Cloudflare launches Zero Wire vulnerability intelligence feed

Cloudflare has launched Zero Wire, a public vulnerability intelligence feed within Cloudflare Radar. The company says the service is intended to help security teams assess significant vulnerabilities in Internet-facing software as the pace and volume of vulnerability discovery increase. It focuses on selected critical CVEs rather than cataloguing every vulnerability, and complements vendor advisories and vulnerability databases.

Each briefing explains the issue in plain language, identifies deployments and teams that should investigate, and links to technical evidence and vendor guidance. It also sets out possible next steps, which may include checking affected versions, applying vendor updates, reviewing suspicious activity or maintaining compensating controls while patching. Cloudflare offers a prompt for AI agents to conduct a read-only assessment of an organisation’s infrastructure; using it does not itself scan or change systems.

Briefings distinguish severity from evidence of active exploitation and include a status, last-checked date and chronology of updates. They may link to CVE records, research, vendor advisories and CISA’s Known Exploited Vulnerabilities Catalog.

Where relevant, Cloudflare may provide observations from its network, including requests matching Web Application Firewall rules; such traffic indicates attempted exploitation, not confirmed compromise, and absence of observed traffic does not prove exploitation is not occurring elsewhere. Cloudflare says WAF mitigations can provide a compensating control for covered traffic but do not replace fixing vulnerable software.