{"schema_version":"onlylabs.public_signal.v1","title":"Cloudflare (Workers AI) Writing: Yandex outage: Data shows that instead of going dark, malicious bots went on the move","description":"Cloudflare (Workers AI) writing signal with public source context, captured evidence pages, related signals, and category-scoped analysis context.","url":"https://onlylabs.fyi/signals/8e3dced7-baac-4806-aeb0-642479815a23","json_url":"https://onlylabs.fyi/signals/8e3dced7-baac-4806-aeb0-642479815a23/signal.json","generated_at":"2026-10-25T18:28:34.103Z","evidence_latest_fetched_at":"2026-10-15T00:02:38.023298+00:00","signal_first_seen_at":"2026-10-15T00:00:52.967743+00:00","org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud","category_label":"Neocloud","dossier_url":"https://onlylabs.fyi/labs/cloudflare","dossier_json_url":"https://onlylabs.fyi/labs/cloudflare/dossier.json"},"related_urls":{"signal":"https://onlylabs.fyi/signals/8e3dced7-baac-4806-aeb0-642479815a23","signal_json":"https://onlylabs.fyi/signals/8e3dced7-baac-4806-aeb0-642479815a23/signal.json","source":"https://blog.cloudflare.com/yandex-outage/","lab_dossier":"https://onlylabs.fyi/labs/cloudflare","lab_dossier_json":"https://onlylabs.fyi/labs/cloudflare/dossier.json","analysis":"https://onlylabs.fyi/analysis/cloudflare","analysis_json":"https://onlylabs.fyi/analysis/cloudflare/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","category":"https://onlylabs.fyi/neoclouds","category_json":"https://onlylabs.fyi/neoclouds.json","category_feed":"https://onlylabs.fyi/neoclouds/feed.xml","category_signals_json":"https://onlylabs.fyi/signals.json?category=neocloud","topic":"https://onlylabs.fyi/topics/talking","topic_signals_json":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","topic_feed":"https://onlylabs.fyi/topics/talking/feed.xml?category=neocloud","data_business":null},"answer_pack":{"answer":"Cloudflare (Workers AI) published Yandex outage: Data shows that instead of going dark, malicious bots went on the move. This talking signal gives public context for research themes, product direction, policy, or launch framing. High-signal details: Substantive data analysis post with moderate HN traction. · Yandex outage: data shows that instead of going dark, malicious bots went on the move | Cloudflare Blog Skip to content Following reported strikes on Yandex data.... onlylabs links this event to 1 captured evidence page and 6 related writing signals.","signal_desk":"talking","source_context":{"source_url":"https://blog.cloudflare.com/yandex-outage/","source_host":"blog.cloudflare.com","occurred_at":"2026-10-14T20:24:19+00:00","first_seen_at":"2026-10-15T00:00:52.967743+00:00","date_source":"rss.item_date","context":null},"context_markers":[{"label":"Lab","value":"Cloudflare (Workers AI)","source":"signal"},{"label":"Signal desk","value":"talking","source":"signal"},{"label":"Source host","value":"blog.cloudflare.com","source":"source"},{"label":"Author","value":"Marina Elmore","source":"source"},{"label":"Notability","value":"Substantive data analysis post with moderate HN traction.","source":"signal"},{"label":"HN","value":"Skeptical that strikes disrupted Russian bots; impact on Russian cloud services more significant.","source":"source"},{"label":"Watch term","value":"Infrastructure","source":"evidence"},{"label":"Watch term","value":"Agents and tool use","source":"evidence"}],"evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://blog.cloudflare.com/yandex-outage/"],"related_signals":6,"has_source_url":true,"latest_page_fetched_at":"2026-10-15T00:02:38.023298+00:00"},"data_business":{"matches":false,"lanes":[],"matched_terms":[],"score":null,"reason":null},"agent_handoff":{"signal_json":"https://onlylabs.fyi/signals/8e3dced7-baac-4806-aeb0-642479815a23/signal.json","dossier_json":"https://onlylabs.fyi/labs/cloudflare/dossier.json","analysis_json":"https://onlylabs.fyi/analysis/cloudflare/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","topic_signals_json":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","topic_feed":"https://onlylabs.fyi/topics/talking/feed.xml?category=neocloud","category_signals_json":"https://onlylabs.fyi/signals.json?category=neocloud","data_radar_json":null,"opportunities_json":null},"analysis_playbook":{"objective":"Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.","evidence_focus":["post title","source URL","captured page text","HN traction","linked model or paper references","publication date"],"extraction_questions":["Which themes are labs choosing to explain publicly?","Which posts are attracting outside discussion?","Which writing reframes a recent release, model, hiring wave, or policy stance?","Which posts mention data, evals, infrastructure, safety, or deployment workflows?"],"signal_questions":["What public theme, launch framing, or research direction does this writing signal expose?","Which themes are labs choosing to explain publicly?","Which posts are attracting outside discussion?","Do the 6 related writing signals show a repeated pattern?"],"output_fields":["org","theme","public_framing","traction","evidence_url"],"data_business_relevance":"Data-business lane extraction is scoped to frontier labs; for this category, keep conclusions tied to category-specific strategy, source evidence, and follow-up questions.","required_sources":[{"label":"signal_json","url":"https://onlylabs.fyi/signals/8e3dced7-baac-4806-aeb0-642479815a23/signal.json","required":true},{"label":"source","url":"https://blog.cloudflare.com/yandex-outage/","required":true},{"label":"dossier_json","url":"https://onlylabs.fyi/labs/cloudflare/dossier.json","required":true},{"label":"analysis_evidence_json","url":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","required":true},{"label":"topic_signals_json","url":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","required":false},{"label":"data_radar_json","url":null,"required":false}],"expected_output":["one-paragraph source-grounded interpretation","category-specific implication","confidence and missing evidence","recommended next source to inspect"],"prompt_seed":"Using only the linked onlylabs JSON, captured source context, and cited evidence, analyze Cloudflare (Workers AI)'s writing signal \"Yandex outage: Data shows that instead of going dark, malicious bots went on the move\" for neocloud strategy."},"semantic_triples":[{"subject":"Cloudflare (Workers AI)","predicate":"published","object":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","text":"Cloudflare (Workers AI) published Yandex outage: Data shows that instead of going dark, malicious bots went on the move."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"is classified as","object":"writing signal","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move is classified as writing signal."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"belongs to","object":"talking desk","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move belongs to talking desk."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has evidence coverage","object":"1 captured evidence page","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has evidence coverage 1 captured evidence page."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has captured page count","object":"1","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has captured page count 1."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has readable page count","object":"1","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has readable page count 1."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has related signal count","object":"6","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has related signal count 6."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has analysis playbook objective","object":"Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has analysis playbook objective Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has source host","object":"blog.cloudflare.com","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has source host blog.cloudflare.com."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has lab","object":"Cloudflare (Workers AI)","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has lab Cloudflare (Workers AI)."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has signal desk","object":"talking","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has signal desk talking."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has source host","object":"blog.cloudflare.com","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has source host blog.cloudflare.com."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has author","object":"Marina Elmore","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has author Marina Elmore."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has notability","object":"Substantive data analysis post with moderate HN traction.","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has notability Substantive data analysis post with moderate HN traction.."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has hn","object":"Skeptical that strikes disrupted Russian bots; impact on Russian cloud services more significant.","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has hn Skeptical that strikes disrupted Russian bots; impact on Russian cloud services more significant.."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has watch term","object":"Infrastructure","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has watch term Infrastructure."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has watch term","object":"Agents and tool use","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has watch term Agents and tool use."}]},"intelligence":{"signal_desk":"talking","answer":"Cloudflare (Workers AI) published Yandex outage: Data shows that instead of going dark, malicious bots went on the move. This talking signal gives public context for research themes, product direction, policy, or launch framing. High-signal details: Substantive data analysis post with moderate HN traction. · Yandex outage: data shows that instead of going dark, malicious bots went on the move | Cloudflare Blog Skip to content Following reported strikes on Yandex data.... onlylabs links this event to 1 captured evidence page and 6 related writing signals.","semantic_triples":[{"subject":"Cloudflare (Workers AI)","predicate":"published","object":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","text":"Cloudflare (Workers AI) published Yandex outage: Data shows that instead of going dark, malicious bots went on the move."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"is classified as","object":"writing signal","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move is classified as writing signal."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"belongs to","object":"talking desk","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move belongs to talking desk."},{"subject":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","predicate":"has evidence coverage","object":"1 captured evidence page","text":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move has evidence coverage 1 captured evidence page."}]},"signal":{"id":"8e3dced7-baac-4806-aeb0-642479815a23","url":"https://onlylabs.fyi/signals/8e3dced7-baac-4806-aeb0-642479815a23","json_url":"https://onlylabs.fyi/signals/8e3dced7-baac-4806-aeb0-642479815a23/signal.json","source_url":"https://blog.cloudflare.com/yandex-outage/","title":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","summary":"Cloudflare (Workers AI) published a writing signal. onlylabs watches public writing for research themes, product direction, and model-launch context.","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-14T20:24:19+00:00","first_seen_at":"2026-10-15T00:00:52.967743+00:00","date_source":"rss.item_date","evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://blog.cloudflare.com/yandex-outage/"]},"facets":{},"traction":{"github_stars":null,"hn_points":191,"hn_comments":60,"hn_story_id":"50094673","hf_downloads":null,"hf_likes":null},"data_radar":null},"primary_evidence_page":{"is_primary":true,"source_match":true,"url":"https://blog.cloudflare.com/yandex-outage/","final_url":"https://blog.cloudflare.com/yandex-outage/","title":"Yandex outage: Data shows that instead of going dark, malicious bots went on the move","http_status":200,"content_type":"text/html","capture_method":"plain","fetched_at":"2026-10-15T00:02:38.023298+00:00","bytes":290198,"raw_path":"049f752dea89d9de43df6a2f2d378e1a5c15ce46de51e6dad72c9687d734c2c7.html","content_hash":"89e1fc30f270df791c54a313a89a03ab1c0594f10578fdf514d07acae9c0869e","excerpt_chars":1200,"truncated":true,"excerpt":"Yandex outage: data shows that instead of going dark, malicious bots went on the move | Cloudflare Blog Skip to content Following reported strikes on Yandex data centers, claims circulated on the Internet that Russian bot farms and influence operations had been knocked offline. HTTP traffic charts showed steep drops, fueling speculation that the infrastructure damage had stopped these malicious actors. However, aggregate traffic metrics can easily mislead. There are two autonomous system numbers ( ASNs ) associated with Yandex: AS13238 is used by Yandex’s search engine, while AS200350 runs its cloud services. Using Cloudflare Radar and Bot Management data, we analyzed how these two ASNs were affected — and while both saw drops in traffic, they saw differing impact. Yandex Search (AS13238) : The drop in traffic consisted almost entirely of verified search crawlers indexing web pages, images, and site resources. Yandex.Cloud (AS200350): There was a decline in malicious activities like vulnerability scanning and probing, but high-volume automation did not vanish — it simply migrated to other hosting providers. While malicious traffic may originate from a particular provider, it does..."},"evidence_pages":[],"related_signals":[{"id":"9c9d357b-b379-4de0-ab2c-30764ba08632","url":"https://onlylabs.fyi/signals/9c9d357b-b379-4de0-ab2c-30764ba08632","source_url":"https://blog.cloudflare.com/origin-range-requests/","title":"Origin Range Requests: Serving large files without range-request tuning","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-23T18:22:59+00:00","first_seen_at":"2026-10-23T20:00:52.925659+00:00","date_source":"rss.item_date"},{"id":"36b8c4da-4f96-4abc-8a89-7ff3e47942cd","url":"https://onlylabs.fyi/signals/36b8c4da-4f96-4abc-8a89-7ff3e47942cd","source_url":"https://blog.cloudflare.com/post-quantum-geo-key-manager/","title":"Bringing post-quantum cryptography to geographically fenced key management","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-23T18:06:56+00:00","first_seen_at":"2026-10-23T20:00:52.925659+00:00","date_source":"rss.item_date"},{"id":"d9e0cfd4-b38f-4c15-bd9e-81cfe0ac8dfb","url":"https://onlylabs.fyi/signals/d9e0cfd4-b38f-4c15-bd9e-81cfe0ac8dfb","source_url":"https://blog.cloudflare.com/k-isms/","title":"Localizing compliance at scale: achieving South Korea’s ISMS certification","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-22T13:00:00+00:00","first_seen_at":"2026-10-22T16:00:54.670606+00:00","date_source":"rss.item_date"},{"id":"c52bb1e0-df36-4ab7-b8cd-a48a6f37dfef","url":"https://onlylabs.fyi/signals/c52bb1e0-df36-4ab7-b8cd-a48a6f37dfef","source_url":"https://blog.cloudflare.com/full-transaction-waf/","title":"Introducing full transaction detection for Cloudflare WAF","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-21T14:10:42+00:00","first_seen_at":"2026-10-21T16:00:52.275864+00:00","date_source":"rss.item_date"},{"id":"6c59f359-43de-4c9d-be79-876752c91605","url":"https://onlylabs.fyi/signals/6c59f359-43de-4c9d-be79-876752c91605","source_url":"https://blog.cloudflare.com/php-vulnerabilities-waf-protection/","title":"Cloudflare deploys protections against php2shell vulnerability","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-21T13:56:45+00:00","first_seen_at":"2026-10-21T16:00:52.275864+00:00","date_source":"rss.item_date"},{"id":"7cf512fd-f264-4ff0-ba38-acd212a3e47e","url":"https://onlylabs.fyi/signals/7cf512fd-f264-4ff0-ba38-acd212a3e47e","source_url":"https://blog.cloudflare.com/webmcp-commerce/","title":"How Commerce.com and Cloudflare are getting storefronts ready for AI agents","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-10-21T13:00:00+00:00","first_seen_at":"2026-10-21T16:00:52.275864+00:00","date_source":"rss.item_date"}]}