Releasesby GlyphWAF - WAF Release - 2025-10-24 - Emergency
This week’s release introduces a new detection signature that enhances coverage for a critical vulnerability in Windows Server Update Services (WSUS), tracked as CVE-2025-59287. Key Findings The vulnerability allows unauthenticated attackers to potentially achieve remote code execution.
Also shipped Oct 24, 2025Cloudflare in October 2025 →
What's new in Sigma
API Impersonate a user in API calls (Beta) A user assigned the Admin account type can impersonate other users in API calls, for example to retrieve and display the contents of their My Documents folder in embedded content. For more details and an example test Python script, see Impersonate users .
Magic Config, HTTP Metrics, Secure DB queries
Last week, one of our newest additions was repo-aware settings, giving you autocomplete for your Railway config paths. This week? We're doubling down on the zero-config magic. Railway now automatically detects the environment variables your code needs and surfaces them right when you're configuring your service.
- Duplicate MotherDuck notebook cells: Duplicate cells in MotherDuck UI notebooks using the cell options menu...
- Duplicate MotherDuck notebook cells: Duplicate cells in MotherDuck UI notebooks using the cell options menu or command menu. Access the duplicate option from the three-dot options menu on any cell, or use Cmd/Ctrl + Shift + P to open the command menu and search for "duplicate."
The little things, week ending October 24, 2025
A collection of updates to Replicate for the week ending October 24, 2025.
AI tooling, branch navigation, and Postgres updates release - Oct 24, 2025
Claude Code plugin for Neon. We've launched a new plugin that brings Neon's capabilities directly into Claude Code. The new plugin includes Claude Skills to str...
React Router 7 middleware now supported
React Router 7 recently launched its long-awaited middleware feature, stable since v7.9.0. Middleware is now fully supported on Netlify. How to use it Ensure you're on version 7.9.0 or later of React Router: npm install react-router@latest @react-router/node@latest @react-router/dev@latest Upgrade to version 2 of the Netlify React Router plugin: npm install...
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Workers - Automatic resource provisioning for KV, R2, and D1
Previously, if you wanted to develop or deploy a worker with attached resources, you'd have to first manually create the desired resources. Now, if your Wrangler configuration file includes a KV namespace, D1 database, or R2 bucket that does not yet exist on your account, you can develop locally and deploy your application seamlessly, without having to run...
Workers - Build TanStack Start apps with the Cloudflare Vite plugin
The Cloudflare Vite plugin now supports TanStack Start ↗ apps. Get started with new or existing projects. New projects Create a new TanStack Start project that uses the Cloudflare Vite plugin via the create-cloudflare CLI: npm yarn pnpm npm create cloudflare@latest -- my-tanstack-start-app --framework=tanstack-start yarn create cloudflare...
WAF Release - 2025-10-23 - Emergency
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in Adobe Commerce and Magento Open Source, linked to CVE-2025-54236. Key Findings This vulnerability allows unauthenticated attackers to take over customer accounts through the Commerce REST API and, in certain configurations, may lead to remote code execution.
Workers AI Markdown Conversion: New endpoint to list supported formats
Developers can now programmatically retrieve a list of all file formats supported by the Markdown Conversion utility in Workers AI. You can use the env.AI binding: await env. AI . toMarkdown ().
Workers Preview URL default behavior now matches your workers.dev setting
We have updated the default behavior for Cloudflare Workers Preview URLs . Going forward, if a preview URL setting is not explicitly configured during deployment, its default behavior will automatically match the setting of your workers.dev subdomain .
Logs - Azure Sentinel Connector
Logpush now supports integration with Microsoft Sentinel ↗ .The new Azure Sentinel Connector built on Microsoft’s Codeless Connector Framework (CCF), is now available. This solution replaces the previous Azure Functions-based connector, offering significant improvements in security, data control, and ease of use for customers.
Radar - TLD Insights in Cloudflare Radar
Radar now introduces Top-Level Domain (TLD) insights, providing visibility into popularity based on the DNS magnitude metric, detailed TLD information including its type, manager, DNSSEC support, RDAP support, and WHOIS data, and trends such as DNS query volume and geographic distribution observed by the 1.1.1.1 DNS resolver.
Security Center - Cloudforce One RFI tokens are now visible in the dashboard
The Requests for Information (RFI) dashboard now shows users the number of tokens used by each submitted RFI to better understand usage of tokens and how they relate to each request submitted. What’s new: Users can now see the number of tokens used for a submitted request for information.