Cloudflare is a company offering CDN, network security and edge computing services, and its Workers AI platform lets developers run models at the edge. Recent coverage has focused on its AI products and web-governance moves: the open-sourced Clef and Clef-flash decision models, a preview of the Clairic extraction model, the cf command-line tool for agents, and a Disallow AI Training setting. Cloudflare also disclosed a cross-request KV cache leak in GLM-5.3 on Workers AI affecting 155 responses.
Cloudflare says a tenant-isolation flaw in the GLM-5.3 model on Workers AI caused some very long prompts to return other customers' data between Aug 27 and Sep 9, affecting 155 responses. The issue is remediated, no deliberate exploitation was found, and SGLang published a coordinated disclosure.
Argus is a free, MIT-licensed open-source security operations platform that monitors cloud, logins, code and devices around the clock and detects and responds to attacks at machine speed. All automated actions run through a single broker with approvals, dry runs, automatic rollback and a kill switch, and canary keys lure attackers using stolen credentials.
AI tools uncovered two critical decade-old vulnerabilities in PHP, called PHP2Shell, affecting 70% of the world's websites. Teams from OpenAI, Wiz, and Calif. were involved, and the PHP Foundation has released a patch.
Cloudflare released a preview of Clairic, hosted on Workers AI as @cf/cloudflare/clairic, claiming higher accuracy, lower latency and lower cost than traditional LLMs for extracting, estimating and forecasting values from unstructured inputs. It is a System One extraction model, a category inspired by TypeSafe's Jev, and open weights are planned soon.
A developer on Hacker News built a single-user MCP that runs free on Cloudflare, letting Claude on mobile access their personal WhatsApp messages. It also connects to Google to retrieve contact names so search works, and is limited to one user because it is both a gray area and very private.
A solo founder used Grok Bot's team of AI agents (support, engineering, security, marketing) to run his company for a week; the bots collaborated to fix a customer bug, and he worked from a remote hike. The account is anecdotal, with no hard metrics, but suggests automating routine tasks can boost output.
Talorys is a free, open-source personal AI assistant that runs entirely inside the user's own Cloudflare account, without servers or databases operated by the developers. It offers chat, memory, tasks, notes, projects, and scheduled automations, and works without AI.
Cloudflare launched Clef and Clef-flash, challenging TypeSafe AI's Jev decision model. Clef-flash delivers classifications in about 39 milliseconds, over ten times faster than Jev. Both models are built on Apache 2.0-licensed Qwen and let AI agents make structured decisions without generating text.
Cloudflare released two in-house decision models, Clef and Clef-flash, on Workers AI, saying Clef leads the Jev Decision Index. Clef is open-sourced on Hugging Face under Apache 2.0. Decision models return structured outputs with probabilities so agents can route and decide programmatically; Cloudflare also debuted an RL fine-tuning product.
Cloudflare launched cf, a CLI giving agents access to all its products, with JSON as the default interface and TypeScript config. Agent use of Wrangler rose from single digits to 48%.
Atlassian co-founder and CEO Mike Cannon-Brookes discusses how AI is changing SaaS and pushes back on the 'SaaSpocalypse' narrative. He says AI is increasing usage of Atlassian's tools, and talks about the company's layoffs, shifting skill mix, and what AI can't do.
Cloudflare CEO Matthew Prince discussed on the Decoder podcast how AI bots now make up more than half of internet traffic. Cloudflare sits between websites and AI agents, letting owners block, allow, or charge for access. The talk also covered the company's 20% layoff this year (over 1,000 people) and Prince's WSJ op-ed on replacing staff with AI.
Cloudflare announced a Disallow AI Training setting so sites can stay indexed for search while blocking their content from AI training; Apple, Google and Microsoft have committed to honor it. Cloudflare reports under 1% of sites block search and 17% enable some training-blocking; it plans finer controls for AI summaries early next year.
Cloudflare CEO Matthew Prince told Bloomberg that AI introduces vulnerabilities and discussed rising bot traffic and defenses, arguing that defenders have more tools than attackers.
That is everything