Cloudflare announces the beta release of Automatic Audit Logs, a unified system that standardizes logging across products and expands coverage from 75% to 95% of services. The system automatically generates detailed records of user actions, authentication methods, and resource access patterns without manual intervention, while ensuring sensitive data protection through intelligent redaction.
A vulnerability in Cloudflare's Mutual TLS implementation allowed certificates from one zone to be used in another zone through session resumption, tracked as CVE-2025-23419. The security flaw was discovered through Cloudflare's Bug Bounty Program and was mitigated within 32 hours by disabling TLS session resumption for mTLS customers.
Cloudflare's Browser Integrity Check feature is currently blocking access to several non-mainstream browsers including Pale Moon, Falkon, and SeaMonkey. Despite similar incidents occurring annually and previous commitments from Cloudflare to avoid discriminating against browsers, the issue persists with no official response or resolution from the company.