Last week was one for the Internet security history books. First, eight eMudhra intermediate certificates were compromised, creating the possibility of forged certificates that could be used to impersonate servers. Then came php2shell: serious vulnerabilities in PHP, the runtime behind a large portion of the Web.
Introducing the Cloudflare PHP Capture the Flag challenge

From the official release
Cloudflare worked around the clock as these events unfolded to protect our customers and help protect the Internet. We shipped client updates and multiple mitigations, updated our web application firewall (WAF) with new rules to block attackers from exploiting the PHP vulnerabilities, and introduced a new feature called full transaction detection.
As always in situations like this, these new capabilities were made available on all plans, including Free.
Put our WAF to the test
This is a short excerpt. Read the full announcement on the official source.
Continue on blog.cloudflare.com → (opens in a new window)Related stories

Fine-Tuning NVIDIA Nemotron to Know Local Rules, Not Just Local Languages
NVIDIA Developer Blog
As AI adoption expands globally, people across languages and cultures are using it in more aspects of their daily lives. General-purpose language models serve... As AI adoption expands globally, people across languages and cultures are using it in more aspects of their daily live

GitHub Universe 2026: Evolving every layer of the stack
GitHub BlogJay Parikh
Our jobs as developers are changing. In a couple of years, we’ve gone from writing every line of code to working with AI assistants to orchestrating fleets of agents. But the goal hasn’t changed: ship completed software work. A feature, a bug fix, a security fix. Completed work,

Octoverse: Commits, pushes, reach new highs in 2026 as developers build with agents
GitHub BlogGitHub Staff
Developers pushed code to GitHub 17.9 billion times in the past 12 months, more than in 2024 and 2025 combined. Behind that number are developers building what interests them and what their communities need. In Nepal, one developer built a flood bulletin on GitHub Pages with veri

NVIDIA RTX Spark Powers Neural Rendering and AI Characters in Games
NVIDIA Developer Blog
NVIDIA RTX Spark is a new Windows PC platform for AI development, creation, and gaming in slim laptops and compact desktops. Powered by an NVIDIA Blackwell RTX... NVIDIA RTX Spark is a new Windows PC platform for AI development, creation, and gaming in slim laptops and compact de
Legora is building the agentic operating system for legal work
OpenAI News
See how Legora uses OpenAI models, ChatGPT, and Codex to accelerate legal workflows, expand contract analysis, and free lawyers to focus on higher-value work.

Muse Is Now Available in Singapore: The World’s First Personal AI Agent Built for Everyone
Meta NewsroomFacebook
Following our global announcement of Muse , we are excited to share that Muse is now available in Singapore. https://about.fb.com/wp-content/uploads/2026/09/Introducing-Muse_Sizzle-Video.mp4 What Muse Can Do in Singapore Connectors are a big reason Muse can do so much. People in
