All news

Cloudflare reworked range-request caching so a video seek no longer pulls a 128 MiB chunk from origin; it now fetches and caches just the needed ranges for large files.

Cloudflare cut the cost of its AI code reviewer by 68 percent, from about 2.46 dollars per review, through caching, model routing and prompt changes.

Cloudflare rolled out WAF rules for the php2shell PHP RCE flaws and notes a related session upload bug, CVE-2026-115560, that affects fully patched PHP.

Private keys for eight widely trusted eMudhra intermediate certificates were compromised on October 19, and Cloudflare explains its response and what users should do.

Cloudflare argues login pages are a key attack surface after the NetScaler flaws and shows how to shield gateways beyond patching.

Cloudflare and VoidZero are incubating tsrs, a Rust port of the TypeScript compiler inside the Oxc toolchain, with the TypeScript team.

Cloudflare WAF now inspects each request together with its response to spot successful exploitation, and adds response rules.

Cloudflare launched a closed beta key manager that keeps decryption keys in chosen regions and protects them with post-quantum cryptography.

Commerce.com and Cloudflare propose structured interfaces so shopping agents can act on storefronts without scraping HTML.