Cloudflare Client-Side Security: smarter detection, now open to everyone
2026-04-01T07:24:05Z•1241695504e6a810bf06e7997c085aaaa6f33c6d075b431cca22fb6553f54499
ACME validationAI securityAPI vulnerability scannerCGNAT detectionCloudy (LLM explanations)DDoS reportLLMsLog ExplorerMatrix homeserverMerkle Tree CertificatesPingoraQUICWorkers VPCacknowledgement-based DDoScertificate automationclient-side securitygraph neural networksopen-source vulnerability disclosurephishing detectionpost-quantum cryptographyrequest smuggling
What happened
Collection of Cloudflare security blog posts (late 2025–Mar 2026) covering new product launches and multiple security disclosures and mitigations. Highlights include: rollout of advanced client-side detection (GNNs + LLMs) and expanded AI/LLM security features (AI Security for Apps, Cloudy explanations, phishing/Email improvements); a disclosed request-smuggling vulnerability in the open-source Pingora ingress proxy with fixes in Pingora 0.8.0; a vulnerability and mitigation in Cloudflare’s ACME certificate validation automation; two QUIC acknowledgement-based DDoS vulnerabilities that were-p-
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- 1241695504e6a810bf06e7997c085aaaa6f33c6d075b431cca22fb6553f54499
- Enrichment time
- 2026-04-01T07:24:05Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.