News, p. 4
News
440 stories · page 4 of 49Cloudflare added an optional email lock to Quick Tunnels and gave agents web search through three partners
From cloudflared 2026.9.3 the --allowed-mail flag lets only chosen emails or domains through a Quick Tunnel, with a one-time PIN from Cloudflare Access and no account for anyone. Without the flag the tunnel stays public. The same day brought Web Search API through AI Gateway: search for agents from Ceramic.ai, Exa and Linkup, at the partners' own prices, no markup.
Read →Cloudflare opened Logpush to every self-serve plan, and from 1 December logs and traces on Cloudflare move to one pricing model
A year after CTO Dane Knecht's pledge, Cloudflare says: every generally available feature of the week that is available on Enterprise is also available on Pay-as-you-go, and most on the free plan too. Where the plans differ, it is in how much, not what. Eight Observability updates bring logs, traces, analytics and alerts into one place, and the new price for logs and traces applies from 1 December.
Read →Ai2 open-sources AstaBrief 8B, the model behind Asta's Fast mode: a cited report about 3.5 times faster than the Claude mode, per Ai2
Ai2 has published the model and its training data. From a research question and excerpts from the literature, AstaBrief writes a cited report, and in Asta it runs as Fast mode next to the Claude-powered Thinking mode. Ai2 itself says the training and evaluation were done mostly in 2025 and that the full evaluation has not been rerun against today's leading models.
Read →Cloudflare ships request tracing across its whole network and a gateway that keeps your server from seeing who is asking
2 October, Cloudflare's Birthday Week. Traces is in open beta: you follow one request through security rules, cache, the Worker and on to origin, with OTLP export and billing from 1 December. OHTTP Gateway is in closed beta: your application gets the contents of the request, and who sent it stays with another operator.
Read →NVIDIA puts a 64 GB DGX Spark on the desk for $4,999 and links two machines into one with a single cable
From 23 October at Acer, ASUS, Dell, Gigabyte, HP and MSI. The GB10 Grace Blackwell chip and 64 GB of unified memory. Sync Cluster Assistant links two boxes with a QSFP cable and pools the memory to 128 GB: per NVIDIA, models of up to 200 billion parameters in the office, no cloud.
Read →Home Assistant Cloud becomes Home Assistant Link, because the word "cloud" is tainted
Nabu Casa is renaming Home Assistant's paid service. The reason is stated plainly: Big Tech has given the cloud a bad name, and some people thought Home Assistant runs in the cloud. The change becomes official in the 2026.12 release in December.
Read →Cloudflare ships Basin for data and K2 for streams, and KV gets a mode where reads drop under two milliseconds
Cloudflare's Birthday Week, 1 October, is about data. Basin, until now the Data Platform, is ready for production: it ingests, organises and queries Apache Iceberg tables on R2, with no egress fee. K2 is a new event stream on the same storage, in public beta. And Workers KV Instant is a private beta for configuration that reaches the whole network in about a tenth of a second.
Read →Cloudflare gives agents a workspace, a small model for decisions and a search that starts costing money in November
Still 1 October, still Birthday Week. Cloudflare OS is an agent that works inside your company's GitHub and Google Workspace: open source today, a managed version behind a waitlist. Clef is a pair of small models that classify and return probabilities so the agent can decide cheaply. AI Search leaves beta and starts costing money on 1 November.
Read →FortiMail is under attack through a hole with no patch ready: CISA gives three days, Fortinet gives a workaround
CVE-2026-104286 in Fortinet's mail gateway: no password, one HTTP request, and the attacker writes files on the system. Fortinet says it has been reported exploited. The fixed versions are "upcoming". Until they land: switch off IBE or take management off the internet. CISA set the deadline for 4 October.
Read →