On December 3, 2025, immediately following the public disclosure of the critical, maximum-severity

The Cloudflare platform is a critical system for Cloudflare itself. We are our

Note: This post was updated with additional details regarding AWS Lambda. Last year

Note: This post was updated to clarify the relationship of the internal WAF

Cloudflare has deployed a new protection to address a vulnerability in React Server

Welcome to the 23rd edition of Cloudflare’s Quarterly DDoS Threat Report. This report