Cloudflare, Inc.

New Capabilities

Reported millions of exploit attempts, said none of its customers were affected, and issued firewall mitigations as a stopgap

Palo Alto Networks confirmed that attackers chained the PHP2Shell flaws with a Linux kernel bug to take root control of its firewalls, and shipped hotfixes for PAN-OS 12.2, 12.1, 11.2, 11.1 and 10.2. Unit 42, the company's threat research arm, said it independently verified the tooling and results that Dream Security described.

Updated Nov 1

Money Moves

Acquirer of Deno

Cloudflare acquired Deno, the startup founded by Node.js creator Ryan Dahl, in a deal announced October 9. Deno's runtime gets a year of maintenance, Deno Deploy shuts down in six months, and the team moves to Cloudflare.

Updated Oct 18

Rule Changes

As of October 2026: Won the Paris court ruling; 1.1.1.1 remains unblocked

A Paris court has refused to fine Cloudflare for leaving its public DNS resolver 1.1.1.1 out of court-ordered piracy blocking. Canal+ wanted €50,000 a day for every pirate Formula 1 and MotoGP site that stayed reachable through the resolver.

Updated Oct 11

New Capabilities

As of September 2026: Deploys Privacy Pass, a blind RSA protocol affected by the attack model

RSA's security rests on a simple bet: factoring a 1024-bit number takes 500,000 to 1 million CPU core-years. A research team just went around the bet, forging 1024-bit RSA signatures in 1,380 core-years without factoring the key at all.

Updated Sep 26

Built World

As of May 2026: Origin point of February 2026 cascading outage

On February 16, 2026, a misconfigured routing update at Cloudflare's Ashburn data center cascaded across the internet, taking down X for three hours and degrading AWS's largest region. Thousands of other websites went down too. The error took 40 minutes to identify but four hours to fix because corrupted routing tables spread to upstream providers.

Updated May 29

Money Moves

As of May 2026: Building AI content monetization infrastructure

For two years, AI companies have trained their models on web content without paying for most of it. That era may be ending.

Updated May 21

Built World

As of May 2026: Core infrastructure provider facing recurrent outages into 2026

From November 2025 through February 2026, Cloudflare suffered multiple major global outages, including a three-hour disruption on November 18, 2025, a 25–30 minute WAF misconfiguration incident on December 5, 2025, a BGP routing failure on January 22, 2026, and edge network instability on February 4, 2026. These events temporarily took down services like LinkedIn, Zoom, Shopify, Coinbase, ChatGPT, X, Spotify, and others that rely on Cloudflare's edge network, content delivery, and security services, affecting a significant portion of global HTTP traffic during peaks.

Updated May 9