Patrick R. Donahue

April 20, 2023

Secure by default: recommendations from the CISAs newest guide, and how Cloudflare follows these principles to keep you secure

In this post well review some of the authors recommendations, discuss how Cloudflare applies these principles to the products that we build, and provide some suggestions on what other organizations can do to support similar initiatives internally

March 29, 2023

Killnet and AnonymousSudan DDoS attack Australian university websites, and threaten more attacks heres what to do about it

Over the past 24 hours, Cloudflare has observed HTTP DDoS attacks targeting university websites in Australia. Universities were the first of several groups publicly targeted by the pro-Russian hacker group Killnet and their affiliate AnonymousSudan, as revealed in a recent Telegram post

March 13, 2023

Top 50 most impersonated brands in phishing attacks and new tools you can use to protect your employees from them

Were expanding the phishing protections available to Cloudflare One customers by automatically identifyingand blockingso-called confusable domains.

September 19, 2022

Cloudforce One is now generally available: empower your security team with threat data, tooling, and access to industry experts

Cloudflares threat operations and research team, Cloudforce One, is now open for business and has begun conducting threat briefings. Join our webinar on YackingYeti: How a Russian threat group targets Ukraineand the world, scheduled for October 12, to learn more

June 20, 2022

Bring your own license and threat feeds to use with Cloudflare One

Today, we are announcing new integrations that enable our customers to integrate third-party threat intel data with the rich threat intelligence from Cloudflare One products all within the Cloudflare dashboard

March 14, 2022

Democratizing email security: protecting individuals and businesses of all sizes from phishing and malware attacks

Once the acquisition of Area 1 closes, we plan to give all paid self-serve plans access to their email security technology at no additional charge

March 14, 2022

Investigating threats using the Cloudflare Security Center

The data we glean from attacks trains our machine learning models and improves the efficacy of our network and application security products, but historically hasnt been available to query directly. This week, were changing that

July 22, 2021

Upgrading the Cloudflare China Network: better performance and security through product innovation and partnership

Cloudflare and our strategic partner in China have created a global network that offers a fast experience for visitors inside and outside of China with DDoS mitigation, web application firewall (WAF), and other security services built in.

March 27, 2021

Keyless SSL now supports FIPS 140-2 L3 hardware security module (HSM) offerings from all major cloud providers

Private encryption keys stored in hardware security module offerings from all major cloud providers can now be used to secure HTTPS connections at Cloudflares global edge.

March 7, 2021

Protecting against recently disclosed Microsoft Exchange Server vulnerabilities: CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065

Cloudflare has deployed managed rules protecting customers against a series of remotely exploitable vulnerabilities that were recently found in Microsoft Exchange Server.

January 14, 2021

Holistic web protection: industry recognition for a prolific 2020

Today were excited to announce that Frost & Sullivan has named Cloudflare the Innovation Leader in their Frost Radar: Global Holistic Web Protection Market Report.

October 1, 2020

Introducing API Shield

Of the 18 million requests per second that traverse Cloudflares network, 50% are directed towards APIs. Cloudflare is making it simple to secure APIs through the use of strong client certificate-based identity and strict schema-based validation.

July 22, 2020

Introducing IP Lists

IP Lists can now be stored with metadata at the Cloudflare edge, replicated within seconds to our data centers in 200+ cities, and used as part of our powerful, expressive Firewall Rules engine to take action on incoming requests.

April 24, 2020

Stream Firewall Events directly to your SIEM

As of today, customers using Cloudflare Logs can create Logpush jobs that send only Firewall Events. These events arrive much faster than our existing HTTP requests logs: they are typically delivered to your logging platform within 60 seconds of sending the response to the client.

June 28, 2018

T-25 days until Chrome starts flagging HTTP sites as "Not Secure"

Less than one month from today, on July 23, Google will start prominently labeling any site loaded in Chrome without HTTPS as "Not Secure".

April 30, 2018

Getting started with Terraform and Cloudflare (Part 2 of 2)

Continue exploring Terraform with Cloudflare by enabling load balancing, creating page rules, and rolling back changes.

April 27, 2018

Getting started with Terraform and Cloudflare (Part 1 of 2)

Write code to manage your Cloudflare configuration using Terraform, and store it in your source code repository of choice for versioned history and rollback.

March 24, 2018

A tour through Merkle Town, Cloudflare's Certificate Transparency dashboard

The success of Certificate Transparency rests on the existence of a robust ecosystem of logs and log operators.