Cloud infrastructure, DevOps, containers, platform operations, vulnerabilities, defensive guidance, and security advisories.
Cloudflare Workers’ Vitest integration has been renamed from @cloudflare/vitest-pool-workers to @cloudflare/vitest-plugin. Learn what changes, how to migrate automatically with a codemod, and how to mock outbound requests.
Cloudflare’s SCIM 2.0 implementation now supports group replacement through HTTP PUT, enabling identity providers to sync a group’s complete state—including name, external ID, and members—in a single request.
Cloudflare’s dashboard now lets users store up to five login profiles on a device, streamlining sign‑in for returning users by pre‑filling email fields and resuming SSO or social login flows.
Cloudflare announced the general availability of Optional OAuth Scopes, letting developers mark scopes as required or optional so users can grant least‑privilege access on the consent screen.
Cloudflare One Access updated its MCP server portals to understand the new stateless MCP 2026‑07‑28 specification, while retaining backward compatibility with the 2025 Streamable HTTP protocol.
The Headlamp Knative plugin lets operators view, edit, and debug Knative workloads—KServices, Revisions, and traffic splits—directly from the Headlamp UI, consolidating kubectl, kn CLI, and other tools into one interface.
Learn how the Volcano plugin for Headlamp brings batch‑scheduler resources like Jobs, Queues, and PodGroups into a single Kubernetes UI, streamlining troubleshooting for AI/ML, HPC, and other high‑performance workloads.
The Community‑driven Headlamp UI now includes a Cluster API plugin that visualizes clusters, machines, and scaling actions, making CAPI operations easier for platform teams.
JPCERT/CC warns that CVE‑2026‑8452 enables unauthenticated remote code execution on Citrix NetScaler ADC and Gateway when used as SAML SP or IdP, affecting multiple older versions. Upgrade is the only mitigation.
Cloudflare’s API now returns a documentation_url field in 403 Forbidden responses, pointing developers directly to the relevant endpoint docs and required roles.
Cloudflare’s Data Loss Prevention (DLP) Test Scan feature lets Zero Trust customers evaluate DLP profiles on sample data without sending real traffic through the Gateway, providing instant feedback on detections, confidence levels, and OCR output.
Cloudflare’s new CASB remediation policies let you automatically fix file‑sharing misconfigurations in Microsoft 365 and Google Workspace, or forward findings to any webhook, without manual triage.
