Cloudflare WAF rules blocking new React Server Components DoS vulnerabilities are active by default. Patch your Next.js to 16.2.5 and React to 19.2.6 to stay protected.
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers.
We are launching a PHP Capture the Flag challenge integrated with our Bug Bounty program to test our WAF protections. Security researchers are invited to bypass our defenses and capture the flag to help make the Internet safer.
Leaked credentials detection now scans the Authorization header for Basic Auth credentials. Your existing WAF rules now catch these without extra configuration.
Europe is pulling the marginal barrel
Negligible Strait of Hormuz flows and healthier Chinese demand support a bullish WTI and WAF outlook, while limited VLCC availability could cap US export growth.
🔎 Watch USGC loadings, refinery runs and US stocks for signals of stronger timespreads.
Real-time tools for faster, better decisions: