The mechanics behind the headlines
Every connection your device makes starts with a DNS query. The answer to that query determines where you actually end up. Here is exactly how that system gets compromised — and why the fix has existed for twenty years without being deployed.
On January 22, 2026, nine lines were removed from a configuration file in Miami. Twenty-five minutes later, Cloudflare's engineers were manually reverting the change. Here is exactly what happened — and what it reveals about the protocol routing all global internet traffic.
A missing verification branch in the vdaemon control-plane service lets any unauthenticated attacker become a trusted SD-WAN peer — and from there, rewrite routing policy across every edge site.