We found a working remote Spectre attack against Cloudflare Workers. We already fixed it. No exploitation in the wild. Blog post and paper out now:
Cloudflare
@Cloudflare
Cloudflare is the world’s leading #ConnectivityCloud, and we have our eyes set on an ambitious goal — to help build a #BetterInternet.
- Watch this insightful webinar with Sandy Carielli (VP Principal Analyst, Forrester), ‘Practical Tips for Securing Public-Facing AI Apps and Cutting Through the Noise’, where we explore how Cloudflare is addressing threats to AI apps. cfl.re/4cmy840
- AI agents don't just reason anymore. They transact. Cloudflare's Monetization Gateway lets content owners, API providers, and MCP servers charge agents directly, per request, using x402. And today, enterprises building agents with @awscloud AgentCore Payments can tap into that
- RFC 9234 lets routers reject route leaks on their own, using BGP Roles and the Only to Customer attribute. We measured who has deployed it, and found two Tier 1 networks unexpectedly stripping OTC.
- Going AI-first? Don't compromise on security. Join our webinar to learn how to fortify your API architecture without the trade-offs. Register now: cfl.re/4yKYJkO
