EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·7d ago·5 min read
How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers
TL;DR
Cloudflare addressed a cross-tenant data exposure vulnerability in its Containers service, ensuring no customer data was compromised. The fix was implemented without requiring any changes from customers.
✦ Why It Matters
Review your cloud security practices to ensure they align with the latest vulnerability disclosures.
Key Takeaways
- Stay informed about vulnerabilities in cloud services you use.
- Implement regular security audits for your cloud infrastructure.
- Collaborate with security researchers through bug bounty programs.
- Ensure your configurations are up to date with provider recommendations.
Full Summary
On September 4, 2026, security researcher Oren Yomtov reported a vulnerability in Cloudflare Containers, which run workloads on shared infrastructure. The issue allowed a customer with a Workers Paid account to potentially access residual disk blocks from previous workloads on the same host.
Although the technique could not target specific data or customers, it raised concerns about data exposure. Cloudflare quickly remediated the vulnerability across its Containers fleet, with no evidence of exploitation found in historical data.
The response involved collaboration with Yomtov and the Accomplish security team, who validated the issue through controlled testing. As a result, Cloudflare reinforced its security measures while maintaining customer trust.