31
Welcoming Discord users amidst the challenge of Age Verification
Matrix, the open protocol for secure decentralised communications
32
Yandex outage: data shows that instead of going dark, malicious bots moved
When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks.
33
Nearly half of LG smart TV apps contain residential proxy SDKs
Spur scanned 6,038 LG and Samsung smart TV apps and found 2,058 with residential proxy SDKs, exposing privacy and home network risks.
34
Europe's company websites are mostly served by US vendors
Vendor attribution study of 19,450 European company websites. Cloudflare is the largest internet-facing infrastructure vendor in every one of seven EU markets.
35
Making Tailscale Faster
Tailscale performance updates reduce memory use, increase throughput, and speed startup with multi-queue, writev, and netmap caching.
36
OpenSSH 10.6p2 Critical workaround for alpine without PAM
OpenSSH release notes
37
Noq: n0's new QUIC implementation in Rust
Introducing noq: n0's QUIC implementation
38
France's supermarket fridges were vulnerable online for months
IPinfo scans reveal that 85% of exposed French refrigeration controllers had known security flaws before the October 2026 cyberattack.
39
Disrupting the largest residential proxy network
IPIDEA’s proxy infrastructure is a component of the digital ecosystem leveraged by a wide array of bad actors.
40
We intercepted the White House app's network traffic
We set up a MITM proxy and captured the decrypted HTTPS traffic from the official White House iOS app. On a single browsing session it contacts multiple Elfsight domains, sends your device fingerprint to OneSignal, and loads Google DoubleClick ad tracking. The privacy manifest says it collects nothing.
41
RPKI now protects 70% of internet routes
RPKI now protects 70% of Internet routes. See what drove the 2026 jump, how well it stops invalid routes, and where gaps remain.
42
SecurityBaseline.eu
On May 13, 2026, the website SecurityBaseline.eu was launched. It is a spin-off from the Dutch “Basisbeveiliging”, which has monitored baseline security for over a decade and is part of governmental policy. Three months ago we sent tens of thousands of e-mails to European governments indicating the new site would…
43
We have ipinfo at home or how to geolocate IPs in your CLI using latency
TLDR: I made a CLI tool that can resolve an IP address to a country, US state and even a city. https://github.com/jimaek/geolocation-tool It works well and confirms ipinfo's findings. Recently, I read how ipinfo finally proved what most technical people assumed: VPN providers don't actually maintain
44
Bluesky Protocol Services
A new home for the infrastructure Bluesky runs on the open network — including Jetstream v2 with network replay, a new Jetstream SDK, and a lex-based TypeScript SDK
45
Bad Connection: Global telecom exploitation by covert surveillance actors
Our investigation uncovers two sophisticated telecom surveillance campaigns and, for the first time, links real-world attack traffic to mobile operator signalling infrastructure. The findings expose how suspected commercial surveillance vendors (CSVs) exploit the global telecom interconnect ecosystem, leverage private…
46
Cloudflare OHTTP gateway
We’re announcing the closed beta of a self-serve Cloudflare OHTTP Gateway. We’re also renaming our Privacy Gateway to Cloudflare OHTTP Relay to better distinguish the two products.
47
TrustTunnel: AdGuard VPN protocol goes open-source
Today is a big day for us, and for everyone who cares about transparency, privacy, and having full control over their own traffic. We’re finally open-sourcing the protocol that powers AdGuard VPN. And it now has a name: TrustTunnel.
48
Bluesky Trademarks ATProto
Bluesky now owns the trademark for AT Protocol to shield the ecosystem and make sure it can be used as widely as possible.
49
DMARC has been public since 2012 but most company domains still don't enforce it
DMARC has been public since 2012. We checked 67,336 domains: 68.4% still have no policy or one that does not enforce it.
50
We halved DNS build delay and cut memory use by 85%
Zone setting changes used to rebuild entire DNS zones, even ones with tens of millions of records. Here is how we built a planner that picks the smallest safe build, cutting full builds by 40%, peak memory by 85%, and halving build delay.
51
How Passive Radar Works
Passive radar is radar that doesn't need a transmitter; it uses existing broadcasts of opportunity.
52
Upcoming changes to Let's Encrypt and how they affect XMPP server operators
On 11th February, Let’s Encrypt will be rolling out a change to the certificates they issue to servers by default. Although there is generally nothing that Prosody operators need to do, servers using the new certificates may experience problems connecting to some other XMPP servers on the network.
53
World-first gigabit laser link between aircraft and geostationary satellite
Faster, more secure connections from space could one day make broadband on planes, ships and even remote roads as easy as turning on a light. The European Space Agency (ESA), Airbus Defence and Space, the Netherlands Organisation for Applied Scientific Research (TNO) and German payload manufacturer TESAT (as…
54
SSH has no Host header
A dive into how we share IPs between VMs while making SSH work.
55
7zip.com Is Serving Malware
A convincing lookalike of the popular 7-Zip archiver site has been silently turning victims’ machines into residential proxy nodes.
56
How We Made IPFS Content Publishing 10x Faster
How a statistical approach cut IPFS content publishing times by over one order of magnitude.
57
ATProto spaces: A new extension to ATProto that enables non-public data
Atproto Spaces, formerly known as “the permissioned data protocol,” is a new extension to atproto that enables non-public data. The alpha is now officially open. Here’s how to develop with it and what to expect as we work towards the full release.
58
Submarine cable resilience
The estimated 1.5M kilometres of subsea communications cables underpins our global telecommunication services. This critical infrastructure faces serious challenges in the coming years.
59
A macOS bug that causes TCP networking to stop working after 49.7 days
At Photon, we are developing the world’s most complete iMessage API (with RCS and SMS fallback) for agents: infrastructure that lets Agents reliably communicate through one of the most native messaging interfaces people already use. While building it, we run Mac-backed systems continuously and care a lot about making…
60
Reports of Telnet's death have been greatly exaggerated
Terrace runs sensors attackers cannot tell from real targets. We see new attack sources first, record what they do, and ship the block rules while the attack is still running.