All posts in this stream, newest first.
Cloudflare deployed new firewall rules protecting all customers, including free plans, from an unauthenticated remote code execution flaw and a related SQL injection bug in WordPress. Site owners should still patch immediately.
Stores aren't blogs. Here's which pages must stay dynamic, how object caching and edge rules work together, and how to speed up a WooCommerce site without corrupting carts or showing stale prices.
Before you trust any before-and-after speed number, you need to know whose cache you tested, where the request came from, and whether a bot skewed the sample.
A subtle timing issue in the hyper HTTP library caused Cloudflare's Images service to silently truncate large image responses, and it took a six-week investigation to track down a fix that was just four lines of code.
Cloudflare Workflows now lets developers define rollback logic directly inside each step, replacing manual compensation code with built-in, durable undo handling when a workflow fails.
A walkthrough of what a real credential-stuffing attack against wp-login.php looks like in the access logs, and the layered defenses that turn it from a threat into a non-event.
Cloudflare explains why next-generation post-quantum signature algorithms will not arrive in time for the first migration wave, and why ML-DSA is the practical choice today.
Cloudflare's research team has developed Meerkat, an experimental distributed consensus service built on the QuePaxa algorithm, designed to eliminate the leader-timeout failures that have caused real incidents across its 330-plus data centers.
The padlock looks the same no matter which certificate sits behind it. Here is what DV, OV, and EV actually verify, and why automated free certificates are the right call for nearly every WordPress site.
Cloudflare has joined the UK government's newly launched Cyber Resilience Pledge as a founding signatory, citing rising DDoS volumes and AI-assisted attacks as reasons the framework matters now.
