This Week in NET

Cloudflare

This Week in NET is Cloudflare’s weekly roundup exploring the Internet’s past, present, and future. Hosted by João Tomé with expert guests, it shares insights that matter to developers, businesses, and Internet enthusiasts alike. Follow us on X: @CloudflareTV and @Cloudflare Read our blog posts at blog.cloudflare.com Watch our full video library at cloudflare.tv/ThisWeekInNet

  1. 1D AGO

    From SQL Injection to Cloudflare VP: Chema Alonso on 25 Years of Hacking

    In this episode of This Week in NET, host João Tomé is joined by Chema Alonso, Vice President and Head of International Development at Cloudflare. Chema shares how a 1998 paper on SQL injection launched his career in hacking, his path from running a startup in Madrid to becoming a Microsoft MVP for 14 years, and how he ended up leading cybersecurity at Telefónica for more than a decade — after telling them “you don’t have enough money to make me work for you.” He also explains why he left Telefónica in 2025 to join Cloudflare, and what surprised him about the company’s technical depth. The conversation explores how AI is changing cybersecurity, from AI agents competing in Capture-the-Flag contests to automated attack chains running around the clock. Chema also discusses the black market for zero-day vulnerabilities, Cloudflare’s role in Europe, and how AI may reshape the economics of the Internet. We also hear the story behind his famous beanie hat, a Bluetooth exploit that Apple initially called “a feature” until Steve Wozniak got involved and a quick-fire round covering his first computer, favorite hacks, admired researchers, and why Gemini once hallucinated that he went to jail. ⏱️ Timestamps  01:00 — How SQL injection in 1998 started his career 02:36 — From startup to Microsoft MVP to training Spain's cyber forces 04:36 — Black Hat, Def Con, and the global hacking scene 05:53 — How Telefonica recruited Chema 08:49 — 20 years of daily blogging as "brain gym" 10:27 — The beanie hat origin story 14:34 — Why he left Telefonica to join Cloudflare 17:41 — What customers are most worried about: AI security 22:55 — Cloudflare's role in Europe: sovereignty, resilience, and growth 26:58 — How AI is disrupting the Internet's business model 28:44 — The evolution of hacking: from phreaking to AI agents 37:42 — The Dirty Tooth iPhone Bluetooth exploit and Steve Wozniak 41:39 — Quick-fire round: first computer, favorite hack, Kevin Mitnick 43:58 — Google Gemini hallucinated that Chema went to jail 46:49 — The future of the Internet and Cloudflare

    49 min
  2. MAR 13

    Post-Quantum, Deepfakes & Agile SASE: Cloudflare One's Biggest Week

    In this episode of This Week in NET, host João Tomé is joined by Warnessa Weaver (Senior Product Manager) and Yumna Moazzam (Senior Product Marketing Manager) to break down Cloudflare’s SASE blog takeover week and what it means for enterprise security. Cloudflare One is evolving into an agile, composable, and programmable SASE platform, built natively on Cloudflare’s global network spanning 300+ cities. The conversation explores how organizations can modernize remote access, secure AI adoption, and replace legacy architectures that often take 18 months to deploy with migrations completed in 4–6 weeks. The episode covers: • Post-quantum encryption now in GA for Cloudflare One • Deepfake defense through a new Nametag partnership • Adaptive access with user risk scoring and signals from CrowdStrike and SentinelOne • Programmable gateway policies using Cloudflare Workers • DLP visibility for Microsoft 365 Copilot, ChatGPT, Gemini and more • Clipboard controls for browser-based RDP sessions • Closing the boot-to-login security gap with the Cloudflare One client • CASB remediation for Microsoft 365 and Google Workspace The episode also includes a run-through of other recent Cloudflare blog posts, including AI Security for Apps (now GA), slashing agent token costs by 98% with RFC 9457, Nvidia Nemotron 3 Super on Cloudflare, and a new stateful API vulnerability scanner. Check the Cloudflare Blog: https://blog.cloudflare.com/tag/sase ⏱️ Timestamps 00:37 — Blog run-through: AI Security for Apps, RFC 9457 agent errors, API vulnerability scanner 02:17 — Nvidia Nemotron 3 Super on Cloudflare 03:29 — What is agile SASE and Cloudflare One? 05:44 — Composability and programmability explained 07:53 — Built on Cloudflare’s global network vs legacy vendors 09:07 — The truly programmable SASE platform 10:04 — Custom gateway policies with Cloudflare Workers 12:16 — Post-quantum encryption in Cloudflare One 13:14 — Harvest now, decrypt later 14:34 — Boot-to-login security with the Cloudflare One client 17:35 — Independent MFA in Cloudflare Access 19:13 — Deepfake defense and Nametag partnership 22:15 — User risk scoring and adaptive access 25:26 — Data security: DLP, CASB, and browser-based RDP 27:21 — Microsoft 365 Copilot visibility 29:05 — Partner stories: TachTech and Adapture 33:09 — Zero Trust onboarding with Terraform 35:25 — Key takeaways

    39 min
  3. MAR 6

    AI Deepfakes & Laptop Farms: Inside the 2026 Cloudflare Threat Report

    In this episode of This Week in NET, host João Tomé is joined by Cloudflare threat intelligence experts Brian Carter and Chris Peacey to break down the 2026 Cloudflare Threat Report and what it reveals about today’s cyber threat landscape. We discuss how threat intelligence helps organizations prioritize risks, how attackers are increasingly leveraging automation and AI tools, and why botnets, supply-chain attacks, and credential-theft campaigns continue to evolve. The conversation explores how attackers gain initial access, how criminal ecosystems operate across infrastructure providers and services, and how AI is beginning to influence reconnaissance, social engineering, and large-scale campaigns. We also examine geopolitical dimensions of cyber operations, the growing sophistication of phishing and identity attacks, and the role of threat intelligence in helping defenders anticipate and mitigate attacks before they escalate. Check the full 2026 Cloudflare Threat Report ⏱️ Timestamps 00:12 — Introduction: Special 2026 Threat Report edition 00:58 — Threat Intelligence: Helping organizations prioritize defense 01:53 — Global Trends: Identity weaponization and hyper-volumetric attacks 04:44 — Record-breaking DDoS: Attack volume doubled from 2024 to 2025 05:40 — AI and cybercrime: shrinking the time from access to data theft 08:10 — Living off the Cloud: Malware hidden inside Google Calendar and OneDrive 10:43 — State-sponsored evolution: Cyber activity linked to the Ukraine war 11:28 — Persistent espionage: Chinese and Iranian state actors 13:56 — Industrialized cybercrime: Effectiveness over elegance 16:35 — The recruitment attack: Deepfakes in remote hiring processes 19:01 — Laptop farms: North Korean operators inside Western companies 21:28 — Detecting AI interviewees and “digital tics” 23:13 — Token theft: How attackers bypass MFA protections 25:40 — Human-in-the-loop phishing: Building trust before the payload 27:54 — Infrastructure rug-pulling: The “Nasty Shrew” campaign 31:52 — Advice for CISOs: Managing third-party integration risks 33:55 — Disrupting the chain: Neutralizing 400+ malicious domains in 2025

    35 min
  4. FEB 27

    We Rebuilt Next.js with AI in One Week (vinext Explained)

    In this episode of This Week in NET (the second this week focused on building with AI), host João Tomé is joined by Steve Faulkner, Engineering Director at Cloudflare, to discuss how he rebuilt a Next.js-compatible framework in just one week using AI. The project, called vinext, began as an experiment and evolved into a working proof of concept. We explore what AI-first development looks like in practice, how coding agents were used to rewrite and test large API surfaces, and what happens when you treat dependencies as something you can regenerate rather than maintain manually. The results were surprising: faster local builds, smaller bundles, deployment to Workers with a single command, and a total AI token cost of roughly $1,100. We also discuss: • Using voice-to-code workflows (SuperWhisper + local models) • AI reviewing code multiple times • Whether AI-assisted rebuilds will become common • What this means for 2026 and beyond Mentioned blog posts: How we rebuilt Next.js with AI in one week⏱️ Timestamps  0:12 — Introduction: the latest on the Cloudflare blog (monitoring post-quantum encryption and ASPA routing; JavaScript Streams — why we deserve a better API) 3:22 — Steve’s role and Workers platform overview 4:34 — How the idea came to be 6:11 — When AI tools became “good enough” 7:13 — Tooling setup: OpenCode, Claude, parallel agents 9:03 — AI beyond coding: management and markdown workflows 10:58 — What AI-first development actually means 12:03 — Performance gains: 4x faster builds, 57% smaller bundles 14:11 — ~$100 in tokens: the real cost 15:35 — Deploying to Workers with one command 17:25 — Community feedback and early adoption 19:09 — Will AI rebuild other frameworks? 20:25 — Voice-to-code workflows (SuperWhisper, Parakeet) 23:31 — Traffic-Aware Pre-Generation (TPR) explained 25:23 — Production caution and security 26:19 — How to get started (use AI to migrate your app) 27:12 — The big takeaway: AI is changing how we build software

    27 min

About

This Week in NET is Cloudflare’s weekly roundup exploring the Internet’s past, present, and future. Hosted by João Tomé with expert guests, it shares insights that matter to developers, businesses, and Internet enthusiasts alike. Follow us on X: @CloudflareTV and @Cloudflare Read our blog posts at blog.cloudflare.com Watch our full video library at cloudflare.tv/ThisWeekInNet

You Might Also Like