero Trust from users and devices to agents themselves, introducing an Agent Access Model for secure resource access. Cloudflare OS, an open platform for agents, apps

NetworkingSecurity
1 min
Cloudflare21d ago

Serving the most critical missions: Cloudflare for Government achieves FedRAMP Class D (High) Certified status

Cloudflare for Government has achieved FedRAMP Class D (High) certification status, meeting the highest security standards for government cloud services. This milestone allows federal agencies to leverage Cloudflare's modern security tools, application performance, and developer product features without compromising on compliance. By using a single, global network and advanced software-defined controls, Cloudflare can ensure data residency and handling requirements are met while providing a unified platform to the public sector.

NetworkingSecurity
1 min
Cloudflare24d ago

Unveiling good and bad behaviors on the Agentic Internet

Cloudflare's Web Integrity & Trust team focuses on assessing behaviors to identify good and bad behaviors on the Agentic Internet, where the line between human and bot is blurring. They analyze continuous behaviors to evaluate Trust and provide tools to help site owners manage complexity and emerging challenges. The team defines Risk and Trust as independent, but reciprocal, values, where Trust is built up over time and based on reputation. Cloudflare's bot detection strategy focuses on building an ecosystem based on Trust, providing incentives and primitives for site owners to incentivize behavior that makes the Internet safer. The company has launched Precursor, a continuous client-side system to detect inhuman bot traffic, which evaluates user behavior continuously throughout the session. Precursor provides Trust-based detection, drives up the cost for bot developers to replicate human behavior, and has seen 206 million evaluation events across 73,438 zones on the Cloudflare network since launch.

NetworkingSecurity
1 min
Cloudflare24d ago

Introducing Radar Researcher: An AI tool for exploring Internet data in plain language

Here's a concise summary of the article in 2-3 sentences: Cloudflare introduces Radar Researcher, an AI-powered tool that enables users to explore Internet data in plain language, eliminating the need for manual data queries and complex APIs. Using Radar Researcher, users can ask questions and receive interactive visualizations and explanations based on data from Cloudflare's global network. The tool is designed to cater to both curious novices and technical experts, making it easier to access and analyze complex data without requiring extensive technical knowledge.

NetworkingSecurity
1 min
Cloudflare24d ago

Announcing Cloudflare Ambassadors, Community Engineers, and another $1M in open-source funding

Cloudflare introduces Cloudflare Ambassadors to support community builders sharing the platform with their networks, providing resources and credits to host events and create content. Ambassadors will also receive a visible role in Cloudflare's online community spaces, including Discord. Applications for the Ambassador program are open from now until September 6. Cloudflare doubles down on supporting open-source contributors by introducing Cloudflare Community Engineers, who will receive grants from a $1M funding pool to support their ongoing work in open-source projects. The program has no maximum term, focusing on the long-term needs of maintainers and contributors. The Community Engineer program complements existing efforts to support open-source projects and maintainers.

NetworkingSecurity
1 min
Cloudflare24d ago

Unifying Workers AI and AI Gateway into a single AI control plane

Cloudflare unified Workers AI and AI Gateway into a single AI control plane, offering a unified entrypoint and automating observability and control for Workers AI users. This convergence enables users to connect to any model provider, manage observability, billing, security, and logging from a single control plane, and use AI Gateway credits for Workers AI usage. With this new architecture, users can request models without specifying the provider, allowing for better resiliency and flexibility.

NetworkingSecurity
1 min
Cloudflare25d ago

The next generation of MCP

Here's a 3-sentence summary of the post: The latest Model Context Protocol (MCP) specification has transitioned to a fully stateless protocol, eliminating the need for sticky sessions and reducing infrastructure complexity. This change allows MCP servers to run in Cloudflare Workers without stateful infrastructure, simplifying deployment, scaling, and maintenance, and providing operational simplicity and cost savings. The new specification also introduces Multi Round-Trip Requests (MRTR) for interactions like elicitation, requires Mcp-Method and Mcp-Name headers, and tightens authorization with pre-registration, Client ID Metadata Documents, and Dynamic Client Registration.

NetworkingSecurity
1 min