Latest Tech News

Stay updated with the latest in technology, AI, cybersecurity, and more

Filtered by: cloudflare Clear Filter

Microsoft and Cloudflare disrupt massive RaccoonO365 phishing service

Microsoft and Cloudflare have disrupted a massive Phishing-as-a-Service (PhaaS) operation, known as RaccoonO365, that helped cybercriminals steal thousands of Microsoft 365 credentials. In early September 2025, in coordination with Cloudflare's Cloudforce One and Trust and Safety teams, Microsoft's Digital Crimes Unit (DCU) disrupted the cybercrime operation by seizing 338 websites and Worker accounts linked to RaccoonO365. The cybercrime group behind this service (also tracked by Microsoft as

The number of mis-issued 1.1.1.1 certificates grows. Here’s the latest.

Wednesday’s discovery of three mis-issued TLS certificates for Cloudflare’s 1.1.1.1 encrypted DNS lookup service generated intense interest and concern among Internet security practitioners. The revelation raised the possibility that an unknown entity had obtained the cryptographic equivalent of a skeleton key that could be used to surreptitiously decrypt millions of users’ DNS queries that were encrypted through DNS over TLS or DNS over HTTPS. From there, the scammers could have read queries or

Cloudflare stops new world's largest DDoS attack over Labor Day weekend

Hollie Adams/Bloomberg via Getty Images Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways The biggest, baddest DDoS attack to date was just fended off. The attack used the trivial, but nasty, UDP flood attack. You must protect yourself against DDoS attacks. Over the Labor Day weekend, Cloudflare says it successfully stopped a record-breaking distributed denial-of-service (DDoS) attack that peaked at 11.5 terabits per second (Tbps). This came only a few months afte

Cloudflare hit by data breach in Salesloft Drift supply chain attack

Cloudflare is the latest company impacted in a recent string of Salesloft Drift breaches, part of a supply-chain attack disclosed last week. The internet giant revealed on Tuesday that the attackers gained access to a Salesforce instance it uses for internal customer case management and customer support, which contained 104 Cloudflare API tokens. Cloudflare was notified of the breach on August 23, and it alerted impacted customers of the incident on September 2. Before informing customers of t

Cloudflare blocks largest recorded DDoS attack peaking at 11.5 Tbps

Internet infrastructure company Cloudflare said it recently blocked the largest recorded volumetric distributed denial-of-service (DDoS) attack, which peaked at 11.5 terabits per second (Tbps). In volumetric DDoS attacks, attackers overwhelm the target with massive amounts of data, consuming the bandwidth or exhausting system resources, leaving legitimate users with no access to the targeted servers and services. "Cloudflare's defenses have been working overtime. Over the past few weeks, we've

Amazon disrupts Russian APT29 hackers targeting Microsoft 365

Researchers have disrupted an operation attributed to the Russian state-sponsored threat group Midnight Blizzard, which sought access to Microsoft 365 accounts and data. Also known as APT29, the hacker group compromised websites in a watering hole campaign to redirect selected targets "to malicious infrastructure designed to trick users into authorizing attacker-controlled devices through Microsoft’s device code authentication flow." The Midnight Blizzard threat actor has been linked to Russia

Cloudflare incident on August 21, 2025

6 min read On August 21, 2025, an influx of traffic directed toward clients hosted in the Amazon Web Services (AWS) us-east-1 facility caused severe congestion on links between Cloudflare and AWS us-east-1. This impacted many users who were connecting to or receiving connections from Cloudflare via servers in AWS us-east-1 in the form of high latency, packet loss, and failures to origins. Customers with origins in AWS us-east-1 began experiencing impact at 16:27 UTC. The impact was substantial

The first Media over QUIC CDN: Cloudflare

published 8/21/2025 The First MoQ CDN: Cloudflare 🚨 It’s finally happening! 🚨 Cloudflare has just announced their Media over QUIC CDN! It’s an official product, and you can test MoQ on their massive, anycast network. Try it out, and convince your boss’ boss that the writing is on the wall. If you’ve been living under a rock, MoQ is an up-and-coming standard for live media, aiming to supplant WebRTC, HLS/DASH, and even RTMP/SRT as the one to rule them all. And now Cloudflare wins the award fo

Arch Linux remains under attack as DDoS enters week 2 - here's a workaround

atese/iStock/Getty Images Plus via Getty Images Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways All Arch Linux sites are under attack. No one knows why Arch is getting smacked around. You can get Arch Linux files and programs from GitHub. Although not well-suited for new users, Arch Linux is a popular distro with a passionate fan base. So, why has someone been knocking down the Arch Linux site repeatedly for over a week now with an ongoing distributed denial-o

The First Media over QUIC CDN: Cloudflare

published 8/21/2025 The First MoQ CDN: Cloudflare 🚨 It’s finally happening! 🚨 Cloudflare has just announced their Media over QUIC CDN! It’s an official product, and you can test MoQ on their massive, anycast network. Try it out, and convince your boss’ boss that the writing is on the wall. If you’ve been living under a rock, MoQ is an up-and-coming standard for live media, aiming to supplant WebRTC, HLS/DASH, and even RTMP/SRT as the one to rule them all. And now Cloudflare wins the award fo

Cloudflare Is Not a CDN

I love Cloudflare. I’ve always been a fan of their service and their generous free plan, which they’ve never backtracked from. They still offer unlimited bandwidth with very few limitations. Users have stories about serving terabytes of data per day without Cloudflare knocking on their door to upgrade. We, too, use Cloudflare under the hood, which enables us to offer unlimited bandwidth for our users as well. This might make people wonder: Why pay for a CDN when Cloudflare is free? When I star

OpenFreeMap survived 100k requests per second

I was about to post about how nice the last 10 months of OpenFreeMap have been. The architecture has really proven itself to be great, Cloudflare has agreed to sponsor the bandwidth, Hetzner servers are super stable as always, serving tiles from Btrfs proved to be a great choice, nginx is amazing, and life is good. Then, out of the blue, I'm getting reports that some tiles are not loading, which normally means tile generation bugs, but not this time. I look into the nginx logs and see this: 20

Debugging a mysterious HTTP streaming issue

The Problem We recently encountered a frustrating issue with HTTP response streaming at Mintlify. Our system uses the AI SDK with the Node stream API to forward streams, and suddenly things stopped working properly. The symptoms were confusing: streaming worked perfectly with cURL and Postman, but failed completely with node-fetch and browser fetch. ‍ Initial Investigation Our first hypothesis centered around stream compatibility issues. We suspected the problem might be related to how the AI

The War for the Web Has Begun

A high-stakes war has just broken out over the future of the internet. In one corner is Cloudflare, a giant of web infrastructure that acts as a gatekeeper for a huge portion of online traffic. In the other is Perplexity, a darling of the AI world, a search engine threatening to upend Google’s dominance. The accusation is explosive: Cloudflare claims Perplexity is a bad actor, a rogue bot that ignores the internet’s oldest rules to secretly scrape data from websites that have explicitly told it

Perplexity says Cloudflare's accusations of 'stealth' AI scraping are based on embarrassing errors

Elyse Betters Picaro / ZDNET ZDNET's key takeaways Cloudflare claims Perplexity ignores websites' wishes in its content hunt. Other AI companies, such as OpenAI, don't wipe content, Cloudflare says Cloudflare now offers services to block aggressive AI crawlers. Perplexity is denying Cloudflare's claims. Cloudflare, a leading content delivery network (CDN) company, has accused the AI startup Perplexity of evading websites' "no crawl" directives by stealthily deploying web crawlers to scrape

Some people are defending Perplexity after Cloudflare ‘named and shamed’ it

When Cloudflare accused AI search engine Perplexity of stealthily scraping websites on Monday, while ignoring a site’s specific methods to block it, this wasn’t a clear-cut case of an AI web crawler gone wild. Many people came to Perplexity’s defense. They argued that Perplexity accessing sites in defiance of the website owner’s wishes, while controversial, is acceptable. And this is a controversy that will certainly grow as AI agents flood the internet: Should an agent accessing a website on b

Perplexity is sneaking onto websites to scrape blocked content, says Cloudflare

Elyse Betters Picaro / ZDNET ZDNET's key takeaways Cloudflare claimed Perplexity ignores websites' wishes in its content hunt. Cloudflare said other AI companies, such as OpenAI, don't wipe content. Cloudflare now offers services to block aggressive AI crawlers. Cloudflare, a leading content delivery network (CDN) company, has accused the AI startup Perplexity of evading websites' "no crawl" directives by stealthily deploying web crawlers to scrape content from sites that have explicitly bl

Perplexity is allegedly scraping websites it's not supposed to, again

Web crawlers deployed by Perplexity to scrape websites are allegedly skirting restrictions, according to a new report from Cloudflare. Specifically, the report claims that the company's bots appear to be "stealth crawling" sites by disguising their identity to get around robots.txt files and firewalls. Robots.txt is a simple file websites host that lets web crawlers know if they can scrape a websites' content or not. Perplexity's official web crawling bots are "PerplexityBot" and "Perplexity-Us

AI site Perplexity uses “stealth tactics” to flout no-crawl edicts, Cloudflare says

AI search engine Perplexity is using stealth bots and other tactics to evade websites’ no-crawl directives, an allegation that if true violates Internet norms that have been in place for more than three decades, network security and optimization service Cloudflare said Monday. In a blog post, Cloudflare researchers said the company received complaints from customers who had disallowed Perplexity scraping bots by implementing settings in their sites’ robots.txt files and through Web application

Cloudflare says Perplexity’s AI bots are ‘stealth crawling’ blocked sites

is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more. Previously, she was a writer and editor at MUO. Posts from this author will be added to your daily email digest and your homepage feed. The AI search startup Perplexity is allegedly skirting restrictions meant to stop its AI web crawlers from accessing certain websites, according to a report from Cloudflare. In the report, Cloudflare claims that when Perplexity encounters a block, the startup wi

Perplexity accused of scraping websites that explicitly blocked AI scraping

AI startup Perplexity is crawling and scraping content from websites that have explicitly indicated they don’t want to be scraped, according to internet infrastructure provider Cloudflare. On Monday, Cloudflare published research saying it observed the AI startup ignore blocks and hide its crawling and scraping activities. The network infrastructure giant accused Perplexity of obscuring its identity when trying to scrape web pages “in an attempt to circumvent the website’s preferences,” Cloudfl

Cloudflare says 1.1.1.1 outage not caused by attack or BGP hijack

To quash speculation of a cyberattack or BGP hijack incident causing the recent 1.1.1.1 Resolver service outage, Cloudflare explains in a post mortem that the incident was caused by an internal misconfiguration. The outage occurred on July 14 and impacted most users of the service all over the world, rendering internet services unavailable in many cases. “The root cause was an internal configuration error and not the result of an attack or a BGP hijack,” Cloudflare says in the announcement. T

Cloudflare Starts Blocking Pirate Sites for UK Users

Cloudflare has become the first internet intermediary beyond local residential ISPs, to block access to pirate sites in the UK. Users attempting to access certain pirate sites are greeted with 'Error 451 - Unavailable for Legal Reasons'. In theory, ISP blocking should prevent UK users from even seeing this notice, but a combination of Cloudflare's blocking mechanism and choices made by some VPN users results in a piracy dead end. Internet service providers BT, Virgin Media, Sky, TalkTalk, EE, a

It’s not just you: a Cloudflare issue is breaking websites for some users [U]

Update 7:57 p.m. ET: The issue has been solved, and Cloudflare’s status page says that all systems are operational. If you’ve noticed some internet slowdowns or trouble reaching websites tonight, you’re not alone. Cloudflare has confirmed an issue affecting its popular 1.1.1.1 public DNS resolver, which many people rely on for fast and private internet browsing. What’s going on? The company first acknowledged the problem at 22:13 UTC, and began rolling out a fix just minutes later. According

It’s not just you: a Cloudflare issue is breaking websites for some users

If you’ve noticed some internet slowdowns or trouble reaching websites tonight, you’re not alone. Cloudflare has confirmed an issue affecting its popular 1.1.1.1 public DNS resolver, which many people rely on for fast and private internet browsing. What’s going on? The company first acknowledged the problem at 22:13 UTC, and began rolling out a fix just minutes later. According to Cloudflare, the issue only affects users relying on 1.1.1.1. Their Gateway and Authoritative DNS services are stil

Exposing a web service with Cloudflare Tunnel (2022)

There are lots of ways to host a web service. You might want to rent a VPS, Dedicated Server, or embrace full serverless and write your application for a service like Cloudflare Workers You might want to use Docker, k8s, LXD, or any other manner of deploying your services. You might have a complex setup to proxy and serve traffic through your IP. But sometimes you might not have it all figured out. You might want to run your service in your home on that one old laptop you have lying around,

The New Internet Sheriff Takes a Shot at Google

Cloudflare CEO Matthew Prince didn’t make his biggest AI announcement in a press release or earnings call. He made it one X reply at a time. Earlier this month, Cloudflare launched what it called “Content Independence Day,” a policy change that blocks AI companies from scraping the websites it protects unless they compensate content creators. The move challenges the decades-old web economy where companies like Google could freely index content in exchange for traffic, and replaces it with a new

Cloudflare wants Google to change its AI search crawling. Google likely won’t.

After Cloudflare started testing new features that would allow websites to block AI crawlers or require payment for scraping, the tech company immediately faced questions over the logistics of the plan. In particular, website owners and SEO experts wanted to know how Cloudflare planned to block Google's bot from scraping sites to fuel AI overviews without risking blocking the same bot from crawling for valuable search engine placements. Last week, a travel blogger raised questions about the bl

Free Lunch Is Over for the AI That Broke the Web

The foundational deal of the modern web, a handshake agreement that powered two decades of search and content, is officially dead. Cloudflare just put a price on scraping the internet, and it’s coming for artificial intelligence’s free lunch. Almost 30 years ago, two Stanford grad students, Larry Page and Sergey Brin, built Google on a simple bargain: content creators would let them copy the entire web in exchange for traffic. For years, that traffic powered ad revenue, subscriptions, and the g

Pay Up, AI Bot: That's the Message From a Key Company in How the Internet Works

AI companies might find it harder to access the entire web to train their large language models after the internet infrastructure provider Cloudflare said this week it would block AI data crawlers by default. It's the latest front to open in an ongoing fight between the creators of content and the AI developers who use that content to train generative AI models. In court, authors and content creators are suing major AI companies for compensation, saying copyrighted content was used without perm