Cloudflare worked with the IETF to develop and has released in beta across its IPsec products a mitigation against quantum downgrade attacks on IPsec, addressing a design flaw it rediscovered that let…
Migrating IPsec authentication from RSA-2048 certificates to ML-DSA across a multi-router network cannot be done without an outage, because authentication requires selecting a single signature method …
"Copy Fail," a dangerous Linux local-privilege escalation vulnerability that exploits a kernel memory corruption flaw to provide a controlled 4-byte write into the Linux page cache. This allows attack…
Cloudflare has made post-quantum encryption generally available for its IPsec product, using the hybrid ML-KEM (FIPS 203) standard to protect wide-area networks against harvest-now-decrypt-later attac…