Cloudflare

Cloudflare, Cloudflare Workers, Cloudflare Pages, Cloudflare Tunnel, Cloudflare WAF, Cloudflare CDN, Cloudflare DNS, Cloudflare Zero Trust, Cloudflare Access, Cloudflare Gateway, Cloudflare R2, Cloudflare KV, Cloudflare D1, Cloudflare Stream, Cloudflare Images, Cloudflare Cache, Cloudflare Rules, Cloudflare Firewall Rules, Cloudflare Transform Rules, Cloudflare Rate Limiting, Cloudflare DDoS, Cloudflare SSL, Cloudflare WARP, Cloudflare Analytics, Cloudflare AI Gateway, Workers AI, Wrangler, Cloudflare Dashboard

12 stories

Azure

AI-Assisted PHP2Shell and Fragnesia Chain Roots 25 Servers, Penetrates U.S. Government-Affiliated Network

Cybersecurity researchers have detailed an AI-assisted campaign that combined PHP2Shell exploitation with a Linux kernel privilege escalation to gain root on 25 servers and pivot into an internal network tied to a U.S. government-affiliated environment. The activity was observed in late October 2026 and, according to the Israeli firm Dream, demonstrates a tailored, multi-stage intrusion that fused custom exploit development with automated reconnaissance at scale. Attack overview Dream attributes the…

Saugata DattaOct 29, 20264 min read21

Cloudflare

Cloudflare Issues Emergency WAF Rules for CVE-2026-111497 Brotli Flaw

Cloudflare has released an emergency Web Application Firewall (WAF) ruleset update tied to CVE-2026-111497, a memory flaw in Node.js’s Brotli decoder. Published on October 25, 2026, the update adds two new detections designed to surface potentially risky traffic related to the vulnerability while leaving blocking decisions to customers by default. What Cloudflare added The release introduces two rules: one that detects requests declaring a Brotli-compressed request body and another that…

Saugata DattaOct 26, 20263 min read27

Cloudflare

Kentik Links Foreign Traffic Floods to North Korea .kp Outage

Multiple waves of traffic this week knocked large parts of North Korea’s public internet offline, leaving more than 40 .kp websites intermittently unreachable for roughly 32 hours. The outages began in the early hours of October 20 (02:01 UTC) and affected core services including the Ministry of Foreign Affairs and the Korean Central News Agency. Internet measurement firm Kentik, through its internet analysis director Doug Madory, traced sudden traffic floods…

Saugata DattaOct 24, 20263 min read88

Automation

Critical GitLab AI Gateway Flaw: What Administrators Need to Do Now

GitLab has pushed an urgent set of security updates after disclosing a critical vulnerability in its AI Gateway that could allow authenticated users to run arbitrary commands on the gateway. Tracked as CVE-2026-90970 and rated CVSS 9.9, the flaw affects self-hosted AI Gateway deployments that support GitLab Duo AI features. While GitLab’s hosted gateways have already been patched, organizations running their own gateways must act immediately to mitigate a high-impact…

Saugata DattaOct 3, 20264 min read227

Cloudflare

Cloudflare makes post‑quantum IPsec generally available

For years, the internet’s move to post‑quantum cryptography focused first on TLS, but site‑to‑site networking has lagged behind. Today Cloudflare is announcing general availability of post‑quantum encryption for Cloudflare IPsec, bringing hybrid ML‑KEM protection to WAN tunnels so organizations can defend against “harvest‑now, decrypt‑later” attacks without buying specialized hardware. This update moves another critical piece of enterprise networking closer to a quantum‑resistant future as Cloudflare continues its push toward full…

Saugata DattaApr 30, 20264 min read354

Cloudflare

Agents, Stripe Projects, and zero-friction Cloudflare provisioning

Agents can now take a project from idea to live production on Cloudflare without a human manually opening a dashboard, entering card details, or copying API keys. In partnership with Stripe’s new Projects flow, Cloudflare built a protocol that lets an orchestrator platform (like Stripe Projects) attest to a signed‑in user’s identity, provide a payment token, and expose a catalog of available services. An agent using that catalog can provision…

Saugata DattaApr 30, 20265 min read378

Cloudflare

Zero Ads, Zero Tracking, Zero Exceptions: Build a Zero-Trust DNS Fortress for Every Device You Own

One self-hosted DNS server. Every device protected — at home and anywhere in the world. Here is a slightly terrifying, yet fun fact most people do not know: every time anyone in your household opens a browser, your Internet Service Provider (ISP) sees exactly which website they are visiting — before the page even loads. Not because they hacked your network. Not because you did anything wrong. Simply because DNS,…

Saugata DattaApr 6, 202612 min read591

Automation

Face-Off: Windows PowerShell vs PowerShell Core — The Real-World Transition

PowerShell has come a long way since its inception, becoming an essential tool not only for Windows administrators but also for IT professionals working across platforms. The transition from the original Windows PowerShell to PowerShell Core represents more than just a version change—it’s a fundamental evolution in how command-line automation and configuration management are approached in the modern IT landscape. For those who have relied on the familiar blue prompt…

Saugata DattaJan 16, 20264 min read1.1K

Azure

The Ultimate Command Center for AdGuard Home Power Users

The Problem: "Friction & Context Switching" Whether you run a single AdGuard Home instance on a Raspberry Pi or manage a fleet across multiple locations, the daily management experience often feels disconnected. To simply check if your server is online, pause protection for a quick test, or block an annoying tracker, you have to: It doesn't seem like much, but it adds up. That tiny bit of friction often means…

Saugata DattaJan 5, 20265 min read1K

Azure

Create Private PPTP VPN for personal use in Linode Cloud Hosting.

Nowadays many things are getting blocked by the government, and sometimes without even a valid reason. When something like this happen to you, you probably looking for some way to bypass these restrictions, and most of the times we look for free or cheap VPNs. In today's world, nothing is actually free, there is always something we are giving in return to those so called free providers and most of…

Saugata DattaDec 26, 20183 min read9.5K

AWS

New Feature : EC2 Instance Console Screenshot for Boot Troubleshooting

Finally a great feature add to AWS EC2 instances (HVM virtualization only), which was requested by almost everyone. Now we can take a console screenshot of any EC2 Instances. This is now available publicly. Earlier we had to log a case with AWS Support to get the AWS Console screenshot. This is a similar feature like Boot Diagnostics for Azure Virtual Machines v2. This new feature will be very much…

Saugata DattaMay 27, 20161 min read7.9K

Cloudflare

Set File System Auditing via PowerShell

For last few days, I was trying to figure out how to set file system auditing via command line. I was looking for this as I had to apply some specific audit policy on multiple file servers. From GUI, we could do this, but it will take hours of manual activity. As requirement, I had to set Success Audit policy on Delete subfolders and files, delete and change permission. There…

Saugata DattaMay 20, 20142 min read41.2K

Free Tools: IP, DNS, SSL