ttyler9 retweeted
I have been debating for months with fellow security people who say AI hacking will not be a big deal.
My argument has consistently been that so much of the fruit is not just low-hanging, but sitting on the ground. That the internet is powered by fragile software, managed by regular people who make mistakes. And that extraordinary harm can come from exposing our flawed systems to more scrutiny.
This is a case in point. Billions in losses from one guys laptop.
How many similar situations do you think there are in the world? Across all our systems globally. That have trillions of dollars and in fact the entire economy running through them?
And that’s just misconfigurations! That’s not even counting AI finding new stuff.
The only reason things were stable before is because there were a tiny number of attackers and far too much surface area to cover. AI just changed all the math.
This has only just begun.
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
Three days. That's how long it took, on average, for attackers to start exploiting high-severity vulnerabilities after disclosure in Q3, according to Rapid7's latest Quarterly Threat Landscape Report.
A few more numbers from the report:
• 71% of exploited flaws were hit within 7 days of disclosure
• 79% were remotely exploitable with no credentials and no user action
• AI played an operational role in only 8% of incidents. The bigger problem is speed.
Most patch cycles take longer than three days. That means every organization will have stretches where a known flaw is open and being exploited.
Patching still matters. But so does a second question: if a vulnerable system gets compromised before the fix is in, what else can it reach?
Teams that can answer that question, application by application, have a lot less to lose in that window.
How many days of exposure is your organization actually accepting today?
#Cybersecurity #VulnerabilityManagement #ZeroTrust #Ransomware
ttyler9 retweeted
Anthropic has replaced Git internally.
The titans are falling.
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
ttyler9 retweeted
🚀 Learn MCP — a hands-on workshop for building a Model Context Protocol server on Cloudflare Workers.
Connect AI to real tools, APIs, and data with global deployment, serverless scale, and built-in security.
Start now → learnmcp.examples.workers.de…
ttyler9 retweeted
Big news! 🚀 We've got @OpenAI newest open models on Workers AI!
Access the new models with reasoning capabilities at @cf/openai/gpt-oss-120b and @cf/openai/gpt-oss-20b.
✨Support for the new Responses API
✨120B model is designed for complex tasks, deeper context understanding, and enhanced reasoning capabilities.
✨20B model is an efficient model for conversational AI and creative content gen.
Read the blog & changelog 👇
ttyler9 retweeted
Cloudflare is the only DDoS vendor that could handle multiple simultaneous current-record DDoS attacks and not be crippled. Is your provider ready for what’s coming?
ttyler9 retweeted
Big day for @Cloudflare as we launch our newest compute primitive, Containers! A bit of history: In 2020, we acquired S2 Remote Browser tech and faced the challenge of migrating it from AWS to our edge. To run a Chromium-based browser securely, we split our team: half focused on the Remote Browser app, half built a robust, independent container platform to support it.
We knew some workloads needed to be close to users but didn’t fit our Workers isolate model. This platform became a game-changer, empowering dozens of internal teams to build features like Workers CI/CD, Browser Rendering, Key Transparency, Workers AI, and more.
But we kept asking: Is this the right primitive for our users? Workers remains the go-to for globally distributed, effortlessly scalable compute at a great price. Initially, many use cases we heard were for single-node webservers that didn’t need region earth. Then we got excited as users started asking for latency-sensitive, real-time applications and the ability to run agents close to the users they serve.
Cloudflare Containers are here to deliver for those high-performance, user-proximal workloads. Excited to see what you build with it!
ttyler9 retweeted
Cloudflare Containers are now available in public beta. Deploy simple, global, and programmable containers alongside your Workers: cfl.re/4kNjs06
ttyler9 retweeted
1/ Very excited that @Cloudflare Log Explorer is now GA! Cloudflare's various products (security, CDN, developer platform) produce a *lot* of logs (we serve >100M HTTP reqs/sec at peak). But previously, you mostly had to send those logs somewhere else to analyze them.
Success at Bell Labs depended on leaders’ ability to identify people with intrinsic motivation, curiosity, and drive—qualities that cannot be measured by conventional productivity metrics.
links.fabiomanganiello.com/s…
ttyler9 retweeted
If you got caught in the Heroku outage, and in particular if your stack is JS/TS, consider giving Cloudflare a go.
Everyone goes down from time to time, but the fact the status page was also down is just wild. As a bonus, the platform is awesome, quick to learn, and rapid 🚀
ttyler9 retweeted
Just moved @Ringblaze website to @Cloudflare and it's so fast!
I moved the website from Google Cloud to Cloudflare Pages and was amazed at how easy the process is.
ttyler9 retweeted
Built Cloudflare Agents to enable autonomous AI workflows that operate entirely at the edge—each agent runs on Cloudflare Workers with sub-millisecond cold starts, leveraging Durable Objects for stateful coordination and seamless communication across distributed components. This means agents can interact with APIs, transform data, maintain context, and trigger downstream logic in real time without centralized compute.
No containers, no cold boot lag, and no infrastructure to manage—just define your workflows, deploy globally, and let agents run persistently and intelligently across the Cloudflare network, handling everything from API orchestration to conditional logic with edge-native speed and reliability.
ttyler9 retweeted
Just shipped my first AI agent on Cloudflare using their new Agents SDK. Real-time updates via WebSockets, built-in state management with Durable Objects, and serverless inference with Workers AI.
Feels like the future of autonomous apps. Zero infra headaches, just code and deploy.
ttyler9 retweeted
.@openai now supports remote MCP servers — which you can deploy on cloudflare in just a few clicks
auth and transport included with agents sdk ✨
ttyler9 retweeted
This is incredibly important for the future of an agentic web. If bots are going to do more for us, we need to reliably identify them. Here’s the open standard we’re working with the IETF to implement. blog.cloudflare.com/web-bot-…
ttyler9 retweeted
if you're building a multi-tenant application that needs to support custom (vanity) domains, you don't need to roll it all yourself. just use cloudflare for saas
it's only $.10 per custom hostname — ssl management, cdn, etc built in, and will scale endlessly
ttyler9 retweeted
Cloudflare is teaming up with Anthropic, Asana, Atlassian, Block, Intercom, Linear, PayPal, Sentry, Stripe, and Webflow to launch new remote MCP servers, built on Cloudflare.
blog.cloudflare.com/mcp-demo…


















