Cybersecurity / News analysis
Cloudflare’s OHTTP Gateway beta makes separation of trust a deployment choice
The new gateway complements Cloudflare’s renamed relay. Privacy depends on preserving independent roles, not merely adding another proxy.
THE TOPIC FILE
Cloud security
Cloud services distribute responsibility across providers and customers. Our coverage examines identities, access boundaries, configuration, recovery and the data flows that determine actual exposure.
Stories in this collection
Cybersecurity / News analysis
Cloudflare’s account-abuse dashboard shifts investigation toward behavior over time
Early Access customers can inspect account histories across login and signup flows. A suspicious pattern remains a lead to investigate, not proof that a user is fraudulent.
Companies / News analysis
Cloudflare widens self-service access to logging and governance tools
The latest access update moves more capabilities beyond Enterprise contracts. Buyers still need to compare limits, usage costs and operational requirements.
Software / News analysis
GitHub’s longer installation tokens test assumptions inside integrations
The rollout changes token shape while retaining permissions and expiry. Systems that assumed a 40-character secret now need to handle a much longer opaque value.
Cybersecurity / News analysis
Dell’s CSM advisory puts storage authorization inside the Kubernetes risk picture
Critical flaws in Dell Container Storage Modules connect authorization services, storage credentials and cluster privileges. Remediation needs an inventory that reaches beyond application pods.
Cyberwarfare / News analysis
Antino’s Microsoft 365 command channel challenges simple cloud allowlists
Cisco Talos describes a Windows backdoor using Outlook and OneDrive for command traffic. The report makes endpoint context essential to interpreting trusted cloud destinations.
Artificial Intelligence / News analysis
Cloudflare OS proposes a managed workspace for company agents
A waitlist for managed deployments puts company context and connected systems into the same workspace. Access boundaries will determine how useful that context can become.
Companies / News analysis
Barclays expands Claude deployment across engineering and operations
The bank’s expansion brings code assistance, internal knowledge retrieval and email processing into a wider deployment, with governance central to execution.
Software / News analysis
Cloudflare makes AI Search generally available with visual retrieval
Native image embeddings and OCR extend the managed retrieval service, while document permissions and answer verification remain application responsibilities.
Software / News analysis
Cloudflare brings Basin analytics platform to general availability
The platform combines ingestion, table management and SQL over object storage, putting data portability and operating cost at the center of its offer.
Cybersecurity / News analysis
Cloudflare adds post-quantum primitives to Workers Web Crypto
Opt-in APIs give developers native cryptographic building blocks for experiments and integration testing, while complete protocol migration remains separate work.
Cybersecurity / News analysis
npm lets trusted publishers manage release tags without long-lived tokens
The new opt-in permission closes a gap in token-free release workflows, but the authority to move a release tag still needs deliberate limits.