News
Announcing Cloudflare Account Abuse Protection: prevent fraudulent attacks from bots and humans
1+ mon, 1+ day ago (516+ words) Website owners need the tools to stop abuse on their website, no matter who it's coming from. During our Birthday Week in 2024, we gifted leaked credentials detection to all customers, including everyone on a Free plan. Since then, we've added…...
Ending the "silent drop": how Dynamic Path MTU Discovery makes the Cloudflare One Client more resilient
1+ mon, 1+ week ago (439+ words) Today, we are moving past these legacy networking constraints. By implementing Path MTU Discovery (PMTUD), the Cloudflare One Client has shifted from a passive observer to an active participant in path discovery. Dynamic Path MTU Discovery allows the client to…...
How Automatic Return Routing solves IP overlap
1+ mon, 1+ week ago (1037+ words) The public Internet relies on a fundamental principle of predictable routing: a single IP address points to a logically unique destination. Even in an Anycast architecture like Cloudflare's, where one IP is announced from hundreds of locations, every instance of…...
Always-on detections: eliminating the WAF "log versus block" trade-off
1+ mon, 1+ week ago (1284+ words) Teams are forced into a trade-off: visibility in log mode, or protection in block mode. When a rule blocks a request, evaluation stops, and you lose visibility into how other signatures would have assessed it " valuable insight that could have…...
ASPA: making Internet routing more secure
1+ mon, 2+ week ago (1323+ words) To help the community track the rollout of this standard, Cloudflare Radar has introduced a new ASPA deployment monitoring feature. This view allows users to observe ASPA adoption trends over time across the five Regional Internet Registries (RIRs), and view…...
Bringing more transparency to post-quantum usage, encrypted messaging, and routing security
1+ mon, 2+ week ago (958+ words) Cloudflare Radar already offers a wide array of security insights " from application and network layer attacks, to malicious email messages, to digital certificates and Internet routing. And today we're introducing even more. We are launching several new security-related data sets…...
Cloudflare One is the first SASE offering modern post-quantum encryption across the full platform
1+ mon, 2+ week ago (1042+ words) During Security Week 2025, we launched the industry's first cloud-native post-quantum Secure Web Gateway (SWG) and Zero Trust solution, a major step towards securing enterprise network traffic sent from end user devices to public and private networks. But this is only…...
Introducing Markdown for Agents
2+ mon, 1+ day ago (927+ words) The way content and businesses are discovered online is changing rapidly. In the past, traffic originated from traditional search engines, and SEO determined who got found first. Now the traffic is increasingly coming from AI crawlers and agents that demand…...
Cloudflare outage on December 5, 2025
4+ mon, 1+ week ago (1128+ words) On December 5, 2025, at 08: 47 UTC (all times in this blog are UTC), a portion of Cloudflare's network began experiencing significant failures. The incident was resolved at 09: 12 (~25 minutes total impact), when all services were fully restored. A subset of customers were impacted,…...
Cloudflare's 2025 Q3 DDo S threat report -- including Aisuru, the apex of botnets
4+ mon, 1+ week ago (1223+ words) Welcome to the 23rd edition of Cloudflare's Quarterly DDo S Threat Report. This report offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDo S) attacks based on data from the Cloudflare network. In this edition, we…...