The name is the button.

An agent writes the code now, and a human thumb hovers over Accept all a hundred times a day. The honest question of this decade is what, exactly, you just accepted. So I read the diff.

Eight years as a backend engineer in Stockholm, back in Tokyo since 2023, and I still ship something small most nights, usually badly. My one rule: the only real review of a model is the thing you built with it. That is why there is no leaderboard on this site.

Around a hundred and forty sources come through — the labs' own posts, the papers, the tools, the runtimes and languages nobody is watching yet, the chip under the demo, and the newsletters people actually forward. What is moving gets counted so the week reads at a glance, and every few days I explain one mechanism in plain words.

A story here is a headline, a short excerpt, one image and the link to whoever wrote it. We never reproduce the post; the images belong to their authors. A post written in Japanese appears in Japanese, exactly as it was published, and the link goes to the original.

— Yuki Halvorsen, Tokyo

← Accept All Archive

Cloudflare BlogTools

Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang

10.26

On September 8, 2026, we were alerted by a security researcher, Gadi Evron from Knostic, to a tenant isolation issue affecting the GLM-5.3 Workers AI model ( @cf/zai-org/glm-5.3 ) starting on August…

Security Workers AI

Read at Cloudflare Blog ↗

One letter a week, starting soon.

Latest

Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang

More from Cloudflare Blog on Accept All

ToolsOrigin Range Requests: Serving large files without range-request tuning Cloudflare Blog

ToolsBringing post-quantum cryptography to geographically fenced key management Cloudflare Blog

ToolsIntroducing full transaction detection for Cloudflare WAF Cloudflare Blog

ToolsCloudflare deploys protections against php2shell vulnerability Cloudflare Blog

ToolsHow Commerce.com and Cloudflare are getting storefronts ready for AI agents Cloudflare Blog

Tools8 eMudhra certificates are compromised. Here's what you need to know Cloudflare Blog