CloudFlare

Cloudflare Inc. announced plans for a private offering of $2.175 billion in senior convertible notes. This announcement came after the cybersecurity firm experienced an intraday high, which was triggered by a guidance boost last week.

Cloudflare OS is an open-source AI agent platform designed for developers creating autonomous apps and workflows on Cloudflare's edge infrastructure. The platform positions Cloudflare as a strategic player in agent infrastructure.

Cloudflare introduced programmable Wallets for AI agents and announced plans to launch payment features using stablecoins in a future update.

Cloudflare has launched a permanent ID tool (cloudflare.id) and a wallet for AI agents to facilitate agentic commerce. The service allows users to assign identities to AI agents and set up virtual wallets with stablecoins, including spending controls. This reflects a shift in internet traffic where bots now make up 57% of web traffic, creating new business opportunities.

Cloudflare uses AI to automate bug bounty report processing with Anthropic’s Claude Sonnet model, reducing costs compared to a more expensive alternative. The company replaced most third-party security tools with home-grown AI-assisted applications but advises others against replicating this approach due to unique challenges.

Draco is a Rust-based, self-hostable web scraper designed as an alternative to Firecrawl and headless Chrome solutions. It uses a tiered escalation system to bypass anti-bot measures, render JavaScript-heavy sites, and fall back to real browsers when needed, offering improved performance and lower resource usage compared to existing tools.

ClickLock is a Mac malware that tricks users into running a Terminal command, leading to data theft and remote access. Discovered by Group-IB, it has infected over 100 systems across 33 countries by stealing passwords, browser data, and cryptocurrency wallet files.

Cloudflare has introduced new AI-based traffic management options for its customers. The article highlights these features as part of their latest updates.

Bots now generate over 50% of web traffic, with agentic AI activity growing 7,851% year-over-year. CloudFlare and Thales report conflicting crossover points for bot-human traffic dominance, while HUMAN Security highlights shifts in AI-driven traffic composition. The internet’s business model, built on human-centric metrics, faces disruption as bots reshape web activity and monetization.

Compromised websites are using fake Cloudflare verification pages to trick users into pasting malicious code into their command prompts, which installs malware to steal credentials and banking information. Users are advised to close such websites immediately and clear their browser caches.

A user reported a phishing scam involving Rustictack.com, which redirected payments to getbestdeals.shop. The site falsely rejected credit cards and attempted unauthorized transactions, while hiding behind CloudFlare. The user filed a report with the FTC after their bank detected suspicious activity.

ClickLock Stealer is a macOS infostealer delivered via phishing pages that locks victims' Macs by terminating processes, stealing passwords, browser data, and cryptocurrency wallets. It employs a GSocket backdoor for persistent remote access and forces users to submit their macOS password via a fake prompt, with a kill loop disabling system functions until compliance.

The article discusses how bots now generate more internet traffic than humans, but websites remain unadapted to accommodate both human and agentic visitors. The author describes their experience with Anthropic's Fable subagents attempting to access sites like archive.org, highlighting how agents circumvent website blocks. The comparison to the Star Wars cantina scene illustrates the exclusion of non-human visitors and the economic tension between publishers and agents.

Tech companies like Microsoft, Amazon, Meta, Cloudflare, and Cisco are implementing layoffs as part of ongoing 'continuous tuning' strategies amid AI advancements. These cuts, often linked to restructuring and efficiency gains, are becoming a regular feature in the industry, with firms reallocating resources to AI investments and shifting business priorities.

The article discusses the growing dominance of AI in web traffic and content creation, citing data from Cloudflare, Imperva, and Pangram showing bots account for over half of web traffic and a significant portion of content on platforms like LinkedIn and Twitter. It raises concerns about AI's impact on human creators and online authenticity.

A blog post claims to have bypassed Cloudflare's bot detection using an open-source stealth browser. The article is hosted on tilion.dev's blog and linked to Hacker News with 6 points and no comments.

Cloudflare's blog post discusses building a vulnerability harness, a tool for security testing. The article provides a URL for the blog and Hacker News comments link but contains no additional details about the content or methodology.

Cloudflare's data reveals Anthropic's AI bots have the highest crawl-to-refer ratio, scraping webpages 2,800 times for every referral, far exceeding OpenAI and others. DuckDuckGo shows a more balanced ratio of 3 scrapes per referral, while Anthropic's practices raise concerns about the web's economic model as AI companies prioritize content extraction over traffic generation.

Cloudflare has introduced a bot paywall system allowing customers to charge AI models for scraping their content. The system enables content owners to set minimum prices and AI crawlers to bid, creating a two-sided marketplace. Stephanie Cohen, Cloudflare's chief strategy officer, highlighted the shift toward monetizing internet interactions as AI activity grows.

The article highlights multiple security threats, including malware spread through verified ads on Mac systems, the ConsentFix malware stealing Microsoft accounts, and vulnerabilities in Apple's Hide My Email feature. It also covers fake Google and Cloudflare verification pages distributing malware, a critical WinRAR flaw, a deceptive Perplexity Chrome extension, and security updates from Apple for iOS, MacOS, and Safari.

Cloudflare will filter web crawlers used by AI companies to give websites more control over how their content is utilized by these firms.

Cloudflare will block mixed-use crawlers from ad-supported websites by default starting September 15, 2026, affecting Apple, Google, and Microsoft's Bing crawlers. The move aims to give publishers control over AI data harvesting, as these crawlers combine search indexing and content scraping for AI training.

Cloudflare reduced its workforce by 20% but increased engineering hires by 45%, reflecting CEO Matthew Prince's view that AI is reshaping job value in tech companies. Prince categorizes roles into builders (engineers), sellers, and measurers (managers, finance, operations), noting AI is displacing measurers while boosting demand for builders and sellers.

A coalition led by Chainguard, including companies like BNY, Cisco, and Cloudflare, is using AI to identify and patch vulnerabilities in open-source code. The group, Athena, has already processed 20,000 findings and developed 2,000 patches across 500 projects, warning of a 'messy summer' due to the scale of undiscovered flaws.

Cloudflare collaborates with China Digital Times to combat censorship. The partnership focuses on technological efforts to circumvent digital restrictions.

Cloudflare released a 2026 report detailing cyberattacks targeting civil society. The report focuses on security threats faced by organizations and individuals involved in civil society activities.

A user received a suspicious Discord friend request from the Wuthering Waves Official Discord, leading to a voice call with a person claiming to be German but speaking Turkish with unnatural vocal glitches. The individual requested feedback on a Minecraft server link with a newly registered domain (May 5, 2026) and defensively dismissed concerns about its legitimacy.

Cloudflare has launched self-managed OAuth for all users, expanding access to its authentication service. The feature allows developers to manage OAuth workflows independently.

A user was redirected to a fake Cloudflare Human Verification page that tricked them into executing a PowerShell script. The script downloaded and ran code from a suspicious domain, prompting the user to disconnect their PC from the internet and run malware scans, which found no threats.

Vail Resorts is consulting takeover-defense bankers to assess vulnerabilities amid pressure from labor groups, billionaire Matthew Prince, and natural challenges. Rob Katz, reappointed as CEO, is addressing customer complaints and Prince's $500 million offer for Park City Mountain Resort, while the company faces labor disputes and a severe winter season.

EarnOS, a startup that pays users to engage with brands online to combat AI bots, has raised $18.5 million and launched its app Ero. The app verifies human interaction and rewards users with cryptocurrency, partnering with brands like Nike.

Three tech executives joined the Army Reserve's Detachment 201 as lieutenant colonels to advise on AI, cyber, and modernization. The unit aims to bridge private-sector innovation with military modernization, expanding the Army's collaboration with Big Tech leaders.

The US Army commissioned three technology executives into Detachment 201, an innovation unit bridging the commercial sector and military. The unit aims to address modern warfare challenges involving autonomous systems and artificial intelligence.

Palantir cofounder Joe Lonsdale claims CEOs are misrepresenting layoffs as being driven by 'AI productivity' rather than poor hiring decisions or growth issues. Companies like Cloudflare, Snap, Block, Atlassian, and Coinbase have cited AI in layoff memos, but Lonsdale and others argue the real causes are over-hiring or management failures. Venture capitalists and industry figures such as Marc Andreessen and Sam Altman have supported this view.

Silicon Valley founders are sharing negative experiences with venture capitalists on social media, including stories of investors falling asleep during meetings and making sexist remarks. Examples include Greg Isenberg describing a general partner sleeping through a pitch and Matthew Prince recounting a Sequoia partner dismissing Cloudflare's co-founders.

Internet traffic from AI agents and other bots now exceeds traffic generated by humans, as reported by a Cloudflare executive. The claim highlights a shift in web traffic dynamics driven by automated systems.

The article accuses Cloudflare's CEO of misleading claims about a surge in bot traffic. It references a Flying Penguin blog post and Hacker News discussion with 64 points and 34 comments.

The US National Security Agency is reportedly using Anthropic’s Mythos AI model for hacking, despite the model not being publicly released due to its vulnerability exploitation capabilities. The NSA’s offensive use of Mythos contrasts with its intended defensive purpose, while the US government faces a legal battle with Anthropic. AI-led web traffic is rising, with Cloudflare noting most traffic is now AI-driven, and Iran is a hotspot for malicious AI activity.

Matthew Prince, a billionaire and founder of Cloudflare, is urging Vail Resorts to sell Park City Mountain Resort, the largest ski area in the U.S., arguing the company’s stock is undervalued and its management is poor at capital allocation. He advocates for an asset-light franchise model to divest resorts while retaining pass partnerships.

Bot web traffic has surpassed human web traffic, according to data from Cloudflare. The report highlights that automated traffic now dominates online activity.