Cloudflare Api - GoKawiil

Cloudflare launches cf, an agent-oriented CLI covering its full API

Cloudflare introduced cf, a new command-line tool designed to let AI agents access essentially all of Cloudflare's API rather than the roughly 280 operations supported by Wrangler. The open beta is installable now via npm, uses JSON as its default output format, and introduces a cloudflare.config.ts configuration format along with Vite-based local development.

blog.cloudflare.com · 2026-09-28

Brevo breach used stolen Cloudflare API key to push ClickFix malware to sites

Brevo disclosed that hackers obtained a hardcoded, full-permission Cloudflare API key and used it to deploy a rogue Cloudflare Worker that rewrote content at the CDN edge for roughly 5.5 hours on September 14. The tampered scripts, including Brevo's forms widget, Conversations tool and SDK loader embedded on customer sites, were altered to serve ClickFix malware while stripping security headers to evade detection.

bleepingcomputer.com · 2026-09-17