company
Cloudflare is a global cloud platform offering CDN, DNS, security, and edge computing services, including Workers, R2 storage, and Pages for developers.
No evidence-backed relationships are recorded.
Investigator JP says Tronify.rent took $69,651 from about 80 crypto users in September and that Google Gemini told one victim the site appeared safe. PhishDestroy had already scored the domain a critical 90/100 threat before that money went to the site.
Reality
Cloudflare plans to become a public certificate authority and start production issuance of post-quantum Merkle Tree Certificates in the first quarter of 2027. Teams planning a post-quantum migration now have an issuer-side date to test web PKI against.
Perspective Coverage
4 publishersReality
Cloudflare put Artifacts, a Git platform for AI agents, into open beta with three primitives: repo event subscriptions, Workers bindings and region controls. The detail comes from a third-party dev.to write-up, and its latency and residency claims still need confirming in Cloudflare's documentation.
Reality
Cloudflare made its Data Platform generally available as Basin, three serverless services that ingest, catalog and query Apache Iceberg tables on R2. Outside Iceberg engines read the same tables, so Workers teams can price Basin SQL against a warehouse on identical data.
Perspective Coverage
3 publishersReality
Cisco Talos links China-nexus UAT-11587 to 16 affected or targeted institutions in eight Asian countries, via a backdoor run through Microsoft 365. Its commands move through Outlook and OneDrive via Microsoft Graph, so defenders have no command server to block.
Perspective Coverage
3 publishersReality
Cloudflare's Issues for Workers, in open beta since September 30, can send grouped production errors and the affected Worker version to a coding agent. A dev.to walkthrough argues each failure needs sorting first, since a correct refusal can arrive looking like a bug.
Reality
NSA has moved its post-quantum deadline for National Security Systems to 2027, two years ahead of Cloudflare, Google and Microsoft, a dev.to post reports. That account is secondhand, so whether suppliers to those systems have to re-plan their migrations depends on what the agency's own statement says.
Reality
Cloudflare released two Jev-API-compatible decision models, Clef and Clef-flash, on Workers AI and as Apache 2.0 weights on Hugging Face. Typed classification steps in agent code can now move between providers or onto owned hardware, as long as they stay inside the text-only, 32k-context features Jev supports.
Perspective Coverage
3 publishersReality
Cloudflare now sells web search from Ceramic.ai, Exa and Linkup through AI Gateway at partner list prices, billed from gateway credits with no markup. Teams already on the gateway skip a separate search vendor account, though their agents still have to issue each search call.
Reality
Prime Minister Mark Carney named 13 advisers to an AI council on October 2, with homegrown champions and sovereign infrastructure among its five priorities. It cannot spend or legislate, so its sway over procurement depends on ministers acting on what it recommends.
Reality
Cloudflare put its Monetization Gateway into closed beta, letting domain owners charge AI agents per request via HTTP 402, with four use cases in production. Cloudflare scopes it to APIs, tools and data, where each request is a single use.
Perspective Coverage
3 publishersReality
Zscaler found Ledger phishing ads running under a verified Google advertiser, with Vercel redirect domains rotating every 15 to 20 minutes. The ad displayed google.com and the pages sat on Google and Vercel hosting, so domain reputation and the verified badge gave defenders little to catch.
Reality
Cloudflare's BEACON real-user data from about 10,000 large sites shows poor-LCP pages spending 1,891ms waiting for HTML and 2,002ms in render delay. Good pages spend 598ms and 157ms there, so sites like the sample should fix the server and rendering before they compress images.
Reality
Shopify added WebMCP checkout tools on September 28 that update payment and place an order once the buyer confirms. The spec is still a draft with no Firefox or Safari implementation, so tools belong on the open session behind a review step.
Reality
Cloudflare has put Traces into open beta, recording each supported step a request takes through its edge as an OpenTelemetry span. The spans export to any OTLP endpoint, so edge decisions can sit in the tracing backend a team already runs.
Reality
Cloudflare launched an Early Access fraud dashboard built on per-account login and signup histories, arguing AI-faked identities now beat one-time checks. How much it catches depends on how much of a site's login traffic Cloudflare's edge actually sees.
Reality
Cloudflare has opened Logpush, once Enterprise-only, to Free, Pro and Business customers on self-service pay-as-you-go pricing. Small teams can now send edge logs to their own tools without a contract, though the company concedes its year-old pledge to open every feature is unfinished.
Reality
Cloudflare returned a 403 from ChatGPT's front page to a VPS address listed on zero of eight spam blocklists, a dev.to author's test found. The author argues no blocklist query predicts that block, so automation sent to ChatGPT from a cloud host needs a test run from the address itself.
Reality
Cloudflare's cloudflared 2026.9.3 adds an --allowed-mail flag that limits a Quick Tunnel to approved email addresses via a one-time PIN. Public stays the default, so the safeguard works only if whoever starts the tunnel, increasingly a coding agent, adds the flag.
Reality
Cloudflare will sell an Oblivious HTTP gateway as a paid zone add-on from this fall, with a closed beta open now. It handles the decrypting half of a protocol built for two operators, and Cloudflare pitches it on lower latency than a self-run gateway.
Reality
Build · October 2, 2026 · 1 publisher
Build · October 2, 2026 · 3 publishers
Build · October 1, 2026 · 1 publisher
Build · October 1, 2026 · 1 publisher
Build · October 1, 2026 · 1 publisher
Build · September 30, 2026 · 1 publisher
Build · October 1, 2026 · 1 publisher
Build · October 1, 2026 · 1 publisher
Build · October 1, 2026 · 1 publisher
Build · October 1, 2026 · 1 publisher
Build · October 1, 2026 · 1 publisher
Security · September 29, 2026 · 2 publishers
Build · September 30, 2026 · 1 publisher
Security · September 30, 2026 · 1 publisher
Build · September 30, 2026 · 1 publisher
Build · September 30, 2026 · 1 publisher
Build · September 30, 2026 · 1 publisher
Build · September 30, 2026 · 1 publisher
Build · September 30, 2026 · 1 publisher
Build · September 30, 2026 · 1 publisher
Build · September 30, 2026 · 2 publishers
Build · September 29, 2026 · 1 publisher
Build · September 29, 2026 · 1 publisher
Build · September 29, 2026 · 2 publishers
Invest · September 29, 2026 · 1 publisher
Product · September 29, 2026 · 1 publisher
Leadership · September 28, 2026 · 2 publishers
Invest · September 29, 2026 · 1 publisher
Product · September 28, 2026 · 4 publishers
Build · September 28, 2026 · 1 publisher
Product · September 28, 2026 · 1 publisher
Invest · September 28, 2026 · 1 publisher
Build · September 28, 2026 · 3 publishers
Build · September 28, 2026 · 1 publisher
Build · September 28, 2026 · 1 publisher
Build · September 28, 2026 · 1 publisher
Build · September 27, 2026 · 1 publisher
Build · September 27, 2026 · 1 publisher
Security · September 24, 2026 · 2 publishers
Security · September 24, 2026 · 3 publishers