{"schema_version":"onlylabs.public_signal.v1","title":"Cloudflare (Workers AI) Writing: Cloudflare deploys protections against php2shell vulnerability","description":"Cloudflare (Workers AI) writing signal with public source context, captured evidence pages, related signals, and category-scoped analysis context.","url":"https://onlylabs.fyi/signals/6c59f359-43de-4c9d-be79-876752c91605","json_url":"https://onlylabs.fyi/signals/6c59f359-43de-4c9d-be79-876752c91605/signal.json","generated_at":"2026-10-24T20:21:06.287Z","evidence_latest_fetched_at":"2026-10-21T16:02:47.154176+00:00","signal_first_seen_at":"2026-10-21T16:00:52.275864+00:00","org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud","category_label":"Neocloud","dossier_url":"https://onlylabs.fyi/labs/cloudflare","dossier_json_url":"https://onlylabs.fyi/labs/cloudflare/dossier.json"},"related_urls":{"signal":"https://onlylabs.fyi/signals/6c59f359-43de-4c9d-be79-876752c91605","signal_json":"https://onlylabs.fyi/signals/6c59f359-43de-4c9d-be79-876752c91605/signal.json","source":"https://blog.cloudflare.com/php-vulnerabilities-waf-protection/","lab_dossier":"https://onlylabs.fyi/labs/cloudflare","lab_dossier_json":"https://onlylabs.fyi/labs/cloudflare/dossier.json","analysis":"https://onlylabs.fyi/analysis/cloudflare","analysis_json":"https://onlylabs.fyi/analysis/cloudflare/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","category":"https://onlylabs.fyi/neoclouds","category_json":"https://onlylabs.fyi/neoclouds.json","category_feed":"https://onlylabs.fyi/neoclouds/feed.xml","category_signals_json":"https://onlylabs.fyi/signals.json?category=neocloud","topic":"https://onlylabs.fyi/topics/talking","topic_signals_json":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","topic_feed":"https://onlylabs.fyi/topics/talking/feed.xml?category=neocloud","data_business":null},"answer_pack":{"answer":"Cloudflare (Workers AI) published Cloudflare deploys protections against php2shell vulnerability. This talking signal gives public context for research themes, product direction, policy, or launch framing. High-signal details: Not AI-related, low traction security update. · Cloudflare deploys protections against php2shell vulnerability | Cloudflare Blog Skip to content Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities.... onlylabs links this event to 1 captured evidence page and 6 related writing signals.","signal_desk":"talking","source_context":{"source_url":"https://blog.cloudflare.com/php-vulnerabilities-waf-protection/","source_host":"blog.cloudflare.com","occurred_at":"2026-10-21T13:56:45+00:00","first_seen_at":"2026-10-21T16:00:52.275864+00:00","date_source":"rss.item_date","context":null},"context_markers":[{"label":"Lab","value":"Cloudflare (Workers AI)","source":"signal"},{"label":"Signal desk","value":"talking","source":"signal"},{"label":"Source host","value":"blog.cloudflare.com","source":"source"},{"label":"Author","value":"Daniele Molteni","source":"source"},{"label":"Notability","value":"Not AI-related, low traction security update.","source":"signal"},{"label":"Watch term","value":"Infrastructure","source":"evidence"},{"label":"Watch term","value":"Safety and alignment","source":"evidence"},{"label":"Watch term","value":"Agents and tool use","source":"evidence"}],"evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://blog.cloudflare.com/php-vulnerabilities-waf-protection/"],"related_signals":6,"has_source_url":true,"latest_page_fetched_at":"2026-10-21T16:02:47.154176+00:00"},"data_business":{"matches":false,"lanes":[],"matched_terms":[],"score":null,"reason":null},"agent_handoff":{"signal_json":"https://onlylabs.fyi/signals/6c59f359-43de-4c9d-be79-876752c91605/signal.json","dossier_json":"https://onlylabs.fyi/labs/cloudflare/dossier.json","analysis_json":"https://onlylabs.fyi/analysis/cloudflare/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","topic_signals_json":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","topic_feed":"https://onlylabs.fyi/topics/talking/feed.xml?category=neocloud","category_signals_json":"https://onlylabs.fyi/signals.json?category=neocloud","data_radar_json":null,"opportunities_json":null},"analysis_playbook":{"objective":"Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.","evidence_focus":["post title","source URL","captured page text","HN traction","linked model or paper references","publication date"],"extraction_questions":["Which themes are labs choosing to explain publicly?","Which posts are attracting outside discussion?","Which writing reframes a recent release, model, hiring wave, or policy stance?","Which posts mention data, evals, infrastructure, safety, or deployment workflows?"],"signal_questions":["What public theme, launch framing, or research direction does this writing signal expose?","Which themes are labs choosing to explain publicly?","Which posts are attracting outside discussion?","Do the 6 related writing signals show a repeated pattern?"],"output_fields":["org","theme","public_framing","traction","evidence_url"],"data_business_relevance":"Data-business lane extraction is scoped to frontier labs; for this category, keep conclusions tied to category-specific strategy, source evidence, and follow-up questions.","required_sources":[{"label":"signal_json","url":"https://onlylabs.fyi/signals/6c59f359-43de-4c9d-be79-876752c91605/signal.json","required":true},{"label":"source","url":"https://blog.cloudflare.com/php-vulnerabilities-waf-protection/","required":true},{"label":"dossier_json","url":"https://onlylabs.fyi/labs/cloudflare/dossier.json","required":true},{"label":"analysis_evidence_json","url":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","required":true},{"label":"topic_signals_json","url":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","required":false},{"label":"data_radar_json","url":null,"required":false}],"expected_output":["one-paragraph source-grounded interpretation","category-specific implication","confidence and missing evidence","recommended next source to inspect"],"prompt_seed":"Using only the linked onlylabs JSON, captured source context, and cited evidence, analyze Cloudflare (Workers AI)'s writing signal \"Cloudflare deploys protections against php2shell vulnerability\" for neocloud strategy."},"semantic_triples":[{"subject":"Cloudflare (Workers AI)","predicate":"published","object":"Cloudflare deploys protections against php2shell vulnerability","text":"Cloudflare (Workers AI) published Cloudflare deploys protections against php2shell vulnerability."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"is classified as","object":"writing signal","text":"Cloudflare deploys protections against php2shell vulnerability is classified as writing signal."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"belongs to","object":"talking desk","text":"Cloudflare deploys protections against php2shell vulnerability belongs to talking desk."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has evidence coverage","object":"1 captured evidence page","text":"Cloudflare deploys protections against php2shell vulnerability has evidence coverage 1 captured evidence page."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has captured page count","object":"1","text":"Cloudflare deploys protections against php2shell vulnerability has captured page count 1."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has readable page count","object":"1","text":"Cloudflare deploys protections against php2shell vulnerability has readable page count 1."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has related signal count","object":"6","text":"Cloudflare deploys protections against php2shell vulnerability has related signal count 6."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has analysis playbook objective","object":"Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.","text":"Cloudflare deploys protections against php2shell vulnerability has analysis playbook objective Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has source host","object":"blog.cloudflare.com","text":"Cloudflare deploys protections against php2shell vulnerability has source host blog.cloudflare.com."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has lab","object":"Cloudflare (Workers AI)","text":"Cloudflare deploys protections against php2shell vulnerability has lab Cloudflare (Workers AI)."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has signal desk","object":"talking","text":"Cloudflare deploys protections against php2shell vulnerability has signal desk talking."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has source host","object":"blog.cloudflare.com","text":"Cloudflare deploys protections against php2shell vulnerability has source host blog.cloudflare.com."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has author","object":"Daniele Molteni","text":"Cloudflare deploys protections against php2shell vulnerability has author Daniele Molteni."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has notability","object":"Not AI-related, low traction security update.","text":"Cloudflare deploys protections against php2shell vulnerability has notability Not AI-related, low traction security update.."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has watch term","object":"Infrastructure","text":"Cloudflare deploys protections against php2shell vulnerability has watch term Infrastructure."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has watch term","object":"Safety and alignment","text":"Cloudflare deploys protections against php2shell vulnerability has watch term Safety and alignment."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has watch term","object":"Agents and tool use","text":"Cloudflare deploys protections against php2shell vulnerability has watch term Agents and tool use."}]},"intelligence":{"signal_desk":"talking","answer":"Cloudflare (Workers AI) published Cloudflare deploys protections against php2shell vulnerability. This talking signal gives public context for research themes, product direction, policy, or launch framing. High-signal details: Not AI-related, low traction security update. · Cloudflare deploys protections against php2shell vulnerability | Cloudflare Blog Skip to content Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities.... onlylabs links this event to 1 captured evidence page and 6 related writing signals.","semantic_triples":[{"subject":"Cloudflare (Workers AI)","predicate":"published","object":"Cloudflare deploys protections against php2shell vulnerability","text":"Cloudflare (Workers AI) published Cloudflare deploys protections against php2shell vulnerability."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"is classified as","object":"writing signal","text":"Cloudflare deploys protections against php2shell vulnerability is classified as writing signal."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"belongs to","object":"talking desk","text":"Cloudflare deploys protections against php2shell vulnerability belongs to talking desk."},{"subject":"Cloudflare deploys protections against php2shell vulnerability","predicate":"has evidence coverage","object":"1 captured evidence page","text":"Cloudflare deploys protections against php2shell vulnerability has evidence coverage 1 captured evidence page."}]},"signal":{"id":"6c59f359-43de-4c9d-be79-876752c91605","url":"https://onlylabs.fyi/signals/6c59f359-43de-4c9d-be79-876752c91605","json_url":"https://onlylabs.fyi/signals/6c59f359-43de-4c9d-be79-876752c91605/signal.json","source_url":"https://blog.cloudflare.com/php-vulnerabilities-waf-protection/","title":"Cloudflare deploys protections against php2shell vulnerability","summary":"Cloudflare (Workers AI) published a writing signal. onlylabs watches public writing for research themes, product direction, and model-launch context.","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-21T13:56:45+00:00","first_seen_at":"2026-10-21T16:00:52.275864+00:00","date_source":"rss.item_date","evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://blog.cloudflare.com/php-vulnerabilities-waf-protection/"]},"facets":{},"traction":{"github_stars":null,"hn_points":9,"hn_comments":0,"hn_story_id":"50181326","hf_downloads":null,"hf_likes":null},"data_radar":null},"primary_evidence_page":{"is_primary":true,"source_match":true,"url":"https://blog.cloudflare.com/php-vulnerabilities-waf-protection/","final_url":"https://blog.cloudflare.com/php-vulnerabilities-waf-protection/","title":"Cloudflare deploys protections against php2shell vulnerability","http_status":200,"content_type":"text/html","capture_method":"plain","fetched_at":"2026-10-21T16:02:47.154176+00:00","bytes":287682,"raw_path":"4a59615041b968ae61d1e0514f732a8cd998e846e1d4ee2576a73830be986a25.html","content_hash":"dde0b21ab6cfb197fc7fd07cfd2a7beedf315ffab3b60804a51b024c04b1c769","excerpt_chars":1200,"truncated":true,"excerpt":"Cloudflare deploys protections against php2shell vulnerability | Cloudflare Blog Skip to content Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell . The vulnerabilities affect all web servers running PHP 5.4 or later and they may allow an attacker to cause denial of service, remote code execution, and data exposure when an application processes specially crafted HTTP traffic. Cloudflare has been part of a coordinated effort to deploy mitigations to protect the Internet, working with PHP foundation , OpenAI and Wiz among others. Cloudflare has developed and deployed web application firewall (WAF) protections since early October 2026, which were deployed about 9 hours ahead of public disclosure. Starting on October 21 3:02 am UTC, Cloudflare customers using our free or paid WAF were protected by default against php2shell. Cloudflare successfully deployed multiple mitigations for all its customers while the vulnerability was leaked before the official release date and we observed attack traffic targeting our customers. We observed how attackers were mutating the attack payload to try..."},"evidence_pages":[],"related_signals":[{"id":"9c9d357b-b379-4de0-ab2c-30764ba08632","url":"https://onlylabs.fyi/signals/9c9d357b-b379-4de0-ab2c-30764ba08632","source_url":"https://blog.cloudflare.com/origin-range-requests/","title":"Origin Range Requests: Serving large files without range-request tuning","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-23T18:22:59+00:00","first_seen_at":"2026-10-23T20:00:52.925659+00:00","date_source":"rss.item_date"},{"id":"36b8c4da-4f96-4abc-8a89-7ff3e47942cd","url":"https://onlylabs.fyi/signals/36b8c4da-4f96-4abc-8a89-7ff3e47942cd","source_url":"https://blog.cloudflare.com/post-quantum-geo-key-manager/","title":"Bringing post-quantum cryptography to geographically fenced key management","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-23T18:06:56+00:00","first_seen_at":"2026-10-23T20:00:52.925659+00:00","date_source":"rss.item_date"},{"id":"d9e0cfd4-b38f-4c15-bd9e-81cfe0ac8dfb","url":"https://onlylabs.fyi/signals/d9e0cfd4-b38f-4c15-bd9e-81cfe0ac8dfb","source_url":"https://blog.cloudflare.com/k-isms/","title":"Localizing compliance at scale: achieving South Korea’s ISMS certification","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-22T13:00:00+00:00","first_seen_at":"2026-10-22T16:00:54.670606+00:00","date_source":"rss.item_date"},{"id":"c52bb1e0-df36-4ab7-b8cd-a48a6f37dfef","url":"https://onlylabs.fyi/signals/c52bb1e0-df36-4ab7-b8cd-a48a6f37dfef","source_url":"https://blog.cloudflare.com/full-transaction-waf/","title":"Introducing full transaction detection for Cloudflare WAF","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-21T14:10:42+00:00","first_seen_at":"2026-10-21T16:00:52.275864+00:00","date_source":"rss.item_date"},{"id":"7cf512fd-f264-4ff0-ba38-acd212a3e47e","url":"https://onlylabs.fyi/signals/7cf512fd-f264-4ff0-ba38-acd212a3e47e","source_url":"https://blog.cloudflare.com/webmcp-commerce/","title":"How Commerce.com and Cloudflare are getting storefronts ready for AI agents","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-21T13:00:00+00:00","first_seen_at":"2026-10-21T16:00:52.275864+00:00","date_source":"rss.item_date"},{"id":"5b67a27c-0830-4318-8292-b632e0249996","url":"https://onlylabs.fyi/signals/5b67a27c-0830-4318-8292-b632e0249996","source_url":"https://blog.cloudflare.com/emudhra-certificate-compromise/","title":"8 eMudhra certificates are compromised. Here's what you need to know","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-19T00:00:00.000Z","first_seen_at":"2026-10-21T00:00:54.670884+00:00","date_source":"page.visible_date"}]}