The web is the most powerful application platform in existence. As long as you have the right API, you can safely run anything you want in a browser. Well… anything but cryptography. It is as true today as it was in 2011 that Javascript cryptography is Considered Harmful. The main problem is code distribution. Consider […]
Archive | Security
RSS feed for this sectionWhat Is a 501 Error & How to Fix It
When a website fails, your browser returns an HTTP status code that’s short, technical, and often cryptic. You’ve probably seen 404 Not Found or 500 Internal Server Error. Less common, but just as disruptive, is 501 Not Implemented. This guide explains what a 501 error actually means, how it presents in browsers, what typically causes […]
Introducing Sucuri Academy: Your New Destination for Website Security Education
Learn. Secure. Lead. We’re excited to introduce the beta launch of Sucuri Academy—a cutting-edge learning platform designed to empower website owners, developers, and digital professionals with the skills to defend against cyber threats. Whether you’re just starting out or looking to master advanced security techniques, Sucuri Academy offers structured, expert-led courses to help you protect […]
Introducing REACT: Why We Built an Elite Incident Response Team
Cloudforce One’s mission is to help defend the Internet. In Q2’25 alone, Cloudflare stopped an average of 190 billion cyber threats every single day. But real-world customer experiences showed us that stopping attacks at the edge isn’t always enough. We saw ransomware disrupt financial operations, data breaches cripple real estate firms, and misconfigurations cause major […]
Malvertising Campaign Hides in Plain Sight on WordPress Websites
Recently, one of our customers noticed suspicious JavaScript loading across their WordPress website. Visitors were being served third-party scripts that the site owner never installed. After investigation, we discovered the infection originated from a malicious modification in the active theme’s functions.php file. This injected PHP code silently fetched external JavaScript from attacker-controlled domains and inserted […]
Vulnerability & Patch Roundup — September 2025
Vulnerability reports and responsible disclosures are essential for website security awareness and education. Automated attacks targeting known software vulnerabilities are one of the leading causes of website compromises. To help educate website owners about potential threats to their environments, we’ve compiled a list of important security updates and vulnerability patches for the WordPress ecosystem this […]
Enhancing File Transfer Security with SSH Key Authentication
Attackers scan for TCP 22 and 2222 around the clock. When they find an open port, they launch credential-stuffing lists harvested from previous leaks, brute-force scripts, and even malware that hunts for hard-coded passwords in deployment repositories. Verizon’s 2025 Data Breach Investigations Report (DBIR) continues to show stolen credentials as a leading initial access vector […]
15 years of helping build a better Internet: a look back at Birthday Week 2025
Cloudflare launched fifteen years ago with a mission to help build a better Internet. Over that time the Internet has changed and so has what it needs from teams like ours. In this year’s Founder’s Letter, Matthew and Michelle discussed the role we have played in the evolution of the Internet, from helping encryption grow […]
Introducing Observatory and Smart Shield — see how the world sees your website, and make it faster in one click
Modern users expect instant, reliable web experiences. When your application is slow, they don’t just complain — they leave. Even delays as small as 100 ms have been shown to have a measurable impact on revenue, conversions, bounce rate, engagement and more. If you’re responsible for delivering on these expectations to the users of your […]
Cloudflare just got faster and more secure, powered by Rust
Cloudflare is relentless about building and running the world’s fastest network. We have been tracking and reporting on our network performance since 2021: you can see the latest update here. Building the fastest network requires work in many areas. We invest a lot of time in our hardware, to have efficient and fast machines. We […]
