Cloudflare (customer traffic): AI incidents on the record
Cloudflare (customer traffic) appears in 1 AI incident on our record. The most serious status recorded: attacked. No confirmed breach is recorded.
Every entry, with its source
- Attacked (blocked or unknown) PHP2Shell: AI-found PHP flaws leak, trigger global shutdowns. Saw early attacks against the flaws before disclosure, deployed WAF rules about nine hours early and kept updating them as attackers tried bypasses. (SecurityWeek) The incident →
If you're a customer or employee
- Attacked is not the same as breached.The record shows attempts or attacks against this organisation, not a confirmed loss of data. Watch for an official statement.
- Be wary of messages that mention the attack.Scammers use security news as a lure. Contact the organisation through its own website or app.
- Use a unique password and two-step loginfor this service; that limits the damage if a breach is confirmed later.
Related: AI scam texts: what to do · The fake bank call
How to read this
"Confirmed" means the organisation or an investigator confirmed a compromise. "Attacked" means attacks or attempts were recorded, including blocked ones. "Took services offline" means a precaution, not a breach. We only list what public sources say; if something here is wrong or out of date, tell us and we will correct it.
Spot an error or something out of date? Tell us; corrections are made and logged. Written with AI assistance from public sources; checked against those sources before publishing. General information, not legal, medical or financial advice.