CORTEXWeek one: The Codebase wins
Problem Statement Currently, the Kyverno ecosystem uses fragmented tooling for testing different types of policies. This creates a disjointed user experience and complicates CI/CD integration for u...
22 juil.
Problem Statement Currently, the Kyverno ecosystem uses fragmented tooling for testing different types of policies. This creates a disjointed user experience and complicates CI/CD integration for u...
Explanation Today, kyverno apply without --cluster turns off Kubernetes-style apiCall context entries. Policies that LIST or GET other objects (for example "is there a PodDisruptionBudget for ...
Explanation This PR adds support for evaluating HTTP and Envoy authorization policies via the Kyverno CLI apply command. It extends the existing validating policy flow so that users can pass HTTP/E...
Stop trying to understand the whole repository. You will never fully comprehend a production-grade CNCF codebase in your first month, and trying to before writing a single line will paralyze you. Find one broken thing, a panic, a silent failure, a missing flag, and become the domain expert of that one specific function. That depth compounds quickly and earns you the trust to take on larger problems. Apply to LFX if the project genuinely interests you and fits your current skillset. The program w
Get started with Microsoft Discovery, an enterprise AI platform on Azure that helps accelerate scientific research, R&D, and advanced scientific computing.
PNNL and Microsoft Corp. are collaborating in a multi-year agreement to hone computing platforms that speed scientific discovery.
New proactive services from Microsoft Incident Response turn security uncertainty into readiness with expert‑led preparation and advanced intelligence.
Stärken Sie Ihre Abwehr mit Microsoft Incident Response, das reaktive und proaktive Dienste bietet. Untersuchen und reagieren Sie auf Cyberbedrohungen, stellen Sie Systeme wieder her und erhöhen Sie die Resilienz.
Fundamentally, we want to fund the most ambitious proposals possible. We aim to fund large-scale RCTs or ambitious, creative pilots or program evaluations that expand our shared understanding of what shows promise and in which contexts, fill gaps where evidence is thin, and inspire new solutions. The fundable directions below lay out a set of possibilities, but we know that we have not come up with all the good ideas in this space. We welcome proposals that may not be captured below. AI could tr
The evidence on retraining and job placement is mixed, and it may not generalize to AI-induced economic disruption and rapid structural transformation. Evaluations of innovative skill retraining, job placement, licensing reform, and sectoral transition packages, including newer AI-enabled matching, credentialing, and learning models, and the bundling of income support with intensive reemployment services, retraining, and relocation assistance.Field experiments on the early-career and professiona
The team at CloudFlare is excited to announce the release of Universal SSL™. Beginning today, we will support SSL connections to every CloudFlare customer, including the 2 million sites that have signed up for the free version of our service.
We’ve upgraded Cloudflare One to support post-quantum encryption by implementing the latest IETF drafts for hybrid ML-KEM into our Cloudflare IPsec product. This extends post-quantum encryption across all major Cloudflare One on-ramps and off-ramps.
Content Security Policy (CSP) is a feature that helps to prevent or minimize the risk of certain types of security threats. It consists of a series of instructions from a website to a browser, which instruct the browser to place restrictions on the things that the code comprising the site is allowed to do.
Today we are making domain-based threat intelligence available to all Cloudflare Client-Side Security customers, regardless of whether you use the Advanced offering. In 2025, we saw many non-enterprise customers affected by client-side attacks, particularly those customers running webshops on the Magento platform. These attacks persisted for days or even weeks after they were publicized. Small and medium-sized companies often lack the enterprise-level resources and expertise needed to maintain a
Transparent pricing for Cloudflare compute, storage, AI, and more — pay for what you use.
Traditional web applications have defined operations: check a bank balance, make a transfer. You can write deterministic rules to secure those interactions. AI-powered applications and agents are different. They accept natural language and generate unpredictable responses. There's no fixed set of operations to allow or deny, because the inputs and outputs are probabilistic. Attackers can manipulate large language models to take unauthorized actions or leak sensitive data. Prompt injection, sensi
The descriptions below detail the fields available for http_requests.
Attackers sometimes use DNS tunneling to bypass firewalls by encoding sensitive data (like passwords or SSH keys) into DNS queries. Instead of a normal request like google.com, the logs will show long, encoded strings. Look for an unusually high volume of queries for unique, long, and high-entropy subdomains by examining the fields: QueryName: Look for strings like h3ldo293js92.example.com, QueryType: Often uses TXT, CNAME, or NULL records to carry the payload, and ClientIP: Identify if a single
Technical deep dives, product updates, and insights from the teams that are helping to build a better Internet.
Gain comprehensive visibility into your environment with Cloudflare Log Explorer, a powerful tool for observability and forensics.