NewsSANS NewsBites
Cloudflare Announces Private Access Control Token Initiative
NEOSEC enrichment — no mirror of the original source
Cloudflare is collaborating with major browser makers — Mozilla, Google, and Microsoft — to develop a protocol to help websites differentiate malicious internet traffic from legitimate traffic. The increasing use of generative AI as well as
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Dukes, Frost, Murray, Neely, Ullrich.
More on Cloudflare
Other advisories
- Not ratedosv:CLEANSTART-2026-DJ95969Security fix for GHSA-f6x5-jh6r-wrfv applied in: gatekeeper 3.20.1-r0, kyverno-policy-reporter-ui-fips 2.4.4-r0, prometheus-alertmanager-fips 0.29.0-r1, actions-runner-controller 0.13.0-r1, nodetaint 0.0.4-r1, trivy 0.67.2-r0, nats-server-fips 2.11.11-r1, nats-server-fips 2.9.25-r1, alertmanager-fips 0.29.0-r1, nats-server-fips 2.10.29-r2, falcosidekick 2.32.0-r0, falcosidekick-fips 2.32.0-r0, cloudflared 2025.11.1-r1, go-fips-1.24 1.24.12-r0, gitaly 14-9-3-r0, gitaly-fips 14.9.3-r0
- Not ratedosv:CLEANSTART-2026-ZA63821Security fix for GHSA-j5w8-q4qc-rx2x applied in: gatekeeper 3.20.1-r0, kyverno-policy-reporter-ui-fips 2.4.4-r0, prometheus-alertmanager-fips 0.29.0-r1, falcoctl-fips 0.11.0-r0, nodetaint 0.0.4-r1, trivy 0.67.2-r0, nats-server-fips 2.11.11-r1, nats-server-fips 2.9.25-r1, alertmanager-fips 0.29.0-r1, nats-server-fips 2.10.29-r2, falcosidekick 2.32.0-r0, falcosidekick-fips 2.32.0-r0, cloudflared 2025.11.1-r1, go-fips-1.24 1.24.12-r0, gitaly 14-9-3-r0, gitaly-fips 14.9.3-r0
- Not ratedosv:CLEANSTART-2026-TE86734Security fix for GHSA-mqqf-5wvp-8fh8 applied in: kyverno-policy-reporter-ui-fips 2.5.1-r0, kyverno-policy-reporter-ui-fips 2.3.10-r0, kyverno-policy-reporter-ui-fips 2.4.4-r2, cloudflared 2025.11.1-r2
- Not ratedosv:CLEANSTART-2026-HS45172Security fix for GHSA-9h8m-3fm2-qjrq applied in: gatekeeper-fips 3.20.1-r1, grafana 12.2.6-r0, grafana 12.2.7-r0, gatekeeper 3.20.1-r1, minio 0.20251015.172955-r1, grafana 12.1.8-r0, grafana 12.1.9-r0, cloudflared 2025.11.1-r2
- MediumCVE-2026-39741RelyWP Simple Cloudflare Turnstile: fehlende Autorisierung
- MediumCVE-2026-39741RelyWP Simple Cloudflare Turnstile: fehlende Autorisierung
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2025-8556CVE-2025-8556 in github.com/cloudflare/circl - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-1229CVE-2026-1229 in github.com/cloudflare/circl - Patched by Root
Other news entries
- Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%NewsThe Hacker News
- In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data LeakNewsSecurityWeek
- Hackers pile on PHP2Shell as AWS reveals attacks began before disclosureNewsThe Register — Security
- Researchers Infiltrate Microsoft Tech Support Scam OperationNewsDark Reading
- Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support ScamsNewsThe Hacker News
- Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam MessagesNewsThe Hacker News
- 100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealerNewsThe Hacker News
- Cloudflare plans to issue quantum-safe TLS certificatesNewsArs Technica — Security
ID