Getting root on Ubuntu through wishful thinking
How to exploit a double-free vulnerability in Ubuntu’s accountsservice (CVE-2021-3939)
GitHub’s response to Log4j vulnerability CVE-2021-44228
On Thursday, December 9, 2021, GitHub was made aware of a vulnerability in the Log4j logging framework, CVE-2021-44228.
What’s new from GitHub Changelog? November 2021 recap
We shipped a ton of updates in November, from the push notification for PR review activities on the go, to an easy way to create Markdown links.
GitHub at the UN Internet Governance Forum
Last week, GitHub joined the Internet Governance Forum to spread awareness of developers’ initiatives and public policy interests.
Designing Netflix - High Scalability -
This is a guest post by Ankit Sirmorya. Ankit is working as a Machine Learning Lead/Sr. Machine Learning Engineer at Amazon and has led several machine-learning initiatives across the Amazon ecosystem. Ankit has been working on applying machine learning to solve ambiguous business problems and improve customer experience. For instance, he created a platform for experimenting with different hypothe
SLICK: Adopting SLOs for improved reliability
We would like to thank Peter Tang for all his work on SLICK, and for helping us write this post! To support the people and communities who use our apps and products, we need to stay in constant contact with them. We want to provide the experiences we offer reliably. We also need to establish […]
Building a Real-time Buyer Signal Data Pipeline for Shopify Inbox - Shopify
Shopify Data built a real-time buyer signal data pipeline to show relevant customer information to merchants while they’re chatting with their customers.
Version and Stage Configuration Changes with HTTP Applications in Beta
Today, we are announcing a closed beta of HTTP Applications: a new way to safely test and deploy changes to your HTTP traffic
Updates to Cloudflare Security and Privacy Certifications and Reports
Customer confidence in our ability to handle their sensitive information in an ever-changing regulatory landscape has to be as solid as our offerings, so we have expanded the scope of our previously-existing compliance validations; not only that, we’ve also managed to obtain a couple of new ones.
How Cloudflare Is Solving Network Interconnection for CIOs
Instant network provisioning in over 1000 new locations coming over the next year makes it faster and easier than ever to interconnect with Cloudflare.
What’s new with Notifications?
We know that notifications are incredibly important to our customers. Cloudflare sits in between your Internet property and the rest of the world. When something goes wrong, you want to know right away because it could have a huge impact on your end users.
All the Platform Improvements We’ve Made in 2021 to Make CIOs Lives Easier
While over time best practices and technologies change, we aim to ensure our platform meets the security needs and depth of control that our customers require. In that spirit, we have been busy over the past year delivering important updates to many of our platform services.
How Cloudflare security responded to Log4j 2 vulnerability
Yesterday, December 9, 2021, when a serious vulnerability in the popular Java-based logging package log4j was publicly disclosed, our security teams jumped into action to help respond to the first question and answer the second question. This post explores the second.
Actual CVE-2021-44228 payloads captured in the wild
I wrote earlier about how to mitigate CVE-2021-44228 in Log4j, how the vulnerability came about and Cloudflare’s mitigations for our customers. As I write we are rolling out protection for our FREE customers as well because of the vulnerability’s severity.
Introducing Cloudflare Domain Protection — Making Domain Compromise a Thing of the Past
Today we are announcing secure domain registrations bundled into enterprise contracts.
CVE-2021-44228 - Log4j RCE 0-day mitigation
A zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) was made public on December 9, 2021, that results in remote code execution (RCE).
Argo for Packets is Generally Available
Today, we’re announcing the general availability of Argo for Packets, which provides IP layer network optimizations to supercharge your Cloudflare network services products.
Cloudflare One helps optimize user connectivity to Microsoft 365
Cloudflare One partners with Microsoft to optimize user connectivity to Microsoft 365
Cloudflare announces integrations with MDM companies
Today, we’re excited to announce new integrations with mobile device management vendors Microsoft, Ivanti, JumpCloud, Kandji, and Hexnode to make the deployment of Cloudflare WARP even easier.
Cloudflare Agent — Seamless Deployment at Scale
Today we are excited to announce our zero trust agent now has feature parity across all major platforms.
Secure how your servers connect to the Internet today
The vulnerability disclosed yesterday in the Java-based logging package, log4j, allows attackers to execute code on a remote server. We’ve updated Cloudflare’s WAF to defend your infrastructure against this 0-day attack.
Standardizing Focus Styles With CSS Custom Properties
Take two minutes right now and visit your current project in a browser. Then, using only the Tab key, you should be able to navigate between interactive
Scaling Shopify's BFCM Live Map: An Apache Flink Redesign - Shopify
A deep dive into how Shopify Data revamped the data infrastructure powering our BFCM live map using Apache Flink.
Cloudflare announces partnerships with leading cyber insurers and incident response providers
Cloudflare partners with leading cyber insurers and incident response providers to help customers reduce their insurance premiums and improve cyber risk.
