Rolled out to all points of presence on 17 September 2025. No action is required.
- New dashboard widget: Safari 19.
- API: new endpoint Azure Sentinel.
- Managed WAF: 14 new signatures for recently disclosed CVEs.
- Improved fingerprint consistency scoring for CVE-2026-1127 clients.
- Faster rule propagation: median 7 seconds to all PoPs.
- Fixed a race in origin health checks that could mark a healthy origin as down for up to 43 seconds.
- Log streaming now supports challenged vs. dropped traffic by ASN.
- Added OpenTelemetry support to the rules engine.
Solid runbook advice. The DNS-at-2am point hit home.
Machine-readable ranges are at /ips.json and via the API.
Thanks — sharing this with our on-call team.
Great to hear, thanks for sharing your experience.
Nice to read a vendor blog that admits what went wrong.
Is the risk score exposed in the logs so we can build our own dashboards on it?
Great to hear, thanks for sharing your experience.
Would love a follow-up on how you handle HTTP/3 fingerprinting.
We had the exact false-positive issue with CGNAT carriers. The weighting change makes sense.