Cloudflare

Network company that sits in front of millions of sites.

Everything Warning Shots has on Cloudflare, newest first: incidents scored on the record, forecasts, the week's power moves and every Wire story, each linked to its source. Updated on every refresh.

2incidents on the record

3stories on the Wire

70/100worst incident on the recordPHP2Shell: AI-found PHP flaws leak, trigger global shutdowns

Every incident on the record, by date. Taller is worse; red: the AI acted on its own in the real world.

Incidents on the record

2026-08-27 32/100 Moderate Cloudflare's hosted GLM-5.3 model leaked fragments of other customers' requests into 155 responses for two weeks after launch
Privacy & data leaks · in the real world
2026-10-21 70/100 Severe PHP2Shell: AI-found PHP flaws leak, trigger global shutdowns
AI-found vulnerabilities · in the real world

On the Wire

2026-10-26 Cloudflare's AI service leaked customers' data into strangers' answers Cloudflare · on the record
Aug 27 to Sept 9, very long GLM-5.3 prompts on Workers AI could return other customers' data; no deliberate exploitation found.
2026-10-24 Reuters: Cloudflare's Prince knows of 'a bunch' more severe AI-found flaws; VulnCheck sees disclosures doubled Reuters (via Honolulu Star-Advertiser)
Seven experts expect PHP2Shell-style weeks for years; curl's Stenberg and ArmorCode's Rahman say more bugs found does not mean more breaches.
2026-10-22 Germany, the Netherlands and Japan confirm no successful PHP2Shell exploitation despite millions of attempts The Next Web
Officials in Germany, the Netherlands and Japan confirm no successful PHP2Shell exploitation despite millions of attempts reported by Cloudflare's CEO.

Spot an error or something out of date? Tell us; corrections are made and logged. Written with AI assistance from public sources; checked against those sources before publishing. General information, not legal, medical or financial advice.