Developer Week 2024 wrap-up
Developer Week 2024 has officially come to a close. Here’s a quick recap of the announcements and in-depth technical explorations that went out last week
Major data center power failure (again): Cloudflare Code Orange tested
Just four months after a complete power outage at a critical data center we were hit with the exact same scenario. Here’s how we did this time, and what’s next
Browser Rendering API GA, rolling out Cloudflare Snippets, SWR, and bringing Workers for Platforms to all users
Browser Rendering API is now available to all paid Workers customers with improved session management
Cloudflare acquires Baselime to expand serverless application observability capabilities
Today, we’re thrilled to announce that Cloudflare has acquired Baselime, a serverless observability company
Community Update: empowering startups building on Cloudflare and creating an inclusive community
We’re excited to close out Developer Week by sharing updates on our Workers Launchpad program, our latest Developer Challenge, and the work we’re doing to ensure our community spaces – like our Discord and Community forums – are safe and inclusive for all developers
We've added JavaScript-native RPC to Cloudflare Workers
Cloudflare Workers now features a built-in RPC (Remote Procedure Call) system for use in Worker-to-Worker and Worker-to-Durable Object communication, with absolutely minimal boilerplate. We've designed an RPC system so expressive that calling a remote service can feel like using a library
What’s new with Cloudflare Media: updates for Calls, Stream, and Images
With Cloudflare Calls in open beta, you can build real-time, serverless video and audio applications. Cloudflare Stream lets your viewers instantly clip from ongoing streams
Announcing Pages support for monorepos, wrangler.toml, database integrations and more!
Today, we’re launching four improvements to Pages that bring functionality previously restricted to Workers, with the goal of unifying the development experience between the two. Support for monorepos, wrangler.toml, new additions to Next.js support and database integrations
Cloudflare Calls: millions of cascading trees all the way down
Cloudflare Calls is a serverless SFU and TURN service running at Cloudflare’s edge. It’s now in open beta and costs $0.05/ real-time GB. It’s 100% anycast WebRTC
R2 adds event notifications, support for migrations from Google Cloud Storage, and an infrequent access storage tier
We’re excited to announce three new features for Cloudflare R2: event notifications, support for migrations from Google Cloud Storage, and an infrequent access storage tier
Improving Cloudflare Workers and D1 developer experience with Prisma ORM
Together, Cloudflare and Prisma make it easier than ever to deploy globally available apps with a focus on developer experience. To further that goal, Prisma ORM now natively supports Cloudflare Workers and D1 in Preview
Data Anywhere with Pipelines, Event Notifications, and Workflows
We make it easy to build scalable, reliable, data-driven applications, so we’re announcing a new Event Notifications framework; our take on durable execution; and a streaming ingestion service.
How Picsart leverages Cloudflare's Developer Platform to build globally performant services
Picsart, one of the world’s largest digital creation platforms, encountered performance challenges in catering to its global audience.
Continuing our work with CISA and the Joint Cyber Defense Collaborative to keep vulnerable communities secure online
Along with CISA and the Joint Cyber Defense Collaborative, we are spotlighting threats to civil society, best practices for online protection, and new resources specifically for these vulnerable
Building D1: a Global Database
D1, Cloudflare’s SQL database, is now generally available.
Making state easy with D1 GA, Hyperdrive, Queues and Workers Analytics Engine updates
We kick off the week with announcements that help developers build stateful applications on top of Cloudflare, including making D1, our SQL database and Hyperdrive, our database accelerating service, generally available
Why Workers environment variables contain live objects
Bindings don't just reduce boilerplate. They are a core design feature of the Workers platform which simultaneously improve developer experience and application security in several ways. Usually these two goals are in opposition to each other, but bindings elegantly solve for both at the same time
Welcome to Developer Week 2024
We’re kicking off 2024’s Developer Week, and we’re excited to welcome you to the week and give you a small preview of what to expect, and how we’re thinking about the future of our platform
Minimizing on-call burnout through alerts observability
Learn how Cloudflare used open-source tools to enhance alert observability, leading to increased resilience and improved on-call team well-being
From .com to .beauty: The evolving threat landscape of unwanted email
In this 2023-early 2024 email analysis, we examine how certain generic Top-Level Domains (TLDs) are primarily used for spam and phishing, and their evolution over a year.
Autonomous hardware diagnostics and recovery at scale
Operating hardware in 310 cities in 120 countries means that hardware can break anywhere and anytime. Detecting and managing server failure at scale requires automation. Here's how we automated
Introducing WARP Connector: paving the path to any-to-any connectivity
Starting today, Zero Trust administrators can deploy our new WARP Connector for simplified any-to-any connectivity
Redefining fleet management at Cloudflare
Growing pains were inevitable given the sheer pace of Cloudflare’s growth. Processes around server provisioning, maintenance windows, repairs, and diagnostics reporting were reaching their limits
Improved Cloudflare Workers testing via Vitest and workerd
Today, we’re excited to announce a new Workers Vitest integration - allowing you to write unit and integration tests via the popular testing framework, Vitest, that execute directly in our runtime, workerd
Mitigating a token-length side-channel attack in our AI products
The Workers AI and AI Gateway team recently collaborated closely with security researchers at Ben Gurion University regarding a report submitted through our Public Bug Bounty program. Through this process, we discovered and fully patched a vulnerability affecting all LLM providers. Here’s the story
Undersea cable failures cause Internet disruptions for multiple African countries
Internet connectivity in several African countries was disrupted on March 14, 2024, beginning at approximately 05:00 UTC. Based on published reports and social media posts from impacted network providers, the disruption is believed to be due to multiple undersea cable failures in the region
Upcoming Let’s Encrypt certificate chain change and impact for Cloudflare customers
Let’s Encrypt’s cross-signed chain will be expiring. To prepare for, Cloudflare will issue certs from Let’s Encrypt’s ISRG X1 chain. This change impacts legacy devices with outdated trust stores.
Security Week 2024 wrap up
A summary of the blog posts and product announcements released during Security Week 2024
Log Explorer: monitor security events without third-party storage
With the combined power of Security Analytics + Log Explorer, security teams can analyze, investigate, and monitor for security attacks natively within Cloudflare, reducing time to resolution and overall cost of ownership for customers by eliminating the need to forward logs to third-party SIEMs
Harnessing chaos in Cloudflare offices
This blog post will cover the new sources of “chaos” that have been added to LavaRand and how you can make use of that harnessed chaos in your next application
Launching email security insights on Cloudflare Radar
The new Email Security section on Cloudflare Radar provides insights into the latest trends around threats found in malicious email, sources of spam and malicious email, and the adoption of technologies designed to prevent abuse of email
Protocol detection with Cloudflare Gateway
Cloudflare Gateway, our secure web gateway (SWG), now supports the detection, logging, and filtering of network protocols using packet payloads without the need for inspection
Network performance update: Security Week 2024
Cloudflare is the fastest provider in 44% of networks around the world for 95th percentile connection time. Let’s dig into the data and talk about how we do it
Introducing Requests for Information (RFIs) and Priority Intelligence Requirements (PIRs) for threat intelligence teams
Our Security Center now houses Requests for Information (RFIs) and Priority Intelligence Requirements (PIRs). These features are available via API as well and Cloudforce One customers can start leveraging them today for enhanced security analysis
Cloudflare’s URL Scanner, new features, and the story of how we built it
Discover the enhanced URL Scanner API: Now with direct access from the Security Center Investigate Portal, enjoy unlisted scans, multi-device screenshots, and seamless integration within the Cloudflare ecosystem
Cloudflare protects global democracy against threats from emerging technology during the 2024 voting season
In 2024, more than 80 national elections are slated to occur, directly impacting approximately 4.2 billion individuals. At Cloudflare, we’re ready to support a range of players in the election space
Advanced DNS Protection: mitigating sophisticated DNS DDoS attacks
We're proud to introduce the Advanced DNS Protection system, a robust defense mechanism designed to protect against the most sophisticated DNS-based DDoS attacks
Building secure websites: a guide to Cloudflare Pages and Turnstile Plugin
Learn how to use Cloudflare Pages and Turnstile to deploy your website quickly and easily while protecting it from bots, without compromising user experience. Follow our tutorial here for a seamless integration
Free network flow monitoring for all enterprise customers
Today, we’re excited to announce that a free version of Cloudflare’s network flow monitoring product, Magic Network Monitoring, is now available to all Enterprise Customers
Collect all your cookies in one jar with Page Shield Cookie Monitor
Protecting online privacy starts with knowing what cookies are used by your websites. Page Shield extends transparent monitoring to HTTP cookies, empowering security and compliance teams with an easy overview without the need for an external scanner, nor changing existing web applications
Magic Cloud Networking simplifies security, connectivity, and management of public clouds
Introducing Magic Cloud Networking, a new set of capabilities to visualize and automate cloud networks to give our customers secure, easy, and seamless connection to public cloud environments
Linux kernel security tunables everyone should consider adopting
This post illustrates some of the Linux Kernel features, which are helping us to keep our production systems more secure. We will deep dive into how they work and why you may consider enabling them as well
Cloudflare treats SASE anxiety for VeloCloud customers
The turbulence in the SASE market is driving many customers to seek help. We’re doing our part to help VeloCloud customers who are caught in the crosshairs of shifting strategies
Eliminate VPN vulnerabilities with Cloudflare One
The Cybersecurity & Infrastructure Security Agency (CISA) recently issued an Emergency Directive due to the Ivanti Connect Secure and Policy Secure vulnerabilities. In this blog, we discuss the threat actor tactics exploiting these vulnerabilities
Simplifying how enterprises connect to Cloudflare with Express Cloudflare Network Interconnect
Express Cloudflare Network Interconnect makes it fast and easy to connect your network to Cloudflare. Customers can now order Express CNIs directly from the Cloudflare dashboard, and they will be ready to use in 3 minutes. Express CNI also simplifies setting up Magic Transit and Magic WAN
Zero Trust WARP: tunneling with a MASQUE
This blog discusses the introduction of MASQUE to Zero Trust WARP and how Cloudflare One customers will benefit from this modern protocol
Secure your unprotected assets with Security Center: quick view for CISOs
Today we are excited to introduce a new set of capabilities within the Security Center to directly address a common challenge: ensuring comprehensive deployment across your infrastructure. Gain precise insights into where and how to optimize your security posture
Securing Cloudflare with Cloudflare: a Zero Trust journey
A deep dive into how we have deployed Zero Trust at Cloudflare while maintaining user privacy
Simpler migration from Netskope and Zscaler to Cloudflare: introducing Deskope and a Descaler partner update
Today, Cloudflare is excited to expand the Descaler program to Authorized Service Delivery Partners (ASDPs) who will now have exclusive access to the Descaler toolkit. Cloudflare is also launching Deskope, a new set of tooling to also help migrate existing Netskope customers to Cloudflare One
Protecting APIs with JWT Validation
Cloudflare customers can now protect their APIs from broken authentication attacks by validating incoming JSON Web Tokens (JWTs) with API Gateway
Announcing two highly requested DLP enhancements: Optical Character Recognition (OCR) and Source Code Detections
Cloudflare One now supports Optical Character Recognition and detects source code as part of its Data Loss Prevention (DLP) service
Changing the industry with CISA’s Secure by Design principles
Security considerations should be an integral part of software’s design, not an afterthought. Explore how Cloudflare adheres to CISA’s Secure by Design principles to shift the industry
Cloudflare announces Firewall for AI
Cloudflare is one of the first providers to safeguard LLM models and users in the era of AI
Defensive AI: Cloudflare’s framework for defending against next-gen threats
From identifying phishing attempts to protect applications and APIs, Cloudflare uses AI to improve the effectiveness of its security solutions to fight against new and more sophisticated attacks
Cloudflare launches AI Assistant for Security Analytics
Introducing AI Assistant for Security Analytics. Now it is easier than ever to get powerful insights about your web security. Use the new integrated natural language query interface to explore Security Analytics
Introducing behavior-based user risk scoring in Cloudflare One
Cloudflare One is introducing user risk scoring, a new set of capabilities to detect risk based on user behavior, so that you can improve security posture across your organization
Dispelling the Generative AI fear: how Cloudflare secures inboxes against AI-enhanced phishing
Generative AI is being used by malicious actors to make phishing attacks much more convincing. Learn how Cloudflare’s email security systems are able to see past the deception using advanced machine learning models
Navigating the maze of Magecart: a cautionary tale of a Magecart impacted website
E-commerce websites were targeted by a sophisticated Magecart attack, involving a hidden JavaScript code designed to secretly steal Personally Identifiable Information (PII) and credit card details from users
Welcome to Security Week 2024
Cloudflare’s Chief Security Officer introduces 2024 Security Week by sharing insights into the past year of threats, security incidents and key priorities and concerns for global CISOs
polyfill.io now available on cdnjs: reduce your supply chain risk
Polyfill.io is now available on cdnjs to reduce the risk of supply chain attacks. Replace your polyfill.io links today for a seamless experience
