
Welcome to the 23rd edition of Cloudflare’s Quarterly DDoS Threat Report. This report offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. In this edition, we focus on the third quarter of 2025.

Cloudflare offers protection against a new high profile vulnerability for React Server Components: CVE-2025-55182. All WAF customers are automatically protected as long as the WAF is deployed.

Firefox Nightly adds CSS anchor positioning support, which you can learn a lot more about in our complete guide.

Chrome 143 has introduced anchored fallback container queries to help us query the currently applied fallback position of anchored elements.
DS
Daniel Schwarz·December 3, 2025Systems 
Use partner-built Copilot agents to debug, secure, and automate engineering workflows across your terminal, editor, and github.com.
GA
Griffin Ashe·December 3, 2025AI & ML 
Our interactive, real-time visualization of sales made by Shopify-powered merchants worldwide—built into a pinball game.

Unconvinced of the value of scrollytelling? Alright, skeptic, let’s first warm up with some common use cases for scroll-based styling.

Learn how one of GitHub’s fastest-growing open source projects is redefining smart homes without the cloud.

CSS Masonry is almost here! Patrick Brosset takes a deep dive into what this long-awaited feature means for web developers and how you could make use of it in your own work.
P
Patrickbrosset·December 2, 2025Frontend 
We recently launched three new features that give you more control to fine-tune your risk and compliance strategy, allowing you to use more of Stripe’s data to inform your approach. Here’s what’s new.

Today, we’re excited to announce that Replicate is officially part of Cloudflare. We wanted to share a bit about our journey and why we made this decision.
AJ
Andreas Jansson, Ben Firshman·December 1, 2025Engineering 
Black Friday might be over but you can still save big on any of Piccalilli's CSS, JavaScript, or UX courses until December 9th, 2025.
DS
Daniel Schwarz·December 1, 2025Frontend 
Bramus:

Run multiple Copilot agents from one place. Learn prompt techniques, how to spot drift early, and how to review agent work efficiently.
MN
Matt Nigh·December 1, 2025AI & ML 
Slack’s Security Engineering team is responsible for protecting Slack’s core infrastructure and services. Our security event ingestion pipeline handles billions of events per day from a diverse array of data sources. Reviewing alerts produced by our security detection system is our primary responsibility during on-call shifts. We’re going to show you how we’re using AI…
DMDominic Marks·December 1, 2025Security 
This is part 3 in our series about Spotify's journey with background coding agents (internal codename: “Honk”) and the future of large-scale software maintenance. See also , , and .
MCMax Charas and Marc Bruggmann·December 1, 2025Distributed 
Vercel Marketplace adds Aurora PostgreSQL, Amazon DynamoDB, Aurora DSQL, available December 15. One-click provisioning, zero-config setup, and full v0 support.

With December just around the corner, how about some new desktop wallpapers to welcome the last month of the year — and the holiday season, if you’re celebrating? Our latest edition of monthly wallpapers has got you covered. Enjoy!

BGBrendan Gregg·November 28, 2025AI & ML 
Finding the perfect gift for your favorite developer is easy with our top tips.

CAPTCHAs were meant to keep bots out, but too often, they lock people with disabilities out, too. From image classification to click-based tests, many “human checks” are anything but inclusive. There’s no universal solution, but understanding real user needs is where accessibility truly starts.
EH
Eleanor Hecks·November 27, 2025Security 
Aaron Veale, the founder of the mission-driven marketplace startup Planet Food, turned to Figma Make to build a product within weeks.

FLUX.2 [dev] by Black Forest Labs is now on Workers AI! This advanced open-weight image model offers superior photorealism, multi-reference inputs, and granular control with JSON prompting.
MD
Michelle, David Liu·November 25, 2025AI & ML 
This blog talks aggregations in PostgreSQL version 19. Read in, check use cases and learn more about the feature.