Cloudflare: daily requests from LLM pentest agents up 30x since Oct 1

More than 50 framework families now scan Cloudflare customers from thousands of IPs and chain stolen credentials to move laterally. Rate limits and detection built around human-paced attackers now face automated attacks at machine volume. Read: More than 50 framework families now scan Cloudflare customers from thousands of IPs and chain stolen credentials to move laterally. Rate limits and detection built around human-paced attackers now face automated attacks at machine volume. Read: Apps that embed llama.cpp have tracked a moving API. From 1.0, any API or ABI incompatibility bumps the major version, so teams can pin 1.x against a stated contract. The cut itself removes 35 deprecated header functions, so old integrations break once. Read: When nearly every prompt is approved, the prompt filters almost nothing. Anthropic instead caps what an agent can reach with sandboxes, VMs and egress controls, and its auto mode hands approvals to classifiers plus an input-side injection probe. Try: Dropping one old screenshot per step rewrites earlier messages and voids the prompt cache. Pruning in one batch kept the cache and cut BU Bench cost from $0.434 to $0.208 per task at the same score, a change any screenshot-heavy agent can copy. Read: Across 2,160 airline and retail episodes, judges reading transcripts agreed with gold-state scoring only 56.2% of the time. A transcript can read as compliant while the database shows a banned write, so a simple rule-based check on writes catches what the judge missed. Watch: Mozilla uses the model to rank investigations, verify reports, hunt related bug patterns and help write fixes. The 8x year-over-year gain covers fixes as well as discovery, so the extra findings reached patches instead of piling up as unchecked reports. Read: Hy4 also ranks third on the Artificial Analysis Cyber Index at 58%, slightly above Grok 4.7 at xhigh for about one eleventh of its cost per task. Security agents run many tasks across a codebase, so per-task cost sets how much code they can afford to cover.