Ideas for building
better software.

Access, Cloudflare One - Sign in to Cloudflare Access with passkeys

Cloudflare Access supports passkeys as a login method for protected applications and the App Launcher. Users can sign in with a passkey saved on their device, security key, or password manager instead of entering a one-time PIN or configuring an identity provider. Users verify their identity with an existing login method once before enrolling a passkey. Administrators choose which applications accept passkeys and can remove a user's registered passkeys. Access policies still determine whether a

Build for an expanding lineup of Android XR devices with production-ready tools from Android Developer Summit

AI Gateway - Review provider key activity in AI Gateway

AI Gateway now shows usage activity for your stored provider keys. Use this information to review credentials for rotation or removal. In Provider Keys, keys are grouped by provider with masked previews, aliases, and last-used and last-updated dates. The Key security section highlights keys with recorded activity older than 90 days. You can review these keys and delete them after checking their dependencies. Usage tracking starts November 2026. For details on storing, rotating, and removing prov

Egyptian and Nigerian English join the Open ASR Leaderboard

Cloudflare Fundamentals - User API tokens have a redesigned creation experience

User API tokens now use a redesigned dashboard experience that more closely matches Account API tokens, making it easier to create and review user-owned credentials while preserving their user-scoped behavior. What's new A more consistent creation flow: User API tokens now follow the same modern dashboard pattern as Account API tokens, including a clearer create and review experience. Improved policy editing: Policies are now easier to read and manage, with inline controls to add, edit, and re

Threat actors use agentic AI tooling to find and abuse exposed secrets

Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the associated OAuth application and perform authenticated actions in the application’s tenant. Agents operating on behalf of threat actors then used the compromised OAuth applications to perform a variety of subsequent actions within compromised organizations. The post Threat actors use agentic AI tooling to

The New York Times is in talks to buy Letterboxd for around $330 million

Letterboxd’s homepage. The New York Times Company is in talks"exclusive negotations" to acquire Letterboxd, the social network for film lovers, for around $330 million, The New York Times reports. The Times Company, Sony Pictures Entertainment, and A24 were all recently rumored to be among those interested in buying Letterboxd. The negotiations with the Times Company have included the potential for Letterboxd's co-founders to stay in charge but report to a Times Company executive. Letterboxd w

Brazilian Credit Guarantor Fund Data Breach Affecting PII and Payout Data

Comments