2025 年 Cloudflare 安全周：从量子密码学到人工智能迷宫

发布于 4 月 5 日

Cloudflare Security Week 2025: Announced various cybersecurity service improvements and reports on security trends. Introduced AI Labyrinth (a honeypot version against unauthorized crawlers) and Cloudflare for AI (tools for secure AI adoption).
- Protecting from quantum threats: Organizations can tunnel corporate network traffic through Zero Trust platform to protect from quantum adversaries without upgrading each app/system.
- Improvements to Cloudflare One: Enterprise security teams can use CASB product to scan Amazon S3 and Google Cloud Storage for posture and data loss prevention challenges.
- Enhanced security with automated botnet protection: Added cipher suite selection and updated URL Scanner. Workers AI and AI Agents SDK facilitate AI app development.
- AI Labyrinth: Uses AI-generated content to slow down and confuse AI crawlers, but has concerns about model collapse.
Key metrics: 41% of successful logins involved compromised passwords based on observed traffic from September to November. Password reuse enables large-scale bot attacks.
Monitoring and forensics: Log Explorer now has seven additional product datasets (Access, Gateway DNS, etc.) for native monitoring and custom dashboards to monitor suspicious activity.
Advancing MFA adoption: Added Apple and Google social logins.

阅读 8