The latest wire

De multiples vulnérabilités ont été découvertes dans les produits FoxIT. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une atteinte à la confidentialité des données.

Cloudflare reported a network-performance disruption affecting traffic through its Taipei facility on September 22, 2026. The provider placed the affected period at approximately 19:30–19:35 UTC. The incident notice appeared at 21:41 UTC that day and marked the event resolved, after the reported five-minute disruption had ended.

As Kubernetes adoption has grown, the conversation has shifted beyond running containers to managing increasingly complex application lifecycles. Modern platforms support stateless web services, stateful databases, batch processing, AI workloads, and platform services. At the same time, they must remain reliable during upgrades, scaling events, and infrastructure failures. Every Kubernetes user relies on SIG Apps, whether they realize it or not. Deployments, StatefulSets, DaemonSets, Jobs, and CronJobs form the foundation of how applications are deployed, updated, scaled, and operated across the Kubernetes ecosystem. SIG Apps is focused on improving workload resilience, refining application lifecycle management, and addressing the operational challenges that emerge when applications encounter node failures, rollout disruptions, and increasingly complex infrastructure environments.

On 22 September 2026, F5 published an advisory addressing a critical vulnerability affecting its BIG-IP APM product. The vendor confirmed active exploitation in the wild. CERT-EU recommends taking appropriate actions as soon as possible.

Cloudflare reported that Bot Management configuration updates were failing to reach its edge network on September 22, 2026. The company said existing bot settings at the edge were unaffected. An investigation notice appeared at 15:31 UTC; at 16:35, Cloudflare reported applying an effective fix and closed the incident.

Live broadcasts with LL-HLS enabled returned playback errors for some Cloudflare Stream customers on September 22, 2026. The provider opened an investigation at 14:37 UTC and reported that a fix had been implemented seven minutes later. It monitored the results before marking the incident resolved at 15:38 UTC.

Cloudflare attributed intermittent packet loss at its Los Angeles facility to traffic congestion on September 22, 2026. Its incident notice places the disruption between 13:37 and 14:49 UTC and identifies a capacity constraint. The provider said it had addressed that constraint, restored normal traffic flow and resolved the connectivity issue at the LAX location.

Cloudflare restored Workers and Durable Objects analytics visibility for FedRAMP High customers in an incident closed on September 22, 2026. The provider said affected datasets had not been returned correctly by its analytics dashboard and GraphQL API since June 11, although the underlying data remained intact. A fix was being monitored at 10:08 UTC, and the incident was marked resolved at 12:51.

Sep 22, 08:20 UTC Resolved - Cloudflare verified and resolved performance issues in our San Jose (SJC-A) data center. Users in the region may have experienced increased latency or connectivity issues between 07:20 and 08:20 UTC today.

CERT-FR identifies a remote code execution flaw in SolarWinds Access Rights Manager releases before 2026.2.1. The issue is tracked as CVE-2026-28326 and is covered by a SolarWinds security advisory dated September 17. The French agency's September 22 notice directs administrators to that vendor guidance for the required correction details.

Workers Builds now supports repositories hosted in Cursor Origin. Connect a Cursor Origin repository to automatically build and deploy production changes, preview non-production branches, and see build status in pull requests. Pushes to your production branch automatically build and deploy your Worker. When you enable non-production branch builds, each branch receives a version-specific preview URL and a stable preview URL that follows the latest build. Cloudflare posts build status and preview links to the Cursor Origin pull request and creates a check run for each triggered build. To get started, install the Cloudflare app in Cursor ↗︎, choose the Cursor Origin repositories Cloudflare can access, and follow the prompts to configure your Worker build. For details, refer to the Cursor Origin integration.

Claude Opus 5.5 is available through Vercel AI Gateway with a one-million-token context and up to 128,000 output tokens. Integrators must account for two compatibility changes: thinking is always adaptive, and forced tool selection is unsupported. Requests that disable thinking, specify a fixed reasoning budget or require a particular tool can fail. Vercel recommends structured outputs for workflows that previously forced tools to obtain JSON.

CERT-FR warns of SQL injection and security-policy bypass vulnerabilities in Moodle. Its September 22 advisory covers releases earlier than 4.5.14, plus the 5.0, 5.1 and 5.2 branches before 5.0.10, 5.1.7 and 5.2.3 respectively. It links two Moodle security notices published that day and directs site administrators to them for the corresponding fixes.

You can now test every change you make in an isolated, production-like environment with Worker Previews ↗︎. Each Preview runs under the same Worker with its own code, configuration, URL, and observability, isolated from production and every other Preview. Configure each Preview Define the variables, bindings, and settings that new Previews start with in the previews block of your Wrangler configuration file. Set secrets with Wrangler commands. You can override one Preview without changing production or other Previews. For Durable Objects and Containers, Cloudflare automatically provisions separate namespaces, storage, apps, and instances for every Preview. State changes, sessions, memory, migrations, and concurrent tests remain scoped to that Preview. To isolate KV, D1, R2, or another account-level resource, bind the Preview to a separate resource.

Vercel added OpenAI’s GPT-6 Sol and GPT-6 Luna to AI Gateway. The announcement positions Sol for extended coding investigations and more complex agent workflows, while Luna targets focused, repeatable tasks at higher volume. Vercel describes both as lower-priced than GPT-6 Astra and claims improved reliability over their GPT-5.6 counterparts.

Kubernetes v1.37 promotes the PersistentVolumeClaimUnusedSinceTime feature gate to Beta (enabled by default). With this feature, the PersistentVolumeClaim (PVC) protection controller adds an Unused condition to each PVC, telling you whether any running pod currently references it — no custom tooling or cross-referencing required. For the API definition of PVC conditions, see the PersistentVolumeClaim API reference. Read on to learn how the Unused condition works and how to use it. Why track PVC usage? In large-scale Kubernetes clusters, it is common for users to create PVCs and then delete the associated pods without cleaning up the storage, because Kubernetes does not automatically delete PVCs when their pods are removed (to protect against accidental data loss). Over time, these orphaned PVCs may accumulate, silently consuming storage capacity and driving up cloud costs.

Sep 21, 18:15 UTC Resolved - Cloudflare investigated an elevated rate of PUT request failures to R2 within the WNAM and ENAM regions. As a result, storing assets in Cache Reserve failed for some requests.

Vercel Connect now offers a managed Microsoft Teams connector, allowing applications and agents to respond through a bot to direct messages or channel mentions. Vercel provisions the Entra app and Azure Bot resource, but setup requires a tenant administrator with an Azure subscription. Tokens are requested with specific scopes and refreshed automatically; connector access remains limited to attached environments and can be revoked.

Vercel now shows billable build duration and CPU minutes for individual deployments in the dashboard, CLI and REST API. Duration combines build and post-build time, rounded up to a whole minute; multiplying it by the machine's vCPU count gives CPU minutes. The breakdown helps teams understand each build's contribution to usage, with CLI support requiring version 59.23.1 or later.

Cloudflare reported problems starting containers in the Asia-Pacific region on September 21, 2026. The incident was announced at 12:42 UTC; the provider said it had identified the issue by 13:15 and was monitoring a fix by 13:21. Its final update marked the incident resolved at 13:23 UTC.

EFF's analysis of the European Commission's proposed Kids Act questions whether age checks and restricted platform access would adequately protect children. It argues that these measures could also undermine privacy and access to information. The organization calls for stronger safeguards around data collection and meaningful participation by young people as the proposal develops.

Cloudflare reported a domain-registration problem affecting selected extensions on September 21, 2026, including .xyz, .security, .hosting and .storage. Its 09:37 UTC notice also named extensions such as .audio, .game and .fm among those whose registrations were affected. The provider marked the incident resolved in an update posted at 09:49 UTC.

Vercel AI Gateway now exposes TypeSafe AI’s Jev through existing TypeSafe clients and an HTTP API, alongside the AI SDK. Jev returns typed decision results rather than generated prose, supporting boolean, choice and scoring questions. Existing clients can retain their evaluation calls while changing connection settings, and requests through all three interfaces appear in the gateway’s billing and observability.

Supabase has renamed the Dashboard's database replication destination area to Pipelines, separating it from read replicas managed under infrastructure settings. Existing replication-page bookmarks and destination links redirect to their corresponding Pipelines pages. The announcement says pipeline configuration and behavior, management and database APIs, and replication logs are unchanged, so this is a navigation update rather than a migration of stored data.