Turnstile Spin推出:利用AI编程智能体自动配置网站后端安全验证
开发者在配置 Turnstile 时若跳过后端验证,会导致网站仍面临机器人攻击的风险。新推出的 Turnstile Spin 工具支持调用开发者偏好的 AI 编程智能体,自动补全并接入服务端验证逻辑,快速修复不完整的安全设置,降低配置门槛并提升网站防机器人攻击的安全性。
开发者在配置 Turnstile 时若跳过后端验证,会导致网站仍面临机器人攻击的风险。新推出的 Turnstile Spin 工具支持调用开发者偏好的 AI 编程智能体,自动补全并接入服务端验证逻辑,快速修复不完整的安全设置,降低配置门槛并提升网站防机器人攻击的安全性。
安全研究团队 Accomplish 在 Cloudflare Containers 中发现了一处安全漏洞,该漏洞可能导致先前半程工作负载遗留的磁盘数据暴露给其他租户。Cloudflare 近日发布技术复盘,详细剖析了该漏洞的触发机制、官方的排查调查过程,以及为彻底消除多租户环境下残留数据泄露风险所采取的具体修复与隔离措施。
Worker Previews 宣布推出独立预览环境功能,可为 AI 智能体提交的每个分支变更分配专属 URL、独立配置、状态以及可观测性支持。该功能支持开发者与智能体在不影响生产环境的前提下并行测试并验证各项修改,有效提升 AI 辅助编程与自动化开发流程的安全性和协作效率。
Cloudflare 宣布 Python Workers 正式全面可用(GA)。该功能允许开发者在 Cloudflare Workers 运行时中原生执行 Python Web 框架及 AI 编排库。开发者无需编写 JavaScript 胶水代码,即可无缝调用 D1 数据库、R2 存储以及 Workers AI 等 Cloudflare 基础设施生态,显著简化了在边缘运行 Python 及构建 AI 应用的开发门槛与流程。
Cloudflare 分享了其在全球网络资源优化方面的工程实践。为持续降低基础设施的资源消耗,工程团队结合统计学分析方法与 Rust 语言,对其基于 Pingora 代理框架的服务进行了深度优化,成功在全球边缘网络中大幅削减了该服务的内存占用,额外节省了 100TB RAM,实现了基础设施的高效利用。
Cloudflare面向网站所有者推出新控制机制与“Accountable”标识认证,帮助站点在搜索引擎中保持可被发现和索引的同时,禁止其内容被用于AI模型训练。该机制与苹果、谷歌和微软等科技巨头建立了共享模式,旨在解决网站内容被无偿抓取训练模型与维持搜索流量曝光之间的冲突,为内容创作者与平台提供更细粒度的数据控制权。
Cloudflare宣布为其Workers开发者平台引入更细粒度的访问权限控制。用户现可将权限精确范围限定至单个Worker,并分配更窄的开发者平台角色。该更新确保团队成员、CI令牌以及AI智能体仅能获取其在调试、部署或监控过程中所需的最低权限,从而提升开发协作与自动化流程的安全性。
Cloudflare CASB policies introduce a native automation engine built directly on the Cloudflare developer platform to remediate SaaS risks automatically. Security teams can now design event-driven logic to revoke risky file shares and send webhooks without manual intervention.
1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.
Workers now enables Node.js compatibility by default, supports applications up to 64 mebibytes, and adds a URL-based module registry with import.meta, lazy compilation, shared code caches, and clearer errors.
Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it.
Use production traffic and security signals to prioritize findings, prepare edge mitigations when safe, and propose code patches. By combining WAF data with OpenAI Daybreak models, Vulnerability Discovery and Remediation helps teams identify and patch the most critical threats first.
Could we get more cache space with the same hardware? We prototyped compression inside Cloudflare's cache to find out.
Bot operators have historically had the economic advantage, bypassing static, deterministic detection rules with cheap proxies and retooling. Cloudflare's new Adaptive Intelligence engine flips this dynamic by autonomously learning from the meta-signals of live traffic and deploying disposable rules, making automated attacks too expensive to sustain.
Bot operators now have a home in the Cloudflare dashboard to manage submissions. This update adds submission status tracking, submission editing, and a behavior model so operators can accurately declare how their bots use content.
Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.
We migrated the Cloudflare Blog to EmDash to prove our stack at massive scale. Here is how we stress-tested performance, safely routed production traffic, and redesigned the frontend experience.
Cloudflare's new Bot Preference Sync automatically aligns your robots.txt file with your AI bot policies for Search, Agent, and Training. Easily manage which bots access your content without maintaining static files.
Cloudflare OAuth now supports optional scopes, giving users more control over what an app can access and helping developers build secure consent flows around the task at hand.