Inside a Brute-Force Campaign Against wp-login
A walkthrough of what a real credential-stuffing attack against wp-login.php looks like in the access logs, and the layered defenses that turn it from a threat into a non-event.
Tag
cloudflare
All posts in this stream, newest first.
Why ML-DSA Will Have to Do for the Post-Quantum Signature Transition
Cloudflare explains why next-generation post-quantum signature algorithms will not arrive in time for the first migration wave, and why ML-DSA is the practical choice today.
Cloudflare Builds Meerkat, a Leaderless Global Consensus Service
Cloudflare's research team has developed Meerkat, an experimental distributed consensus service built on the QuePaxa algorithm, designed to eliminate the leader-timeout failures that have caused real incidents across its 330-plus data centers.
DV, OV, EV: TLS Certificate Types and What Browsers Actually Show
The padlock looks the same no matter which certificate sits behind it. Here is what DV, OV, and EV actually verify, and why automated free certificates are the right call for nearly every WordPress site.
Cloudflare Signs UK Cyber Resilience Pledge as Threats Surge
Cloudflare has joined the UK government's newly launched Cyber Resilience Pledge as a founding signatory, citing rising DDoS volumes and AI-assisted attacks as reasons the framework matters now.
Cloudflare Workers Cache Puts a Tiered Cache in Front of Your Worker
Cloudflare has launched Workers Cache, a tiered caching layer that sits in front of Workers and is configured entirely through Wrangler and standard Cache-Control headers, eliminating CPU charges on cache hits.
Uptime Monitoring That Wakes You Before Customers Notice
A good uptime setup catches a broken checkout or a stalled cron job long before a support ticket does. Here is how to pick check intervals, monitoring locations, and alert routing that actually works.
Cloudflare Launches Attribution Business Insights for AI Crawler Traffic
Cloudflare has released a new dashboard giving publishers granular data on AI crawler behavior, including crawl-to-referral ratios that expose just how extractive bot traffic has become.
Bandwidth, Transfer, and ‘Unlimited’: Reading Hosting Fine Print
A plain-language guide to what hosting plans actually meter, what fair-use clauses really mean, and how to estimate the transfer your WordPress site truly needs.
SEO Spam, Redirect Hacks, and Miners: WordPress Malware Taxonomy
Not all WordPress infections look the same because they aren't built for the same purpose. Here's how to recognize the common categories and what each one is actually trying to do to your site.