Two PHP flaws could let attackers run code on web servers. The details leaked early, and looking at requests alone could not reliably tell an attack from normal traffic.

A firewall feature that checks both the request and the server's response, and blocks a matching response before it reaches the attacker. It is on by default for all plans with the firewall, including free ones.

Shopping agents guess their way around web pages by clicking buttons, which is slow and breaks when a site changes its design.

Cloudflare adds WebMCP tools such as product search and add-to-cart to Commerce.com stores at the edge, with a simple opt-out for each merchant. Shoppers still click checkout themselves.

Copying data through the CPU's memory slows down GPU work, and Python code had no simple way to use Nvidia's direct storage path.

A tutorial for the KvikIO library that reads files into GPU memory and checks, using built-in statistics, whether the fast direct path was really used.

Video world models that react to keyboard and mouse input are usually too slow for live play.

A 5B-parameter model trained on 440 recorded navigation clips, which makes new video frames from past frames and user input. The dataset, training code and inference code are all open.

Running web apps on Lambda used to mean rewriting them as event handlers or adding adapters.

Lambda Web Functions runs Express, Hono, Fastify or Next.js servers as they are. Billing counts only the CPU time the code uses.