InfoQ - Application Security

Cloudflare Uses an AI Harness to Probe and Harden its WAF

Matt Foster — Wed, 07 Oct 2026 07:21:00 GMT

Cloudflare placed frontier AI models inside a controlled testing harness to probe its Web Application Firewall (WAF), using blocked attacks as starting points for models to generate and refine new variations.

By Matt Foster

AI Agents Are Disrupting Open Source Security Disclosure

Renato Losio — Sat, 03 Oct 2026 06:46:00 GMT

A recent article by Anil Madhavapeddy argues that AI agents can turn publicly available clues about software vulnerabilities into working exploits, reducing the effectiveness of traditional disclosure embargoes in open source projects. The author highlights the need for faster patching and release processes as the time between vulnerability disclosure and exploitation shrinks.

By Renato Losio

Envoy Gateway 1.9.1 Tightens Security and Addresses a Difficult Upgrade Path

Craig Risi — Fri, 02 Oct 2026 12:00:00 GMT

Envoy Gateway has released v1.9.1, a maintenance release that focuses heavily on security, upgrade reliability, and operational correctness following the broader v1.9 release.

By Craig Risi