Cloudflare and X face separate automated traffic and security challenges

Cloudflare is implementing new default settings for automated traffic on September 15, 2026. On pages displaying advertisements, traffic categorized as ‘Training’ and ‘Agent’ will be blocked by default, while ‘Search’ traffic remains permitted. Cloudflare’s rationale is that advertising indicates a site owner intends to attract human readers rather than content scrapers. However, site owners face a technical dilemma: blocking ‘Training’ bots may inadvertently block major search engines like Googlebot, Bingbot, and Applebot, potentially impacting SEO.

Separately, thousands of users on X, including prominent figures in the cryptocurrency community, have reported receiving a massive wave of unsolicited password reset emails. Some users reported receiving up to ten emails within a few hours. While X states there is no evidence of a system breach, the surge coincides with the rollout of X Money. Experts suggest the coordinated effort may be targeting crypto-related accounts and recommend that users immediately enable two-factor authentication and password reset protection.