Cloudflare Bug Exposed Customer Data Across Workers AI Requests
Cloudflare said 155 Workers AI responses from the GLM-5.3 model contained other customers' data, caused by a misconfiguration and an SGLang bug.
Cloudflare is a web infrastructure and website security company that provides content delivery network services, internet security, and distributed domain name server services.
Cloudflare said 155 Workers AI responses from the GLM-5.3 model contained other customers' data, caused by a misconfiguration and an SGLang bug.
Cloudflare is using OpenAI Daybreak to investigate vulnerabilities with live traffic and security data, then prepare patches and firewall rules for customer review.
Cloudflare and Commerce.com are enabling WebMCP across nearly 100,000 storefront domains, giving browser based AI agents structured tools for product search, cart actions and checkout links.
OpenAI says GPT-5.6 Sol helped find critical PHP vulnerabilities it calls among the most impactful in recent memory, and commits $1B to help defenders.
Cloudflare expands its Cloudflare OS workspace with integrations for Asana, Box, Canva, ClickHouse, GitHub, Gong, Notion, and other business applications.
GoDaddy, Infoblox, Google and Cloudflare demonstrated an open architecture that verifies AI agent identities and permissions across independent platforms. The test simulated an agent purchasing a flight while blocking forged credentials and an imitation seller.
Cloudflare launched Kitesurf, a browser for AI agents that runs on Workers and supports tasks such as page inspection, screenshots, PDFs, and HTML extraction.
Chainguard has introduced Athena, a coalition of more than two dozen organizations including BNY, Cisco, Cloudflare, Docker, and JPMorgan Chase, focused on identifying and fixing open source vulnerabilities before attackers can exploit them. The initiative has already processed over 20,000 findings and issued more than 2,000 patches across 500 projects.
Cloudflare announced plans to cut about 20 percent of its global workforce, or more than 1,100 employees, as part of a restructuring tied to the growing use of artificial intelligence across its operations. The company reported record first quarter revenue of 639.8 million dollars but forecast slightly lower second quarter revenue expectations.
Cloudflare is expanding its Agent Cloud platform to include direct access to OpenAI’s frontier models like GPT-5.4, enabling enterprises to deploy AI agents for production workloads at scale.
Cloudflare has open-sourced VibeSDK, an AI-powered platform that allows users to deploy their own vibe coding environments with ease.
Cloudflare has integrated with ChatGPT Enterprise, Claude by Anthropic, and Google Gemini to enhance generative AI security for businesses, announced in a press release.
Perplexity AI disputes Cloudflare's claims of unauthorized web scraping, arguing that their AI assistants operate differently from traditional bots.
Cloudflare has introduced the capability to build and deploy remote Model Context Protocol (MCP) servers on its platform, enhancing accessibility for AI applications. This development allows developers to utilize the protocol without local installations, leveraging Cloudflare's global network.
Cloudflare has introduced 'Cloudflare for AI', a suite of tools designed to enhance the security and control of AI applications for businesses, as announced in a press release.
Daily report covering major AI developments and industry news, with both top stories and complete market updates