Software should by Secure-by-Default and Secure-by-Design, Cybersecurity and Infrastructure Security Agency and 6 other int'l agencies write in a guide published last week. We follow these principles Cloudflare & agree security should be shifted from the end-user/customer back to the vendor: blog.cloudflare.com/secure-by-defa….

Some clever phishing happening against Facebook business page users right now... be careful. #phishing

Just managed to put online the talk I gave at Black Hat MEA back in November of last year - and the video is powered by Cloudflare Stream! codelocket.com/black-hat-mea-… #cybersecurity

🤔🤔 Can you please teach me how to extract databases from a website that does not have databases?

Time to do a server migration. Haven't done one of these in aaaages. Wish me luck. I've got my runbook & rollback plan so hopefully super smooth.

Well that went smooth.

Just me or LinkedIn mobile web version (not app) does not properly render new lines on role descriptions? <br> everywhere!

Time to say goodbye. You will be missed.

We could not resist taking a look!

Could not resist, we took a peak at our data again.

Starting today, Page Shield, our client-side security product, supports all major CSP directives. We’ve also added better reporting, automated suggestions, and Page Shield specific user roles, making CSPs much easier to manage. cfl.re/48jVtA2

This post is a small overview of how some of the newer WAF malicious payload detection capabilities work. One of the nice things about this: the bigger the network, the better it gets, automatically.

Someone's idea: when you close a Chrome tab, immediately resize tabs. Side effect: it's now incredibly annoying to close a bunch of tabs in a row as the x (close) button moves. A little user testing would spotted this flaw.

I was stuck for two hours with a complex (at least for me) SQL query (Google was not helpful). Called on some old friends - sorted in 5 minutes. The power of a network.

And it is built with Cloudflare Workers.

Meeting chair: This is a super duper secret meeting topic. Nothing leaves this room. Even Google does not know about this stuff. Meeting chair phone: Sorry, I don't understand. Could you please repeat. And just like that, the topic was no longer secret.

Tens of millions of websites (4% of the web) uses Polyfill(.)io. Extremely concerning malware has been discovered impacting any site using Polyfill. Cloudflare is stepping in with a secure clone and a service to automatically replace Polyfill on pages. blog.cloudflare.com/automatically-…

This is what happens when we have too many things to announce for Cloudflare's birthday... we bundle 10 into 1! Very proud of all the work that went into this as we keep disrupting and democratising Internet security.

Today we are very excited to share the latest leap forward in speed: Speed Brain. It relies on the Speculation Rules API to prefetch the content of the user's likely next navigations. cfl.re/4eDNmRc #BirthdayWeek

Bots are really becoming annoying... Just installed Cloudflare's Turnstile on one of my sites. Took less than 10 minutes!