WAF – WAF Release – 2025-10-06

WAF – WAF Release – 2025-10-06

This week’s highlights prioritise an emergency Oracle E-Business Suite RCE rule deployed to block active, high-impact exploitation. Also addressed are high-severity Chaos Mesh controller command-injection flaws that enable unauthenticated in-cluster RCE and potential cluster compromise, plus a form-data multipart boundary…
Cloudflare Fundamentals – Fine-grained Permissioning for Access for Apps, IdPs, & Targets now in Public Beta

Cloudflare Fundamentals – Fine-grained Permissioning for Access for Apps, IdPs, & Targets now in Public Beta

Fine-grained permissions for Access Applications, Identity Providers (IdPs), and Targets is now available in Public Beta. This expands our RBAC model beyond account & zone-scoped roles, enabling administrators to grant permissions scoped to individual resources. What's New Access Applications: Grant…